Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GvvQUPeeYbHBdlf-8cHDSiY2iss.roa
File: GvvQUPeeYbHBdlf-8cHDSiY2iss.roa (raw, json)
Hash identifier: y/HfsuooMj6suE9CZVc4ql/OBVBn1RgWEV3ypBS8r+A=
Subject key identifier: 1A:FB:D0:50:F7:9E:61:B1:C1:76:57:FE:F1:C1:C3:4A:26:36:8A:CB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B27E0A5C3B2D297D09D2C2C422F30BF33
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GvvQUPeeYbHBdlf-8cHDSiY2iss.roa
Signing time: Fri 13 Oct 2023 07:11:55 +0000
ROA not before: Fri 13 Oct 2023 07:11:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:27:e0:a5:c3:b2:d2:97:d0:9d:2c:2c:42:2f:30:bf:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 07:11:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1afbd050f79e61b1c17657fef1c1c34a26368acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:d1:d5:1c:a7:5c:d6:46:41:56:07:60:4e:
92:84:ad:b1:2f:a5:07:35:a5:be:e7:4c:1c:97:a7:
2e:35:bb:f4:2b:5e:b0:87:16:31:f5:5a:c6:d3:21:
f3:f2:cc:93:93:53:dc:68:1f:93:6e:5c:1f:5e:b1:
b8:9f:14:f7:f3:b2:61:54:e8:43:52:83:20:8d:08:
0f:c4:4b:86:88:e1:6d:9c:84:cb:03:3e:7e:41:6f:
69:32:d4:3c:7e:b5:9f:65:1f:d4:89:28:c4:3d:05:
60:b1:52:83:4a:a2:48:4e:51:61:f0:df:a7:2d:d8:
4c:cd:f8:e3:d6:ae:f8:ac:85:a1:29:5f:77:f1:20:
d5:18:14:c0:a3:ef:92:c2:83:50:55:ab:02:85:d2:
45:7e:9f:3a:4a:47:9f:76:59:21:d5:43:1b:a9:b8:
01:da:61:fa:f7:22:94:25:62:38:5e:f9:4c:79:5e:
35:5f:db:37:f7:d8:6e:b7:b9:a0:44:12:5e:55:db:
19:90:4b:22:45:00:53:93:af:15:16:71:0e:35:22:
56:6c:09:9b:56:28:96:f2:f6:a4:47:fb:99:17:92:
8f:fd:27:d4:49:01:12:14:68:2c:9f:76:77:a8:e3:
dd:09:72:f6:0e:21:00:21:8f:40:22:9f:4d:31:22:
13:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FB:D0:50:F7:9E:61:B1:C1:76:57:FE:F1:C1:C3:4A:26:36:8A:CB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GvvQUPeeYbHBdlf-8cHDSiY2iss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:e3:fe:8a:eb:97:52:83:4e:57:ca:e8:d4:2c:bd:67:bb:97:
1d:dc:6c:7d:ee:9a:75:da:08:d7:1a:88:7c:fa:f8:e2:fb:7e:
86:87:cc:55:50:86:27:71:f8:06:57:dd:b1:41:92:eb:d5:97:
3a:6b:84:d6:47:e7:0b:43:23:52:50:0e:b7:fc:c0:92:07:00:
5f:6c:ba:3d:d1:90:25:e3:e0:a9:be:71:9c:99:2a:e2:ad:4b:
df:35:bc:fb:b4:65:52:3b:81:64:7d:72:63:96:53:26:29:48:
f7:f8:0e:66:9e:65:f1:2d:e8:ad:10:f8:2f:f4:97:be:f0:62:
f1:6d:2b:91:4b:cc:8c:f1:e6:73:55:9c:29:eb:b9:4e:25:1b:
a4:d8:98:21:ef:ca:65:c6:cf:76:14:95:5d:7d:a8:e9:9a:9e:
c6:47:27:e2:d7:32:0c:cf:87:06:3d:f7:43:bd:db:41:75:45:
c5:71:32:bb:24:2b:e1:c1:d7:d4:0f:dd:38:5c:b3:cd:cb:cf:
ab:48:0a:4f:e3:3b:f3:a8:76:01:16:83:25:e2:cf:bd:5a:7a:
89:39:7f:10:f4:5e:69:08:29:fc:6e:9e:ce:69:5b:9d:b5:03:
c7:28:11:cb:c3:78:18:43:ae:bd:6c:2b:12:b6:bd:c7:b5:7d:
a4:b3:ef:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:57:33 2025 by rpki-client