Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Gb79-C-Igm5zQcy4z-rM4ov8UCw.roa
File: Gb79-C-Igm5zQcy4z-rM4ov8UCw.roa (raw, json)
Hash identifier: ybi8e1LCEs4vtXNayLIf/VCFzeHqJfK4BjUJ7Hjqb5k=
Subject key identifier: 19:BE:FD:F8:2F:88:82:6E:73:41:CC:B8:CF:EA:CC:E2:8B:FC:50:2C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6C4B097503EEF5BFEB999F76858A750F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Gb79-C-Igm5zQcy4z-rM4ov8UCw.roa
Signing time: Fri 15 Dec 2023 07:05:06 +0000
ROA not before: Fri 15 Dec 2023 07:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:6c4a:7a86/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:4b:09:75:03:ee:f5:bf:eb:99:9f:76:85:8a:75:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 07:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19befdf82f88826e7341ccb8cfeacce28bfc502c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:86:28:ce:68:db:b9:78:9e:15:2e:d3:0d:b8:
81:cd:ab:48:97:bc:7b:29:9d:96:57:f2:a7:93:77:
82:9c:58:01:ce:92:2e:1c:ee:dc:38:4b:e2:2d:73:
66:ba:bf:cf:80:a9:f2:f1:5f:e5:d2:30:9d:30:1d:
ca:a6:e9:e7:d4:fc:45:3e:c5:f0:20:f1:66:66:4f:
67:24:b5:07:c0:6d:77:a2:04:db:e9:de:4f:f7:4e:
a1:b2:45:02:67:f3:f9:69:95:e5:95:48:26:e4:cc:
bf:95:85:00:47:87:58:62:2b:d2:34:7b:da:fc:ba:
5a:cb:0c:41:b0:02:49:87:82:6f:63:09:05:c7:30:
4a:14:e4:43:ba:8c:6d:73:7c:03:f7:1b:7d:10:3d:
2f:1b:39:08:46:fb:30:67:46:2e:34:2a:95:95:50:
2a:79:78:d5:c9:7c:00:9b:5e:41:c3:8b:9d:fb:93:
fe:07:6d:7a:60:b9:88:f2:db:72:4d:b1:de:88:95:
84:84:fc:e6:be:ab:8c:da:1c:b4:36:74:e2:e0:56:
46:c1:f4:f5:1b:d7:10:58:5a:95:d1:79:5d:24:c2:
2a:08:bf:54:51:8b:47:f0:95:95:2f:2f:52:3c:83:
f4:9c:06:21:36:b7:27:84:98:93:3a:26:0d:65:a1:
dc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BE:FD:F8:2F:88:82:6E:73:41:CC:B8:CF:EA:CC:E2:8B:FC:50:2C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Gb79-C-Igm5zQcy4z-rM4ov8UCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:1e:f8:f8:fd:d8:7c:69:74:e4:83:53:82:c7:35:c9:da:b2:
83:6d:7d:5b:99:81:e1:06:ad:cf:5c:0f:21:b9:56:a8:7f:55:
a3:70:b3:dc:5b:09:f2:a2:a9:4c:13:7f:9b:9f:ab:f9:cd:6f:
2b:80:1c:d1:b1:c2:bc:e9:67:9e:b9:57:d0:8b:dd:31:22:9b:
1a:f3:47:7a:4f:c8:1a:0f:d3:63:6b:41:ed:89:18:49:91:f4:
45:f3:38:56:bc:78:ac:d4:1d:bb:b9:8c:fa:23:cf:08:7e:00:
23:be:62:e6:c9:07:9b:fe:02:77:25:f0:a8:82:6a:f2:c9:fa:
c5:8f:4f:3a:03:18:95:eb:84:46:f1:8f:41:b4:2c:f9:53:3f:
e1:9f:d4:1b:d6:e2:e7:72:fb:99:96:44:fa:58:43:49:17:1c:
4b:f5:fb:1d:d0:e9:ef:cb:11:12:d3:e8:7d:ef:5b:aa:f1:f6:
5f:de:29:7f:12:e6:2a:bc:ed:3d:d3:25:0a:ba:1a:d5:2d:97:
0b:79:84:b4:30:c5:c1:bc:62:4e:cf:15:17:23:92:87:49:ca:
36:1f:80:7f:f2:37:0a:86:d8:05:de:fa:e5:77:08:f0:df:45:
d2:c8:c9:b5:43:dc:94:ba:e9:57:d5:69:9f:11:51:73:77:73:
23:11:7c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:30:17 2025 by rpki-client