Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/59JLPTLG694KgjxBqiHN_HSuaMU.roa
File: 59JLPTLG694KgjxBqiHN_HSuaMU.roa (raw, json)
Hash identifier: FPBPVniJTOzzZO3n4d6PvSUeHFQjlFjZcM3XO6Vwxlo=
Subject key identifier: E7:D2:4B:3D:32:C6:EB:DE:0A:82:3C:41:AA:21:CD:FC:74:AE:68:C5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C28173FFB125C22318E84981D99AEAA94
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/59JLPTLG694KgjxBqiHN_HSuaMU.roa
Signing time: Sat 02 Dec 2023 01:14:21 +0000
ROA not before: Sat 02 Dec 2023 01:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:28:17:3f:fb:12:5c:22:31:8e:84:98:1d:99:ae:aa:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 01:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7d24b3d32c6ebde0a823c41aa21cdfc74ae68c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:c4:dd:05:48:59:f6:fe:9e:d8:ec:90:66:
89:44:8a:1b:94:2b:da:59:ab:2c:83:5c:20:22:7d:
2b:7e:a1:4a:38:a1:fd:9c:e4:2e:90:2e:8a:62:aa:
70:58:12:18:d1:ec:94:55:ee:12:45:49:13:27:8f:
83:59:7b:3a:d1:3e:7c:60:e9:6a:b9:c6:6c:46:75:
2b:29:8e:7c:15:ba:63:f4:bd:1a:6c:62:6d:86:a4:
cf:be:0c:e3:c6:81:ce:23:87:4a:ea:1c:20:7c:5d:
a4:90:47:c2:12:95:c9:bf:d7:4c:95:81:e5:c6:8d:
99:cf:a2:70:f3:66:3c:2c:ce:05:74:82:71:74:39:
3c:65:01:34:7e:78:12:eb:e2:0e:aa:91:7d:f3:5f:
af:51:68:db:ab:86:a7:c9:6f:5f:67:52:7d:ac:a3:
af:89:fd:f9:6c:5e:3b:62:60:b2:29:74:7b:0f:12:
9c:b6:59:68:a9:ec:d9:5a:fb:7b:17:e2:de:f2:76:
ff:b1:5b:15:25:c5:fa:87:2e:1c:b6:a9:b9:41:fc:
4d:a4:5c:2d:4e:34:10:a8:e0:35:32:b1:8a:7c:59:
53:7d:1c:8e:ba:bf:ba:03:cb:b4:46:2f:04:d2:35:
86:13:2b:90:2c:4b:91:2d:56:ca:d3:0e:f3:10:02:
d8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D2:4B:3D:32:C6:EB:DE:0A:82:3C:41:AA:21:CD:FC:74:AE:68:C5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/59JLPTLG694KgjxBqiHN_HSuaMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:3b:d6:a2:7a:99:a2:44:9f:a7:07:9d:50:4b:87:d6:8c:32:
cf:62:e2:04:9e:2e:1e:34:cc:f3:bc:74:9b:77:57:97:8b:9c:
36:a5:9a:fd:ee:c9:ff:e0:b6:e5:67:64:f3:20:49:01:71:a4:
90:be:a9:62:0f:81:01:d4:84:cf:f0:40:2a:26:21:23:8e:bd:
39:3e:44:39:b1:55:f0:4a:a7:b6:e5:6a:a4:b9:57:66:90:79:
1a:c4:6b:e9:11:f0:7b:90:d7:29:5e:43:c4:17:a8:6a:bc:92:
ff:53:0e:e1:aa:4b:35:d8:d4:82:1c:e3:f3:ba:19:00:c4:89:
89:20:d5:f1:bf:2c:04:70:ee:98:28:a1:df:af:98:37:5a:5a:
6e:7c:51:e2:5e:91:1c:a2:67:11:0b:06:b1:70:cd:16:72:09:
19:a2:c3:e2:b1:28:17:45:1d:1d:4e:03:68:dc:0c:99:71:9e:
d0:f9:5e:06:07:93:7c:cf:8e:fb:4d:a8:1b:16:93:a3:df:88:
f9:f0:f2:a6:91:d6:27:2a:d6:96:4d:53:35:76:bd:1c:b2:e6:
2f:7d:4e:32:99:a0:c6:86:6e:89:48:ee:18:d1:5b:21:f2:1f:
9c:97:b2:c9:14:b2:16:dd:52:78:5a:94:38:8f:54:50:89:36:
4c:85:91:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:24:50 2025 by rpki-client