Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TdaKXUQhatzpQvCn_5ftF4m3E1A.roa
File: TdaKXUQhatzpQvCn_5ftF4m3E1A.roa (raw, json)
Hash identifier: jK9hGjqKU0Sq0fk1Q5ynmoM6Dpjc/fp0KdjnuLOkfiI=
Subject key identifier: 4D:D6:8A:5D:44:21:6A:DC:E9:42:F0:A7:FF:97:ED:17:89:B7:13:50
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA59ED219C9311DC47EEA2EC9AE7C415E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TdaKXUQhatzpQvCn_5ftF4m3E1A.roa
Signing time: Tue 26 Dec 2023 10:14:58 +0000
ROA not before: Tue 26 Dec 2023 10:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a5:9e:d2:19:c9:31:1d:c4:7e:ea:2e:c9:ae:7c:41:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 26 10:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dd68a5d44216adce942f0a7ff97ed1789b71350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:e1:58:ba:30:67:9b:03:27:eb:07:cb:92:
55:ec:9c:da:b5:f0:0f:33:3f:80:af:64:51:34:fa:
4b:33:da:8f:8c:1d:9f:b4:5c:b8:51:35:97:ee:29:
58:06:c0:54:39:fd:ba:40:6e:4d:95:ed:00:d3:61:
e9:60:29:95:84:7b:b8:04:34:e9:dc:cf:84:b5:59:
f9:e3:12:60:5a:82:1c:9f:e3:96:a2:fb:a4:ca:96:
b6:80:db:e9:ab:89:d8:68:56:e1:de:18:c4:56:7d:
3c:da:c7:bc:dd:5c:76:0a:54:c8:82:50:1f:73:17:
b0:9e:67:8b:40:04:b9:4a:fd:5d:07:3e:ad:f8:2a:
08:68:67:0d:01:8e:74:1c:01:a3:52:3b:c5:3b:29:
78:f5:94:89:be:89:66:9c:d3:67:3c:a7:bb:a7:79:
24:38:f0:d6:1e:e7:59:4e:9d:14:38:92:5f:07:8b:
4c:03:fc:a4:b8:6b:fe:6b:fe:b6:11:5d:10:a2:ac:
eb:77:6c:e2:28:95:44:7e:f4:e9:3f:4c:23:82:93:
7f:22:39:48:62:33:1a:92:15:33:5d:c5:f6:cf:8e:
fe:27:c2:ed:2d:d2:f3:58:9f:2b:6b:2c:01:79:1f:
93:66:14:cf:6c:77:ea:31:13:c6:4a:2e:48:80:11:
8b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D6:8A:5D:44:21:6A:DC:E9:42:F0:A7:FF:97:ED:17:89:B7:13:50
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TdaKXUQhatzpQvCn_5ftF4m3E1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:b5:02:38:78:64:b1:2d:62:94:c3:d1:0f:e1:d5:dd:a6:8f:
ca:dc:13:e2:a0:5f:84:01:0f:06:6f:ff:d8:97:9a:38:47:cb:
42:c4:6d:8e:7c:05:98:34:e0:21:cc:d7:0c:89:86:c6:28:d7:
55:b6:f4:3a:c2:e8:7d:27:0f:50:20:97:5b:94:fc:03:e5:2d:
68:9b:6c:f4:77:c0:cd:5d:d3:ff:6a:e6:62:ef:bb:3f:c8:21:
e3:48:c8:66:2e:ae:30:a2:8d:03:86:11:50:c9:15:ce:b9:86:
23:aa:b1:83:ef:4a:bc:05:ee:4a:fa:42:78:89:ac:24:0d:e1:
61:69:2a:89:81:38:f6:a5:a5:42:63:8c:db:01:af:71:ce:b6:
31:28:56:cc:e1:0b:f3:ca:3b:86:10:14:d8:0d:e0:a2:c3:a0:
90:3d:ab:5e:ae:6a:86:72:b8:e0:14:0c:90:ee:38:6d:e1:2d:
bb:ed:6c:93:a9:2c:99:e6:86:04:e2:9d:4e:96:68:97:cf:fa:
54:3f:50:30:8f:be:8c:47:d4:87:32:d7:f3:f4:05:e6:a4:3a:
3a:f0:8a:7b:0f:05:0a:cc:7b:9c:6d:72:c3:2f:44:a5:47:be:
50:85:29:fa:e6:54:74:45:04:21:be:8a:bd:cd:f8:a5:3d:7d:
cb:b6:a6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:20:46 2025 by rpki-client