Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RxsJ1aYjG7K3_XQ0iwHSCk3kmNs.roa
File: RxsJ1aYjG7K3_XQ0iwHSCk3kmNs.roa (raw, json)
Hash identifier: Xk9OZ7SQB7ChZYlrOYJa1hdHE4seqfOlgI1XO2hFthM=
Subject key identifier: 47:1B:09:D5:A6:23:1B:B2:B7:FD:74:34:8B:01:D2:0A:4D:E4:98:DB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5D50C3D515A6243AB4F99743FC8A1EC3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RxsJ1aYjG7K3_XQ0iwHSCk3kmNs.roa
Signing time: Mon 23 Oct 2023 16:14:15 +0000
ROA not before: Mon 23 Oct 2023 16:14:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5d:50:c3:d5:15:a6:24:3a:b4:f9:97:43:fc:8a:1e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 16:14:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=471b09d5a6231bb2b7fd74348b01d20a4de498db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:d0:8d:fc:1a:22:1a:12:08:7a:a7:4a:bd:
6c:2c:46:4c:0e:57:ff:0c:92:b8:0d:1f:75:8a:50:
84:a6:e6:95:ea:89:00:f2:9d:27:1f:ec:09:be:e6:
ce:ca:03:31:6f:7b:73:de:bd:90:79:ba:ce:2c:ab:
fd:33:1e:83:d3:4e:68:99:1d:bf:e3:04:82:3e:58:
a9:7c:4a:cc:fa:04:d3:3b:c2:d3:bc:a8:46:8d:d5:
9d:31:b9:4b:7c:ec:61:77:7a:61:61:a0:06:64:e0:
4f:cd:40:1f:48:dc:9d:bf:d6:48:b9:71:9f:c9:30:
af:f8:98:a1:17:a0:44:7c:ba:5c:24:23:32:47:90:
3f:00:b6:00:c0:7e:19:94:1c:92:f7:95:63:dc:fa:
8e:fb:79:bb:d4:be:21:b3:c8:d4:97:73:bf:c9:25:
ea:f4:94:1c:88:85:8e:3a:a8:7d:a5:46:e5:22:26:
ce:63:0c:a3:ce:21:da:59:57:dd:68:54:85:82:91:
1b:3c:96:b6:b4:2c:a5:3b:28:d0:83:d2:79:71:65:
21:38:28:95:9f:f8:50:74:7d:7f:06:23:cf:3c:dd:
1a:c0:55:d1:5f:33:0c:39:59:43:72:0e:1a:8a:c3:
e2:d6:b8:86:35:e8:fe:e6:5f:b1:d4:c8:a4:18:a6:
f8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1B:09:D5:A6:23:1B:B2:B7:FD:74:34:8B:01:D2:0A:4D:E4:98:DB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RxsJ1aYjG7K3_XQ0iwHSCk3kmNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:2b:84:0a:3e:15:92:6a:94:5c:20:04:b6:0c:ca:58:8e:2e:
59:40:3d:47:39:6d:97:10:2e:55:1f:47:64:df:a3:4f:54:4a:
f9:23:c9:02:fd:c4:0e:49:6e:ac:88:b9:35:08:1d:c7:36:b3:
75:95:46:12:b5:1a:6a:72:b7:47:a4:fc:f1:9b:c7:97:bd:82:
c5:1f:4a:59:db:06:7d:3f:0b:74:df:9d:d6:dd:35:48:ff:02:
3f:33:e6:1c:d9:a7:50:16:9d:8c:6f:7c:ad:5d:59:c1:32:fe:
a2:78:76:cc:09:ab:94:d0:fd:3e:a0:23:d6:c0:d8:03:07:ba:
d1:c2:3b:40:8a:8f:a7:f4:5d:76:0e:42:da:ee:b8:df:80:9b:
d2:a3:f0:11:e5:00:d4:7f:f1:3d:7e:c9:2a:ef:c8:90:92:75:
90:a8:f1:46:02:ca:54:24:28:09:a2:d3:13:5d:19:4c:71:91:
cb:3c:b9:08:bd:ca:24:5b:61:b0:7b:e9:7f:d4:4b:80:e6:d1:
b6:1b:aa:69:0c:b3:8f:bf:71:c5:f7:18:12:cd:ec:88:d8:e5:
4d:96:eb:35:ae:cd:5e:a9:11:c5:ac:de:cd:6d:8d:a7:c4:d1:
63:14:18:81:45:0a:a5:77:a3:dd:e8:43:9a:cf:ce:38:e8:e8:
46:b4:15:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:53:09 2025 by rpki-client