Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CjGLElII085c9gOkeQwS8kcV43Y.roa
File: CjGLElII085c9gOkeQwS8kcV43Y.roa (raw, json)
Hash identifier: dnJ0vTv3cFc0uO9bnWK8O5uYO3bW1JYJEs4AXiZjk2Y=
Subject key identifier: 0A:31:8B:12:52:08:D3:CE:5C:F6:03:A4:79:0C:12:F2:47:15:E3:76
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B21A88AE72FA66BC4BF09CFEE67676CC5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CjGLElII085c9gOkeQwS8kcV43Y.roa
Signing time: Thu 12 Oct 2023 02:12:55 +0000
ROA not before: Thu 12 Oct 2023 02:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:21:a8:8a:e7:2f:a6:6b:c4:bf:09:cf:ee:67:67:6c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 12 02:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a318b125208d3ce5cf603a4790c12f24715e376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:71:68:bd:74:b5:c9:2f:82:99:04:33:6d:17:
2c:3d:09:60:ef:a0:31:2c:41:86:e6:c5:f9:67:be:
6a:8c:c5:6d:6d:0f:b1:9b:67:5b:d2:34:50:b1:ac:
c7:76:d5:9b:da:d8:09:40:d0:1e:df:ea:f1:60:7b:
0e:77:6a:64:1e:a6:54:75:61:0e:ec:96:47:1f:e6:
79:54:0e:14:9b:67:31:ef:63:d3:66:58:76:ca:92:
25:86:1e:4e:1e:9a:78:ce:18:ef:a5:09:39:8e:f6:
b0:ce:fd:32:1f:5b:1f:22:8c:d9:ab:b4:e6:dc:6b:
20:54:21:03:39:45:3c:ed:b2:91:19:ca:ef:74:d3:
d6:0b:43:63:e7:b8:cc:61:0e:27:36:a6:c0:5c:e1:
4d:3f:52:f1:bb:6f:91:14:d3:9c:dd:27:66:5c:34:
9f:bb:a5:5f:16:a0:b2:02:83:f5:2b:57:f1:3e:d4:
83:a1:97:48:8a:21:8d:15:d1:ca:07:cd:ec:55:38:
07:3e:f9:33:6e:80:e6:2b:d9:11:2b:51:70:78:df:
0a:44:ad:42:1f:46:b0:b7:0c:b5:37:30:70:03:c6:
11:fb:c7:38:c5:c7:96:e0:34:6b:b8:68:af:f6:b6:
1c:36:0a:3d:e1:63:44:b7:1f:67:ab:a0:27:4f:b2:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:31:8B:12:52:08:D3:CE:5C:F6:03:A4:79:0C:12:F2:47:15:E3:76
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CjGLElII085c9gOkeQwS8kcV43Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:2f:92:a6:ad:69:01:61:6d:a3:77:7a:ff:f9:73:1e:5a:9b:
3f:17:3f:f7:6a:54:49:99:be:1d:2c:a6:95:16:3a:86:00:55:
82:f6:da:f7:4a:17:d9:fa:6d:89:7c:eb:35:97:f3:1d:1a:97:
e8:26:db:d8:74:b4:cf:a6:49:10:5f:cc:ff:72:59:7d:87:eb:
73:79:7e:dc:76:2d:c6:e5:13:b4:39:99:42:86:de:b8:a6:54:
d7:2f:86:2b:88:52:03:43:6a:d4:a3:f4:c2:ed:e5:2c:c7:7d:
3e:93:67:4f:26:bd:d9:e8:96:0b:f1:c8:00:01:a2:75:5c:b4:
88:b5:2b:c4:93:8b:78:62:81:e1:16:2e:35:3e:2b:8c:2d:51:
b4:e8:1e:8e:56:59:97:29:18:19:24:d7:fb:fb:ff:83:8e:df:
c8:40:7c:65:78:b8:f4:3b:5a:40:ed:36:07:bf:f4:14:34:01:
c3:65:51:7c:31:95:25:44:bd:f4:d8:e0:dd:99:47:d7:c5:56:
a4:86:00:a7:e5:e2:5c:51:aa:b0:2c:37:e9:79:70:ad:5d:7f:
ce:57:e9:d7:b1:cd:a8:24:62:e9:76:b0:ad:76:08:0f:c7:7b:
e3:30:67:8b:15:61:94:f0:e6:58:4f:11:25:00:2e:ce:be:a2:
fa:32:b3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:39:29 2025 by rpki-client