Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tc72hT9oOb188uo4wvWlJb-zHrM.roa
File: tc72hT9oOb188uo4wvWlJb-zHrM.roa (raw, json)
Hash identifier: ebKb8GDEFCUu/DkaKLg2lz/vrdr+LZvYj1UDSd7YCTA=
Subject key identifier: B5:CE:F6:85:3F:68:39:BD:7C:F2:EA:38:C2:F5:A5:25:BF:B3:1E:B3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1BDE4E65BF1BF96484B3C473008F5B2B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tc72hT9oOb188uo4wvWlJb-zHrM.roa
Signing time: Tue 10 Oct 2023 23:13:55 +0000
ROA not before: Tue 10 Oct 2023 23:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1b:de:4e:65:bf:1b:f9:64:84:b3:c4:73:00:8f:5b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 23:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5cef6853f6839bd7cf2ea38c2f5a525bfb31eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:62:25:f3:94:f5:ad:27:2b:03:b4:5c:c8:
fc:09:21:f1:fc:68:fd:14:4e:c6:31:9f:e5:58:52:
59:d9:14:4e:79:78:a4:e0:bb:4f:05:8f:9b:8a:a2:
c7:a2:be:4d:3b:5c:8a:f5:f0:79:dd:3c:34:4f:b1:
b7:e2:9e:61:7a:f6:a0:86:5b:f7:e2:53:e5:3b:7e:
ac:e2:d0:6f:4b:4a:39:79:52:da:32:23:62:46:49:
d3:0f:bd:73:66:0a:2f:39:c0:5d:cd:18:b6:54:50:
90:13:c2:77:33:33:56:43:f0:c9:31:0d:e1:bd:45:
7f:5b:57:0f:20:25:79:b4:2f:bf:74:d3:4c:0e:f9:
c1:15:31:5b:de:dc:d1:f7:d4:93:13:af:a4:a5:fa:
79:12:5e:92:02:25:7d:59:29:74:f3:89:a3:57:b4:
82:e5:db:e4:cb:07:0a:75:2d:1d:c9:69:74:61:7d:
f8:56:dc:f6:e6:c6:71:7d:90:04:a8:89:b2:50:83:
34:ac:3b:48:cd:9b:8b:db:fb:41:7c:6d:94:7a:b7:
01:c0:60:53:e2:8a:7f:1c:33:a7:f3:3d:f5:25:61:
95:4a:51:25:3e:04:4b:19:92:bb:b0:81:ac:73:ff:
42:e5:17:35:91:b5:52:aa:b1:3f:7a:0a:c3:b3:f9:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CE:F6:85:3F:68:39:BD:7C:F2:EA:38:C2:F5:A5:25:BF:B3:1E:B3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tc72hT9oOb188uo4wvWlJb-zHrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:b2:19:af:44:30:24:c6:37:15:f7:b4:18:de:b2:d1:2a:aa:
0c:61:b7:ce:e6:79:ca:f1:c1:09:58:82:33:28:28:cb:46:63:
14:fb:df:39:6a:1a:ff:71:a4:a7:cb:8d:5a:af:a8:b9:b4:75:
c3:70:a4:fd:c8:f0:02:cb:8a:4f:20:92:5b:7c:ad:ca:c4:7c:
10:8e:ea:a3:54:6a:48:d0:75:7e:1b:93:16:82:70:ce:fb:38:
ec:da:78:e7:52:48:67:71:43:3b:51:e9:e7:14:ee:58:48:1d:
ae:c1:f8:a7:2d:2a:aa:d9:46:bf:e6:c1:fe:24:b3:47:f7:38:
c2:6f:9f:53:5f:92:98:e4:59:87:47:d0:1b:8a:f1:6b:ab:a4:
be:c2:f2:75:87:3c:a0:77:aa:da:3a:0e:db:29:f2:81:7c:05:
54:42:7d:b5:c9:04:d5:3e:3a:4e:66:93:81:b6:f7:5d:81:a9:
29:15:a6:6b:23:6a:41:c4:4b:13:7d:33:f0:33:08:c8:fb:40:
ee:4c:86:fc:db:6a:a2:24:2b:28:63:5a:09:2c:e5:31:2d:42:
ed:73:50:e8:8b:35:d5:a3:a6:2c:9f:88:6b:c4:e5:c4:3d:be:
ce:60:4d:19:86:5f:8f:82:f3:32:24:02:b6:25:fc:10:f6:0b:
d4:64:cd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:01:36 2025 by rpki-client