Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Gghocn-WNGeokXToxlRIPZs9tUQ.roa
File: Gghocn-WNGeokXToxlRIPZs9tUQ.roa (raw, json)
Hash identifier: 0zRYcpFfFQrhIkmW+sa+p3+27x9IOicepdTxgu6BATA=
Subject key identifier: 1A:08:68:72:7F:96:34:67:A8:91:74:E8:C6:54:48:3D:9B:3D:B5:44
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B040CB65F482F44E88E1E3AB4C14A915F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Gghocn-WNGeokXToxlRIPZs9tUQ.roa
Signing time: Fri 06 Oct 2023 08:13:43 +0000
ROA not before: Fri 06 Oct 2023 08:13:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:0c:b6:5f:48:2f:44:e8:8e:1e:3a:b4:c1:4a:91:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 6 08:13:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a0868727f963467a89174e8c654483d9b3db544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:51:5b:24:98:a7:04:1b:f9:4c:5c:5d:bd:53:
ab:37:4d:e9:af:de:86:1f:6c:5c:da:ef:3a:23:57:
f8:f4:8d:a3:5e:c9:66:34:9f:dc:61:bd:ac:f6:f9:
93:aa:6e:f9:b3:4a:63:84:64:d3:bd:64:77:58:b1:
eb:21:a0:1b:9e:4e:dd:5c:25:f2:d9:b6:51:e5:ad:
ec:e5:d3:fc:5e:47:61:f6:46:35:b2:1e:40:2e:cb:
06:ed:03:2d:a8:bd:0f:3f:56:c7:f6:7d:32:a8:56:
ba:ce:84:74:da:71:35:c0:ef:28:38:8c:e3:06:b8:
9c:96:c2:70:1f:8d:c0:a9:23:64:1d:04:f8:e8:98:
78:25:1b:c9:8a:1b:e5:46:f7:c5:59:83:ee:c2:0b:
7e:f7:67:6c:92:db:06:71:d6:b0:0f:56:32:53:15:
4b:ae:28:d2:cd:a7:8f:67:a2:40:5f:88:3b:fb:62:
f9:d9:6a:7f:ca:da:8a:3c:31:99:ff:44:ba:cd:fc:
8f:54:ea:46:f1:a9:7e:06:76:b9:c2:ae:18:36:3b:
f9:0a:c8:6d:0d:f8:5b:77:09:c3:1d:92:96:ff:13:
2e:93:a3:c7:0a:cb:25:95:d4:4f:d4:a8:3d:26:03:
83:b8:27:e1:48:7f:2f:c0:ad:71:91:bb:66:9c:97:
2e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:08:68:72:7F:96:34:67:A8:91:74:E8:C6:54:48:3D:9B:3D:B5:44
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Gghocn-WNGeokXToxlRIPZs9tUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:af:9a:74:b9:83:b3:78:09:67:24:14:c7:46:59:4c:d9:4c:
c2:51:47:71:fa:91:a3:b5:05:8f:df:94:b8:cc:c1:4a:29:03:
68:64:c8:65:39:a0:9b:60:49:00:8d:6e:55:f8:06:1b:75:bb:
0b:84:a9:5b:1a:97:29:54:21:61:6a:92:cf:60:01:7d:77:0f:
82:d6:dc:26:d8:7b:12:10:93:82:52:99:1a:cc:62:f8:05:2f:
46:31:90:b0:69:e9:5b:fe:81:b7:fe:0c:9e:a9:19:f5:37:19:
1c:9a:91:84:bf:97:a7:b2:00:74:63:9e:8c:c1:32:fe:42:de:
f1:08:d6:52:02:86:d7:88:ce:cb:e5:67:8a:b3:73:52:30:e7:
84:d3:82:5f:eb:fb:94:b4:f4:a9:2b:87:b4:54:28:b3:3d:3b:
06:d5:ee:bb:6f:e0:ec:34:53:9a:92:be:71:c6:9e:01:13:f1:
1d:f7:02:22:75:16:cb:db:0b:22:06:25:14:e5:cb:60:7d:a3:
7f:95:22:ae:13:23:2d:e2:72:8f:d5:92:2a:59:8a:df:81:cd:
2d:36:74:01:64:f9:30:da:67:38:2e:17:0a:e2:63:03:c0:a3:
8b:f2:c4:d2:5a:27:8a:4a:00:ad:6a:1f:4b:02:59:86:17:01:
99:fd:4a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:46:34 2025 by rpki-client