Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/G1X4rFmRuU2nQ51CDr7HNE2uUC0.roa
File: G1X4rFmRuU2nQ51CDr7HNE2uUC0.roa (raw, json)
Hash identifier: 9GT9U1XwdS+nesLnwZ9IJ8TJapbw/nPyDzgSsvMdlbE=
Subject key identifier: 1B:55:F8:AC:59:91:B9:4D:A7:43:9D:42:0E:BE:C7:34:4D:AE:50:2D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1BDE4F672B326216B7B3A32BAACA95F1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/G1X4rFmRuU2nQ51CDr7HNE2uUC0.roa
Signing time: Wed 29 Nov 2023 16:16:43 +0000
ROA not before: Wed 29 Nov 2023 16:16:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1b:de:4f:67:2b:32:62:16:b7:b3:a3:2b:aa:ca:95:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 16:16:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b55f8ac5991b94da7439d420ebec7344dae502d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:09:16:4c:e5:ca:5d:10:94:a6:99:86:e7:30:
b0:ab:52:9d:fb:8b:b3:24:ef:5d:9e:fa:9c:f7:de:
25:1f:e2:87:cc:44:c3:c8:65:2d:80:fd:d9:67:5f:
03:be:76:9d:ff:3a:0b:15:f8:1f:e4:12:06:0a:32:
71:37:47:73:43:27:ad:bd:7f:1e:65:d0:85:dd:82:
a8:c2:7f:10:95:76:96:7e:88:ec:8f:63:b1:5d:50:
8e:a2:a1:09:41:11:7b:87:06:aa:eb:ae:2d:07:51:
2f:bc:31:fc:3f:c7:eb:34:fe:06:1a:33:75:36:a7:
92:40:e4:b9:1d:fb:f2:a6:de:3d:16:38:e9:be:55:
6e:66:49:82:a5:1a:b3:b4:84:bc:46:21:4a:26:16:
1f:39:bd:ab:08:69:e7:0f:8f:43:a9:75:fa:35:45:
60:43:57:ab:bf:b9:e6:ae:27:1f:e1:fa:84:27:69:
bb:6a:6b:5c:0e:b2:0a:dd:b0:77:e5:18:8a:4f:bb:
59:31:9c:0f:82:07:53:7d:0b:eb:e6:e6:b0:5f:8e:
93:42:23:bc:04:84:7d:b1:2c:e3:74:4c:fc:fd:b9:
20:f9:11:3a:f2:ce:ea:2a:ef:9c:78:a6:d1:49:c8:
c5:fc:e8:6b:79:3a:cb:9a:03:e8:2f:9a:0b:41:22:
9e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:55:F8:AC:59:91:B9:4D:A7:43:9D:42:0E:BE:C7:34:4D:AE:50:2D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/G1X4rFmRuU2nQ51CDr7HNE2uUC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:2e:a1:c9:bf:cb:cb:35:d0:59:55:b3:82:66:22:73:2b:1c:
9d:98:ea:95:73:40:ca:b6:2c:75:51:bc:c8:1e:09:4d:99:3a:
c0:15:08:e7:eb:57:dc:72:bf:dd:d3:4c:ae:f0:72:c5:67:fc:
76:f9:6b:2c:fe:83:b3:01:b8:38:7c:d7:3e:1d:98:3f:d2:b8:
02:c4:2a:ac:80:b0:c2:16:7c:83:a3:fd:c8:26:79:28:10:f6:
ea:fe:4f:33:33:73:79:e3:a4:10:0b:50:ce:dc:18:36:e1:1d:
cd:2d:dd:4b:89:7b:22:51:af:1c:85:7e:85:d3:63:83:7e:fe:
f9:77:2a:95:24:0f:c6:31:58:cd:14:5a:cc:a5:ee:62:cd:e9:
07:a0:7d:0f:5c:8e:76:52:36:5a:67:1e:62:49:14:01:0e:d0:
be:c1:f4:a7:1e:e0:ab:81:98:7b:8f:10:d4:57:e7:21:62:c7:
03:c8:20:94:0d:98:6d:26:8f:61:8b:27:5b:d1:4c:70:4f:d1:
9f:62:0e:fa:74:00:3d:93:34:9c:c5:a8:c7:95:4f:ef:d3:29:
dd:a2:b6:17:09:1a:49:84:22:eb:fe:1f:8a:33:5f:4e:cf:c4:
2e:61:cf:59:46:02:a1:5a:ac:9d:5e:48:c4:40:4f:00:ca:29:
fb:8d:46:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:22:35 2025 by rpki-client