Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sTpspAFX4MkducD82XcRCmioJvY.roa
File: sTpspAFX4MkducD82XcRCmioJvY.roa (raw, json)
Hash identifier: tJgR9Qpv4tW6ZxCzpelPRmaC6rF4F9WoV5adEc6Lvjw=
Subject key identifier: B1:3A:6C:A4:01:57:E0:C9:1D:B9:C0:FC:D9:77:11:0A:68:A8:26:F6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4B0EA7A2F60FD2091C55CC2B4E48A421
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sTpspAFX4MkducD82XcRCmioJvY.roa
Signing time: Fri 08 Dec 2023 20:11:40 +0000
ROA not before: Fri 08 Dec 2023 20:11:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4b:0e:a7:a2:f6:0f:d2:09:1c:55:cc:2b:4e:48:a4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 20:11:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b13a6ca40157e0c91db9c0fcd977110a68a826f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:47:df:42:49:ff:d8:f8:b1:fd:f8:92:cc:
77:e2:7e:8c:42:f7:96:59:93:47:b2:3a:e1:33:ad:
7d:42:a5:d5:c6:3e:81:e6:be:d7:da:6f:88:cd:a3:
8b:4a:f9:70:87:77:2a:6c:9f:85:43:30:5c:27:d2:
70:0f:e2:87:0a:22:09:61:ae:08:fb:64:40:25:61:
b4:24:5d:bb:78:51:56:0d:d8:81:19:38:7c:91:66:
41:56:ff:43:88:2b:ca:7f:bb:0c:9f:2f:7c:ee:6c:
7f:15:4c:c0:52:a4:63:dd:8e:68:c5:ca:95:8c:14:
f7:90:e2:f4:2e:94:a3:67:94:57:ba:0a:99:a3:58:
f2:3d:e7:b8:66:6c:74:71:13:2c:8a:b0:af:a6:a8:
cf:0b:39:28:31:f9:69:00:1d:49:d3:b6:10:ee:f4:
22:8c:89:eb:81:02:5e:d6:b1:b3:24:53:91:f6:5a:
5a:fd:fc:80:dc:b6:91:4c:6d:fb:86:8c:7d:2a:3e:
0e:ed:62:e8:c9:77:c0:ef:83:57:a2:92:30:a7:9c:
9e:9d:f7:6b:59:93:12:24:98:ca:c9:26:1c:05:3c:
5d:63:70:a8:2b:8f:1b:40:43:1a:c9:6f:d1:c5:cb:
47:50:db:87:de:10:48:e7:90:fb:1b:b2:69:59:e8:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3A:6C:A4:01:57:E0:C9:1D:B9:C0:FC:D9:77:11:0A:68:A8:26:F6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sTpspAFX4MkducD82XcRCmioJvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:63:a5:e2:2c:e2:20:29:dc:59:64:a1:99:aa:74:e3:70:3c:
cd:e8:ce:c7:4e:03:2e:83:3f:9a:6c:ad:5e:cb:0d:d5:4c:c6:
56:9f:aa:30:d6:62:c6:99:29:b6:dc:0e:f1:bd:f6:6a:1b:dc:
1f:77:09:0e:97:b3:8b:45:70:6c:6e:e2:05:43:45:f9:37:e8:
10:1d:61:45:2e:54:11:13:6f:ae:a7:d6:40:5e:c2:b4:ef:28:
3b:7c:4d:f6:b3:86:50:c9:6c:cc:7a:31:3a:f9:22:76:ed:7f:
65:c7:07:bc:7b:7d:81:19:26:eb:4c:39:5a:7e:a3:6e:ae:1f:
2f:e7:9c:2f:23:69:e7:46:ed:71:1c:90:f1:74:43:eb:72:d3:
a8:e8:5f:f0:08:c9:69:7d:bf:78:d2:aa:66:6c:b5:ed:fc:3c:
ca:5a:a2:09:9e:5a:e2:b5:20:77:ac:e3:e0:a5:5b:c8:25:7a:
03:0a:22:3c:64:b8:41:c1:d8:17:50:00:58:8e:a8:b1:42:54:
b4:ba:4e:61:ca:a4:1d:75:82:2a:70:4d:79:9b:bb:ab:82:76:
eb:6c:be:ac:eb:44:02:0e:30:1e:1c:9e:55:89:b0:72:e3:6e:
42:38:4c:05:46:f3:c0:43:92:c8:f5:9c:6f:c4:12:dd:26:43:
c1:91:1a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:35:44 2025 by rpki-client