Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TzlCvkn1bE1BfVltBrzH5XtRWxo.roa
File: TzlCvkn1bE1BfVltBrzH5XtRWxo.roa (raw, json)
Hash identifier: MdwtHgoUXdFMPQpda3k4uecUexfqYCHWjWi5afWThx0=
Subject key identifier: 4F:39:42:BE:49:F5:6C:4D:41:7D:59:6D:06:BC:C7:E5:7B:51:5B:1A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DD3BBAC9D16F793295F9A473708251C79
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TzlCvkn1bE1BfVltBrzH5XtRWxo.roa
Signing time: Fri 23 Feb 2024 02:11:48 +0000
ROA not before: Fri 23 Feb 2024 02:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d3:bb:ac:9d:16:f7:93:29:5f:9a:47:37:08:25:1c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 23 02:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f3942be49f56c4d417d596d06bcc7e57b515b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:07:e0:7a:dd:d9:96:d7:d2:bf:85:16:3d:
2b:6a:b3:53:df:e9:1a:45:1e:89:48:5a:56:24:be:
1a:e4:0d:f8:bf:dd:5c:c7:f1:d6:d2:a4:24:5a:6c:
8e:91:0c:82:b0:53:6a:31:ed:2f:aa:ca:e6:e9:58:
84:e4:28:40:4d:13:af:6d:35:4a:e1:22:81:22:60:
5c:3f:3f:d7:ae:f7:c5:63:73:13:d0:50:d3:72:d2:
77:74:bc:33:a5:66:6b:4b:f8:f6:8b:59:02:41:f2:
6e:00:b6:83:1d:be:e2:8a:be:e9:e7:01:54:22:09:
ca:44:57:32:49:f3:d3:75:67:3b:cb:e5:ac:e8:0f:
6b:84:e2:50:62:f6:2f:2e:9f:ce:a0:16:2f:f9:8b:
0e:b5:ae:6e:ef:e2:64:28:4d:a3:20:00:f1:1a:d1:
7f:9e:5c:8c:ab:3a:b2:8b:a7:32:cc:da:1a:75:41:
89:cb:05:19:b4:ef:36:53:cb:ec:4c:13:2c:b4:72:
b5:4a:32:dd:80:47:79:d7:f6:c2:35:8c:e9:06:60:
08:ff:d3:d1:9c:65:ca:d9:d6:14:9d:60:9b:87:52:
30:bd:fa:a7:c0:23:02:11:93:56:cc:6b:c2:0b:9e:
b4:cd:a8:16:3d:c6:5b:3e:56:c8:06:8b:86:b4:a6:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:39:42:BE:49:F5:6C:4D:41:7D:59:6D:06:BC:C7:E5:7B:51:5B:1A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TzlCvkn1bE1BfVltBrzH5XtRWxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:61:1e:a7:67:b5:50:5e:5b:7b:99:e5:2f:92:ae:6a:29:21:
07:62:84:69:d7:6b:5c:f3:37:8d:b5:b7:f6:01:9e:ba:d8:6c:
e1:4b:6f:14:48:4a:08:7f:50:99:56:46:b6:8c:78:c1:cd:e4:
94:ce:35:76:0a:49:fd:64:0c:69:6b:f3:fb:9c:b5:f8:10:1f:
cc:fc:59:5e:7a:1c:d8:36:d7:8f:10:c0:d6:96:94:57:df:cc:
e6:1f:e1:01:9a:d3:de:a4:56:83:ba:02:ed:ba:1a:96:2f:09:
8e:a1:a6:6b:1d:07:c6:50:5b:ea:a8:e4:33:96:61:78:2b:c2:
14:7d:b0:3e:c3:e9:dd:ba:8c:48:29:e7:b0:ba:3a:2b:e4:09:
85:64:5d:bd:2f:50:97:cd:23:76:4b:20:e1:3c:94:e7:1c:cc:
9d:00:12:9c:f2:d0:1b:85:d8:01:67:a1:15:c6:4f:07:d4:96:
87:61:aa:81:1d:82:61:9a:2c:b5:bb:ce:79:74:51:94:34:ec:
5e:99:f2:eb:0f:07:ce:e6:12:a1:1a:94:1c:a0:6c:d1:81:ec:
dd:c9:38:28:90:b1:d3:ea:58:75:20:9d:aa:bc:f3:fe:e2:7a:
1c:61:9a:da:e3:cf:a8:2c:09:d0:88:cb:f1:71:de:7c:78:34:
3a:dc:9b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:45:34 2025 by rpki-client