Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/TFFI-Sd2OaU07XF54k554yz0yWo.roa
File: TFFI-Sd2OaU07XF54k554yz0yWo.roa (raw, json)
Hash identifier: ERc7pPs3locJPOXmnawwSf/AshBTGIs9juUaUuByE0w=
Subject key identifier: 4C:51:48:F9:27:76:39:A5:34:ED:71:79:E2:4E:79:E3:2C:F4:C9:6A
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9C32CEFFE73C2F637FE9CF24A4B29A30
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/TFFI-Sd2OaU07XF54k554yz0yWo.roa
Signing time: Sat 16 Sep 2023 04:14:50 +0000
ROA not before: Sat 16 Sep 2023 04:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9c:32:ce:ff:e7:3c:2f:63:7f:e9:cf:24:a4:b2:9a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 16 04:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c5148f9277639a534ed7179e24e79e32cf4c96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:06:e2:36:75:d1:a0:63:82:4c:a8:8d:88:6e:
e6:61:55:c0:2c:6c:6e:ae:97:80:44:fd:d2:2b:93:
1b:a6:95:6d:de:ab:8f:37:f4:bb:c8:e2:4f:42:e9:
7d:72:50:b0:6b:5e:22:36:d4:19:1f:60:d4:13:47:
cb:ce:d4:b0:f2:f2:bc:0c:8b:26:fa:b7:33:fa:19:
ee:77:09:96:48:b1:0f:ce:ee:3b:c2:46:9f:93:cf:
56:ab:c6:dd:ab:97:09:b6:99:c3:2c:33:1d:33:c2:
9f:ac:35:3d:ed:c9:11:4b:99:29:50:7f:b7:d0:a1:
e5:7e:58:28:9f:b3:b8:57:dd:f1:ec:4f:10:aa:15:
4f:84:93:14:0a:2e:16:1f:ce:5d:6b:8a:29:82:54:
8f:bb:a1:ad:e4:6b:d4:56:ed:7d:93:9c:db:aa:06:
ed:4b:8a:d1:0f:45:f7:5c:a9:ed:d3:ac:55:d4:64:
b1:97:8f:24:35:78:75:8a:d2:32:61:7a:fc:09:61:
6d:8e:07:16:e5:f3:d6:83:80:30:48:06:c9:4f:81:
62:7d:0d:40:68:8c:1c:3e:94:ea:73:b1:07:f0:91:
6d:b8:1e:b3:50:7e:63:d0:26:3a:49:0c:ce:7c:d9:
55:dd:0f:ff:7c:8a:90:fd:f8:2a:5f:74:90:47:a0:
b0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:51:48:F9:27:76:39:A5:34:ED:71:79:E2:4E:79:E3:2C:F4:C9:6A
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/TFFI-Sd2OaU07XF54k554yz0yWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:13:f4:f3:b1:d7:e9:2e:85:c1:9b:a8:97:7c:07:0c:45:dc:
88:4b:d9:c4:8d:46:94:86:0a:cc:ca:a3:ff:bf:6f:1c:a5:d7:
34:e6:d6:c7:d1:3f:0c:f1:71:49:d4:21:2a:51:38:e0:7f:34:
c6:a6:b8:be:0f:da:46:8f:f6:03:04:12:94:41:d6:6f:d9:92:
4b:a5:0c:04:74:9f:19:80:88:a7:e7:52:86:42:20:ec:97:a2:
a8:05:b0:97:cc:e0:a2:1e:ee:e9:45:8f:49:6c:0c:08:41:0f:
46:14:ab:c9:d1:5f:b8:e7:73:09:14:c7:47:f3:e3:92:c5:dd:
e6:4a:a3:6a:43:e1:0e:b2:e7:a7:8e:9d:47:9b:ff:93:b7:d0:
07:a8:78:95:cd:b8:17:b4:5b:17:98:27:2f:f6:74:81:a0:a7:
48:f1:82:3d:30:06:ea:3e:36:c9:f6:3f:94:92:6d:f8:cc:8f:
16:7f:7c:28:70:9b:8c:3c:66:de:9d:4c:6f:0c:e7:f2:ef:f6:
88:77:d8:42:20:1c:1c:1d:41:d2:e4:f4:10:8b:30:8c:ad:c7:
5a:d4:e1:d1:66:04:c6:36:09:e9:ce:ca:a6:f8:ec:03:e8:92:
4d:bf:44:17:73:98:74:52:5c:af:a8:28:0b:15:8b:a9:6e:bc:
11:c7:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:03 2025 by rpki-client