Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GzPcdHzcqv5EVshW7f0rcZ5edV4.roa
File: GzPcdHzcqv5EVshW7f0rcZ5edV4.roa (raw, json)
Hash identifier: eMVBlw3Dwt787Luht48fjhoxVauxI88/DWaxgKDfMA8=
Subject key identifier: 1B:33:DC:74:7C:DC:AA:FE:44:56:C8:56:ED:FD:2B:71:9E:5E:75:5E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4F969FB84E1D26E911FB07C7FE7EA042
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GzPcdHzcqv5EVshW7f0rcZ5edV4.roa
Signing time: Sat 09 Dec 2023 17:18:40 +0000
ROA not before: Sat 09 Dec 2023 17:18:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4f:96:9f:b8:4e:1d:26:e9:11:fb:07:c7:fe:7e:a0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 17:18:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b33dc747cdcaafe4456c856edfd2b719e5e755e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f6:53:64:9c:06:7c:cf:33:07:de:89:97:a1:
f5:29:90:15:4d:70:d3:16:13:a0:e1:2e:3a:55:8b:
a1:6d:5c:68:c3:a7:55:e2:55:6c:40:02:0b:d1:0f:
81:2d:fe:b6:6e:aa:a2:13:08:5e:c3:89:b6:2c:37:
bc:2c:5a:1d:c1:5f:41:d8:7c:73:ea:11:3f:8d:8f:
5d:d1:70:e9:4e:7b:67:a2:79:2f:5a:07:90:7a:10:
ee:9a:39:06:12:d6:0a:c6:90:d0:58:79:dd:1c:c0:
ab:42:bf:b8:ed:fa:0b:d9:8f:ea:ed:d6:56:4a:6d:
d6:5b:9b:86:bb:22:1d:bf:01:cb:88:df:76:91:13:
aa:71:e0:7a:9a:83:02:11:3f:34:65:65:9a:75:cb:
9a:ad:f9:84:a3:0f:72:fb:7d:6b:3c:18:2f:69:d1:
03:c1:9f:c7:69:b6:dd:31:31:a1:b0:f3:30:e2:b8:
08:56:1c:ce:0a:08:87:9d:2c:9f:ee:4b:7f:1a:0f:
6e:77:c0:fb:e6:23:19:a4:b9:6c:92:4e:7b:d7:fb:
91:42:95:0d:33:a7:67:6e:96:0b:45:75:9a:d2:40:
a9:a5:6d:5f:64:15:bd:c2:99:10:b8:b4:09:1c:da:
51:bf:c6:9c:cd:07:b7:61:b5:1f:94:53:c9:b0:ce:
52:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:33:DC:74:7C:DC:AA:FE:44:56:C8:56:ED:FD:2B:71:9E:5E:75:5E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GzPcdHzcqv5EVshW7f0rcZ5edV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:4d:bc:50:a3:2c:c7:9a:dc:a2:74:6c:c7:f6:72:20:35:35:
51:30:93:45:d3:c9:a5:5a:49:66:5a:39:f7:67:1a:6e:a9:24:
ea:79:0c:8c:32:c5:25:0d:cc:b1:4c:cb:00:30:d9:83:4a:46:
51:da:a7:9e:56:8c:b1:bd:b3:38:23:d4:fb:f3:f3:7a:a8:80:
da:a8:47:6f:04:fa:0a:cb:2f:cf:96:6f:98:25:b3:b5:2c:fc:
a9:aa:00:ec:76:91:ea:0f:b2:a9:96:5c:37:f9:1b:9d:dc:f8:
8d:04:c7:3c:53:4b:69:d1:72:f8:3d:49:e7:22:25:a6:59:eb:
95:95:b5:b1:3e:0e:b2:ec:7e:ce:ca:5a:57:8a:f6:f5:4c:21:
b8:e8:97:09:ae:90:be:2e:66:73:1a:ce:22:f6:d7:01:f6:fa:
dd:c0:f5:1b:ec:11:04:de:12:74:5d:2c:ee:72:81:ba:9f:b5:
cf:e7:a8:49:f4:c5:78:39:09:46:53:fd:06:6a:77:a5:01:57:
0e:c7:63:7d:07:3d:8e:5d:63:e5:77:53:9d:de:5f:93:ef:cf:
df:a9:3f:c6:06:d3:05:70:7e:26:6e:8f:63:4c:0d:9d:ce:24:
88:fe:a4:0a:f8:d3:fe:68:4e:86:3f:72:ed:e6:f9:66:5b:80:
73:53:27:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:45:55 2025 by rpki-client