Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/58JsTj1SSv2k71GMtwD66x4EQP0.roa
File: 58JsTj1SSv2k71GMtwD66x4EQP0.roa (raw, json)
Hash identifier: ju7NEgiDSxFLN6b/+Nu8D6rchRIoyTXaU6dW+P/lQMk=
Subject key identifier: E7:C2:6C:4E:3D:52:4A:FD:A4:EF:51:8C:B7:00:FA:EB:1E:04:40:FD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C54EE6C4537DAF2070896ABF3C0EB49A0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/58JsTj1SSv2k71GMtwD66x4EQP0.roa
Signing time: Sun 10 Dec 2023 18:12:40 +0000
ROA not before: Sun 10 Dec 2023 18:12:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:54:ee:6c:45:37:da:f2:07:08:96:ab:f3:c0:eb:49:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 18:12:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7c26c4e3d524afda4ef518cb700faeb1e0440fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:50:2a:5e:c0:ab:37:7e:e3:a8:09:9e:63:
4e:42:34:67:f8:c2:85:58:04:d8:43:d8:a6:28:1c:
f9:f4:14:3e:b9:07:50:aa:d4:a1:70:b0:a9:1a:34:
b0:03:f8:5b:52:2f:81:dd:cc:60:4c:9c:b0:7b:9a:
2a:a4:70:50:45:ea:6b:2d:df:0a:86:41:d8:07:c1:
93:c9:af:46:a1:36:af:16:52:56:76:c8:23:1e:15:
68:a4:89:6b:f9:45:13:67:e7:f8:2b:e6:f0:fa:a5:
68:49:75:84:1a:af:a7:72:3b:b2:e4:a5:1a:6f:a9:
ca:ee:c1:54:83:62:31:30:37:af:d5:50:c8:27:a4:
1f:0a:c6:9f:a9:70:e7:3e:91:e8:93:61:52:c2:cd:
1e:1e:48:fd:24:54:33:c7:35:c7:ce:05:72:93:e3:
17:98:bc:4d:b7:c3:46:09:e1:70:19:fd:ea:7d:bf:
c9:17:8c:81:b3:17:33:96:a9:a0:ce:4f:24:11:a2:
e7:54:02:f0:8f:9e:58:68:b3:7e:ea:c9:dc:cb:f9:
4f:f3:b3:c0:8d:24:8d:17:2c:12:17:81:9c:c3:27:
49:4b:4c:65:94:34:ca:c5:f3:3b:48:32:c7:f2:98:
0c:d3:a7:77:a9:af:48:3e:6b:d4:44:c3:3f:6d:71:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C2:6C:4E:3D:52:4A:FD:A4:EF:51:8C:B7:00:FA:EB:1E:04:40:FD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/58JsTj1SSv2k71GMtwD66x4EQP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:d0:b0:e6:3c:79:3d:56:0d:a3:57:e6:ae:de:4a:03:09:59:
29:7a:42:ef:99:cb:74:ff:88:04:2f:06:1e:a6:5a:ef:42:aa:
41:32:12:79:f1:84:0d:bd:5f:01:03:a9:3f:76:5e:10:04:92:
36:ff:96:8b:df:8b:20:55:c4:b0:fb:a2:38:17:35:d4:37:e7:
bb:8d:78:c6:67:9f:f1:14:23:60:14:c5:a8:a0:e0:48:cd:04:
e9:f0:ee:23:47:8d:33:83:51:2f:c0:55:be:a0:57:d6:69:e4:
6f:d5:74:a8:59:94:21:80:47:f6:1d:89:ad:ab:0b:2f:a0:ee:
e5:20:bb:97:f8:86:0e:70:a5:7d:b6:cc:6d:c6:97:56:33:e9:
af:3e:25:6d:83:d2:b2:ee:c6:8c:e5:83:65:ba:1f:b2:e6:ef:
21:49:26:40:1f:6d:ec:2c:6a:4b:39:cf:e9:63:78:33:c9:be:
0f:05:e8:cf:62:dc:42:1b:04:03:43:15:58:18:45:c8:a5:aa:
10:06:48:4b:88:bf:78:bf:67:bf:e1:c5:5a:15:b8:d2:7a:10:
d4:97:eb:7d:3d:1e:c3:af:a3:4c:cb:c4:bc:b6:bc:cc:1d:d1:
f7:16:a4:51:1e:27:cd:8a:02:e5:be:22:e4:f9:f0:e6:04:30:
7c:28:a6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:54 2025 by rpki-client