Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tTVcohxYdg-52E4BBbmvSbL0urk.roa
File: tTVcohxYdg-52E4BBbmvSbL0urk.roa (raw, json)
Hash identifier: xy6nA3LCecpt64DCfrF88YLjGWoDRaVzCAdN5sR6+xI=
Subject key identifier: B5:35:5C:A2:1C:58:76:0F:B9:D8:4E:01:05:B9:AF:49:B2:F4:BA:B9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B842B0E357C228D3A387DA4FA93735F4E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tTVcohxYdg-52E4BBbmvSbL0urk.roa
Signing time: Tue 31 Oct 2023 05:18:16 +0000
ROA not before: Tue 31 Oct 2023 05:18:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:84:2b:0e:35:7c:22:8d:3a:38:7d:a4:fa:93:73:5f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 05:18:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5355ca21c58760fb9d84e0105b9af49b2f4bab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:d4:53:ee:21:43:7d:58:ad:2b:e3:b4:3e:
52:b3:fe:60:53:27:f5:92:53:a1:f2:34:a8:55:72:
eb:72:28:ce:a0:2c:0a:c8:4b:a5:c8:f5:dc:b7:40:
c6:be:df:38:63:45:5a:2b:cb:d9:9c:a5:0a:12:26:
32:87:0a:51:6f:d8:cb:50:b0:85:f4:82:e3:d5:4f:
dc:e1:ad:d2:17:05:2d:97:19:89:ef:4b:cd:c3:8e:
0b:11:0a:63:e2:f6:ac:2b:f6:1b:69:37:cc:33:e7:
c4:ea:23:d5:80:8e:6f:ab:0f:6d:51:d1:26:16:ef:
36:e1:32:5c:21:21:7f:b2:39:48:a4:ac:90:64:85:
98:fa:d5:79:8c:d5:0c:be:e4:0c:5f:d1:ef:e6:c2:
d3:37:0d:eb:0a:cb:71:48:29:6c:3b:40:56:e6:cf:
c7:dc:d1:7f:83:e8:a8:05:07:cb:28:d5:fe:da:85:
b3:70:9a:4f:e1:83:4f:d2:ff:81:ea:78:42:b9:da:
be:f3:e4:3d:a5:67:a9:f0:52:8d:96:86:49:61:31:
04:fe:1a:b7:9c:f4:06:14:92:92:17:f3:70:db:37:
f6:02:68:08:59:8a:06:b4:55:b9:56:94:66:14:bc:
9c:fc:82:e7:e5:8e:2d:ec:83:6c:d5:98:03:79:ed:
a2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:35:5C:A2:1C:58:76:0F:B9:D8:4E:01:05:B9:AF:49:B2:F4:BA:B9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tTVcohxYdg-52E4BBbmvSbL0urk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:01:2a:f6:68:ba:27:c0:e7:1b:c2:45:fa:d0:c8:26:ba:9f:
72:df:61:09:87:a8:d4:e7:a7:74:18:f3:01:cd:ad:f2:03:b2:
b7:cd:0c:6c:46:9c:d9:6a:8a:ea:a6:a2:4a:10:5d:b5:fa:9c:
e3:5c:ee:61:a0:96:f2:31:b5:b4:4c:9a:29:f8:b4:82:c0:7f:
c6:60:f5:52:f4:57:51:4d:15:22:46:ac:12:e1:5d:a2:c6:bc:
6a:69:84:a1:bf:39:2b:a6:1b:e3:39:87:2d:6e:3a:89:dc:ce:
4e:ba:ce:8b:10:fb:47:03:40:1c:b7:96:60:11:55:58:4e:36:
fb:9e:94:ef:f2:78:eb:1f:f8:71:f2:77:ec:70:5c:6b:fb:b7:
38:8f:6e:5e:ff:bf:c5:b5:95:7d:58:97:05:ef:44:23:51:b2:
07:b6:ec:8c:50:e9:35:2b:0a:9f:0c:f5:14:79:e3:97:3b:3d:
ca:22:26:98:35:c5:b0:42:80:40:aa:7f:12:38:21:c6:d0:79:
56:c6:9f:1d:0d:18:26:f8:6f:71:d4:2f:64:4b:a4:eb:f1:b5:
c0:d7:d9:7d:0f:c9:00:ca:09:0e:ea:96:68:0b:5e:c6:2e:e8:
0d:9b:e6:80:8f:b8:f6:93:9b:74:41:bb:86:4c:62:29:8d:97:
ea:54:2d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:55:35 2025 by rpki-client