Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RxE-ULtRdDk-iTZM5BogUtc_058.roa
File: RxE-ULtRdDk-iTZM5BogUtc_058.roa (raw, json)
Hash identifier: 1j7ipyvEPHgp4wKjjd5tYjvt5h/qpQkakqRbRuoVl2A=
Subject key identifier: 47:11:3E:50:BB:51:74:39:3E:89:36:4C:E4:1A:20:52:D7:3F:D3:9F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B84CA5B3D5EC46FFF371EF791AF4B5754
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RxE-ULtRdDk-iTZM5BogUtc_058.roa
Signing time: Tue 31 Oct 2023 08:12:16 +0000
ROA not before: Tue 31 Oct 2023 08:12:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:84:ca:5b:3d:5e:c4:6f:ff:37:1e:f7:91:af:4b:57:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 08:12:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47113e50bb5174393e89364ce41a2052d73fd39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cd:08:17:03:a6:0b:4d:33:d0:8b:ca:1c:51:
00:08:16:52:2a:b1:8a:8c:51:f3:c6:85:c9:06:7c:
99:94:4a:67:63:03:fa:14:d1:b9:96:b4:df:62:17:
e5:2a:94:a9:a7:22:2e:aa:b2:62:24:36:64:b4:95:
24:da:c4:3d:fc:1f:fa:dc:6f:99:a6:32:77:c4:0a:
d7:b8:00:6e:02:6f:2d:ec:96:7c:70:7a:31:e6:ea:
d3:7b:6e:c1:f2:de:be:01:aa:90:c1:19:dc:1b:b1:
0d:54:c1:17:c6:5f:3b:05:05:f6:92:c2:09:a9:42:
d1:63:69:99:2c:26:86:24:d0:8d:a3:40:bb:38:99:
7e:ad:2b:98:7f:26:15:c2:ba:9b:2f:79:4d:8e:38:
36:34:87:7b:fc:7f:c3:0e:1c:fc:b2:6d:b3:48:2e:
fc:47:f6:e1:d9:81:78:1e:b3:68:e8:46:ef:48:fe:
6f:6c:49:bf:ac:63:25:67:ec:a5:b3:01:10:31:a5:
5e:5e:fd:48:95:95:15:33:5d:42:95:4a:f7:e2:64:
5a:2e:32:48:0d:f9:df:09:93:0c:b7:54:48:b4:82:
12:34:40:d0:26:cf:a4:20:49:95:4c:c9:6a:ed:f6:
68:e2:0b:64:35:6f:58:35:72:9f:0d:0c:5d:32:dd:
73:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:11:3E:50:BB:51:74:39:3E:89:36:4C:E4:1A:20:52:D7:3F:D3:9F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RxE-ULtRdDk-iTZM5BogUtc_058.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:e4:26:a8:5d:6f:39:e5:d2:8e:36:a4:43:c4:87:f8:9e:02:
5a:4e:4c:de:6c:af:77:d4:0f:b1:15:32:2b:f5:c4:9d:8a:b5:
f0:16:f8:66:93:75:17:04:65:06:14:3b:0d:24:4d:a3:f3:54:
7f:11:12:ea:b6:ec:9e:4d:46:6e:3e:ea:9f:18:c0:72:ef:e7:
e7:e3:67:d2:c7:38:36:8a:df:ec:fe:9f:cc:59:7b:07:b1:be:
bb:f7:a4:58:b5:11:c2:4a:e9:2f:80:1a:d8:c1:33:67:2b:0c:
0b:83:7b:e7:52:31:30:0a:75:85:1a:04:c0:6b:4b:2f:80:64:
b7:c9:9a:0e:88:81:6f:ef:fa:0f:b4:3b:e5:32:bf:a1:1c:2d:
ad:09:42:b3:3d:58:16:35:d7:45:cc:6b:85:85:a8:65:7a:05:
19:59:48:ed:4b:f9:b9:29:11:a4:a2:a7:55:20:0c:88:ec:24:
b4:22:fd:be:62:bb:71:b6:d1:a6:b0:25:2c:08:8c:f1:63:25:
29:ff:8a:30:da:aa:49:b2:40:40:88:6a:1a:e3:4e:c6:ee:f1:
36:a4:8a:b7:fb:e0:f1:f9:da:fd:89:03:db:ac:e3:a3:2b:2d:
56:78:3a:03:c9:62:d4:23:c4:0e:c6:f0:2f:61:66:ed:2b:25:
9c:24:6f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:58:32 2025 by rpki-client