Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/TGtrn2zPiXGTx4EwjRuZiP2F4R8.roa
File: TGtrn2zPiXGTx4EwjRuZiP2F4R8.roa (raw, json)
Hash identifier: rzSSBlR4j85gw8nY0dpfKD7YfgvSEAScCqF2bH0URNk=
Subject key identifier: 4C:6B:6B:9F:6C:CF:89:71:93:C7:81:30:8D:1B:99:88:FD:85:E1:1F
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A81204F8A54A73AF073B0B57C2B6E2C4E
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/TGtrn2zPiXGTx4EwjRuZiP2F4R8.roa
Signing time: Sun 10 Sep 2023 22:04:52 +0000
ROA not before: Sun 10 Sep 2023 22:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:811f:d329/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:81:20:4f:8a:54:a7:3a:f0:73:b0:b5:7c:2b:6e:2c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 10 22:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c6b6b9f6ccf897193c781308d1b9988fd85e11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:47:e2:b5:d7:e3:8a:bf:d4:42:31:0f:4a:c3:
79:bb:35:3b:e3:db:f1:4a:b5:c4:2f:4e:f0:f2:c7:
86:34:90:15:a3:37:ce:f3:4b:22:15:24:d3:d9:3a:
1c:a1:03:ea:65:eb:48:ca:0c:36:12:45:d9:21:bc:
e9:9a:b2:3f:6c:93:8b:11:ac:af:da:e2:c5:71:da:
9b:2f:77:10:da:4c:c7:94:3f:9d:67:f8:aa:a7:ae:
b0:3d:2d:bd:ef:14:73:43:f7:61:70:60:60:02:6d:
a7:8e:1d:6c:b1:a1:65:5b:73:74:ae:e4:06:81:b6:
4e:62:9a:3d:e8:ca:08:fa:ae:2f:9b:3d:07:b5:4c:
7b:b2:58:d0:a7:21:c5:a2:45:d8:ec:82:e2:31:97:
16:2e:73:a7:b9:a8:5d:93:df:b4:18:73:b7:eb:e0:
a1:11:2d:f9:de:64:91:e2:26:ae:28:70:90:36:cd:
b8:f8:a4:60:9b:7a:43:37:d9:7e:6d:d0:c3:65:cb:
e1:1e:f2:c5:18:ff:4e:96:e1:7b:c3:10:6f:15:67:
70:55:4b:41:b8:17:0e:28:d7:5f:39:03:cd:47:33:
bc:91:87:76:86:83:84:a7:bf:60:60:0f:88:7f:0a:
6f:e9:21:23:c2:e1:04:4f:21:1c:1b:6b:d5:7f:7b:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6B:6B:9F:6C:CF:89:71:93:C7:81:30:8D:1B:99:88:FD:85:E1:1F
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/TGtrn2zPiXGTx4EwjRuZiP2F4R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:d6:73:76:10:3c:e6:ab:ad:db:68:29:06:6d:dc:c8:47:2e:
f0:9a:21:cb:03:38:49:f6:ac:72:d5:ef:7f:28:65:89:9b:cd:
8c:38:ea:dd:06:48:7c:78:3d:26:2b:31:56:1b:e9:8e:fd:54:
36:4d:fc:31:ee:87:65:95:10:88:57:bd:a1:19:fb:60:f8:83:
4f:16:67:59:a9:86:73:d3:ee:dd:b7:e6:58:04:ad:78:ab:cd:
84:d9:98:93:ee:75:c7:53:11:e9:2d:58:bf:5b:11:37:b9:96:
3f:a5:ae:d7:f5:cb:d5:3b:df:c7:fc:1b:98:e4:fb:47:bf:c6:
98:11:2e:29:b7:93:e4:9d:fd:3d:97:ff:35:5e:a5:a8:46:ad:
50:96:7d:0c:31:18:5f:fe:ed:05:68:a4:b6:b5:ec:e1:e8:af:
e1:42:e2:64:58:4f:38:88:15:c2:b2:d4:6e:1b:51:f3:1b:26:
25:2b:96:36:21:b2:92:fd:9e:fc:64:9c:cd:02:53:50:a5:24:
2b:3d:d2:c2:c1:1d:c4:53:b7:10:4f:5e:03:58:7f:44:cb:1a:
8a:20:76:d4:87:11:06:d9:24:b6:55:d2:04:42:f1:e2:f1:00:
56:2b:db:15:4b:bf:38:df:11:75:d9:93:7d:1d:cf:34:f4:6b:
75:ba:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:15:31 2025 by rpki-client