Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tu2MZOyhHGS0_kMfZaHY0w5InAw.roa
File: tu2MZOyhHGS0_kMfZaHY0w5InAw.roa (raw, json)
Hash identifier: Sjl/YWelOl9Oyp1n0yF3AsJ79Rdid/xQSs/2ruSgymo=
Subject key identifier: B6:ED:8C:64:EC:A1:1C:64:B4:FE:43:1F:65:A1:D8:D3:0E:48:9C:0C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1981256806BE631FC8DC640306E7C928
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tu2MZOyhHGS0_kMfZaHY0w5InAw.roa
Signing time: Tue 10 Oct 2023 12:12:55 +0000
ROA not before: Tue 10 Oct 2023 12:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:81:25:68:06:be:63:1f:c8:dc:64:03:06:e7:c9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 12:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6ed8c64eca11c64b4fe431f65a1d8d30e489c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:9d:84:a0:26:99:e3:ee:6c:a6:20:b5:1b:
85:c2:10:72:fb:08:11:c2:f1:f0:e1:55:d4:74:2c:
1c:14:f2:70:25:41:ba:58:b5:8b:0a:1b:83:88:36:
49:c8:5d:dc:27:4d:d1:b3:10:33:a4:2b:4a:21:05:
84:a4:fb:fc:85:76:8d:bd:1c:b1:c5:f9:92:4e:55:
5b:55:c6:69:3c:2d:c3:50:ba:13:47:46:5d:15:3b:
3e:15:c6:e4:39:c1:ef:96:b6:7e:7b:b8:61:36:21:
73:17:30:07:7b:fb:ee:97:9f:1f:c5:d3:ca:e4:bc:
cd:70:7b:34:6f:02:28:fa:f1:88:60:60:3f:43:3e:
91:f8:6e:b0:6a:dc:fd:e8:40:8d:fb:f1:cd:e4:e8:
3e:5e:1e:24:8c:52:7e:f8:6e:4e:0a:8c:2c:62:33:
a9:eb:66:1d:97:ad:91:fa:7f:5f:68:87:9e:bc:fc:
07:56:57:02:a9:3a:5b:fe:27:32:9f:ba:af:91:31:
32:e1:ba:33:ea:b3:6b:e9:11:fd:6d:a2:69:1b:79:
ca:14:47:46:38:ef:7c:e3:b9:3d:43:32:06:88:30:
f0:d8:8d:37:20:47:fa:0a:55:ac:df:d2:7a:db:45:
b0:7e:39:17:92:40:05:53:a0:64:01:34:f4:bd:29:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:ED:8C:64:EC:A1:1C:64:B4:FE:43:1F:65:A1:D8:D3:0E:48:9C:0C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tu2MZOyhHGS0_kMfZaHY0w5InAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:ed:6d:04:08:7e:3e:59:64:3a:4a:ac:56:07:b5:c4:76:33:
56:a9:3a:4d:ac:86:1c:0c:49:05:45:3b:cf:44:d4:71:16:6c:
61:59:c4:b9:e7:47:6a:e8:1c:c0:14:67:ab:a3:f9:50:c6:e6:
0c:00:98:14:16:49:13:a6:df:d9:b3:b3:80:c6:66:31:7e:e8:
8a:d2:2b:75:59:d8:1c:61:da:ee:8a:a1:6f:93:f8:8b:d2:69:
d3:73:4d:e8:97:35:f3:35:f6:94:50:66:80:e0:ad:f5:15:a9:
8c:50:93:a3:7b:8a:3a:4a:e6:ed:9d:d4:94:ce:ba:b5:f4:b3:
a3:82:65:cd:24:b1:66:45:f4:68:71:bf:af:bc:aa:e4:6b:7d:
af:33:ac:39:26:0e:55:82:ca:14:45:ff:ae:a5:96:c7:90:75:
8a:b7:28:44:22:c4:e7:d2:fa:e5:03:5c:59:8a:2c:55:97:f3:
2b:0e:c5:56:0e:c2:68:89:c7:59:88:51:fd:4d:41:6f:50:18:
13:e5:9f:60:f6:ef:e4:c2:04:72:de:ac:02:64:c7:2f:22:c2:
de:fc:65:06:52:58:f5:66:c7:62:d6:0d:cb:0d:eb:93:ed:4b:
27:51:fb:f5:48:4a:c2:f5:07:80:ed:e0:7f:56:ab:da:f0:87:
dd:11:9f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:57:44 2025 by rpki-client