Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GJA41YF1-C7g4kRnHw89QHzV0Gg.roa
File: GJA41YF1-C7g4kRnHw89QHzV0Gg.roa (raw, json)
Hash identifier: 8ZuyPvSs2/1OKy9AqprCabk7IqRKuKCODFUz1nfnYdw=
Subject key identifier: 18:90:38:D5:81:75:F8:2E:E0:E2:44:67:1F:0F:3D:40:7C:D5:D0:68
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6E7976FEDF17F8F73A1A78C3BC490FAC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GJA41YF1-C7g4kRnHw89QHzV0Gg.roa
Signing time: Fri 27 Oct 2023 00:12:15 +0000
ROA not before: Fri 27 Oct 2023 00:12:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6e:79:76:fe:df:17:f8:f7:3a:1a:78:c3:bc:49:0f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 27 00:12:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=189038d58175f82ee0e244671f0f3d407cd5d068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:72:19:5a:b5:80:90:6d:35:8c:34:10:a4:
92:67:18:ff:7b:ed:e8:f4:f2:2e:b1:9c:ef:d4:e8:
90:81:09:47:4b:cd:a8:c0:ee:61:8a:78:29:04:ef:
b8:7a:48:13:93:fe:41:53:8e:1a:6c:66:dd:43:50:
bc:6d:3c:77:c1:01:16:20:41:d4:93:db:0c:a7:4e:
c8:8f:51:3a:7e:44:0a:78:c9:6b:b7:31:b1:ac:54:
33:2f:97:b6:57:6e:05:69:f5:6f:0a:8f:df:3e:4e:
c0:57:95:3b:ac:1b:c8:32:04:48:17:d8:88:bc:6a:
79:fc:10:eb:ca:6d:3f:f7:93:3e:71:e7:d6:1f:ca:
94:a5:f8:f2:9c:37:8e:1f:19:4b:88:bc:30:8d:5c:
d0:ab:3b:39:7f:1d:d3:6f:9f:74:77:4a:64:0a:14:
8d:eb:59:f5:83:a5:2a:55:d9:52:82:b8:de:6d:05:
a0:45:28:6a:dd:3f:a4:75:9a:ea:ca:34:fe:21:85:
28:14:a3:50:cc:29:6d:88:6a:0a:67:31:0b:f7:a5:
d8:63:15:80:7e:72:62:c4:46:08:ba:e7:1c:e9:0d:
d8:00:e0:ee:e8:7f:97:bd:bc:a1:ea:8e:1d:ba:8e:
82:91:e7:c0:39:07:ea:56:e6:61:8a:34:72:63:a1:
bd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:90:38:D5:81:75:F8:2E:E0:E2:44:67:1F:0F:3D:40:7C:D5:D0:68
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GJA41YF1-C7g4kRnHw89QHzV0Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b8:cd:5d:3c:21:4e:fd:d7:b2:23:56:e1:47:40:69:f2:2e:c3:
95:2a:03:af:a8:10:e4:6a:62:87:b3:5e:e1:bf:d3:bb:e0:a8:
c9:8b:cf:6d:69:5b:ac:41:a4:55:01:f3:a5:8e:12:1c:6d:42:
29:c8:69:9a:92:26:a9:4f:8f:9c:8d:84:15:15:bf:c2:e0:07:
12:dc:d9:7c:88:bd:45:43:27:95:47:a5:dc:65:b0:89:58:ae:
df:c3:d9:a2:21:2e:c5:25:cf:18:da:b2:b5:37:8a:7b:87:ba:
f0:3a:ad:db:ce:d6:ac:ff:2a:dc:d8:ee:90:7a:68:fa:fc:e2:
13:e2:e5:02:3f:1f:a0:5e:97:c7:4e:13:f8:be:3f:39:b4:ff:
b7:f6:a7:14:cc:a5:56:ba:9d:19:2b:e5:11:be:d9:b2:a4:5f:
93:15:82:89:bd:25:59:ec:25:56:ca:3f:5d:4e:f7:fe:97:9e:
25:bd:41:d3:da:fe:c2:73:bc:93:37:e9:33:6b:60:64:18:0f:
0f:5c:36:c7:5a:6a:6e:45:a9:eb:0f:57:3d:ad:9b:f3:80:14:
a8:06:bb:de:cd:5b:67:33:07:bf:4b:d1:b9:02:0e:b0:88:ab:
ec:3c:87:cc:1a:87:28:d9:84:11:bb:44:a8:03:d9:6b:02:49:
12:d4:3e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:12:47 2025 by rpki-client