Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cGGVM_IGqCBWoe-GbM5FNwg6iuU.roa
File: cGGVM_IGqCBWoe-GbM5FNwg6iuU.roa (raw, json)
Hash identifier: 4WpCJyNpWAyepvTfHkm8TUe8tImtvEPdgU13z5V6qO8=
Subject key identifier: 70:61:95:33:F2:06:A8:20:56:A1:EF:86:6C:CE:45:37:08:3A:8A:E5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4430A822B2B29F341C6A6A2918E9BAFC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cGGVM_IGqCBWoe-GbM5FNwg6iuU.roa
Signing time: Wed 18 Oct 2023 19:08:41 +0000
ROA not before: Wed 18 Oct 2023 19:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:442c:a889/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:44:30:a8:22:b2:b2:9f:34:1c:6a:6a:29:18:e9:ba:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 19:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70619533f206a82056a1ef866cce4537083a8ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:18:0e:b4:ed:98:bc:3e:28:82:30:8f:30:
4d:bb:4c:93:01:3d:15:63:e6:33:61:d2:fd:d2:84:
1f:19:b0:58:90:11:d5:2c:33:c5:b6:0c:f7:b8:49:
4c:01:7c:7c:f1:0b:e7:c3:9d:a5:71:2e:81:79:f8:
2e:88:6f:9b:06:ec:d0:5c:13:b5:86:31:9f:95:63:
65:4e:10:89:5c:58:85:78:cc:69:1e:b0:5e:09:11:
75:1b:4a:0a:02:b8:4f:05:67:06:a7:54:09:39:c9:
f3:2d:25:f0:a8:8c:18:2e:75:51:92:be:b0:97:bb:
9f:d8:93:98:ca:aa:9d:d2:22:53:d5:34:71:b2:9a:
8c:bb:78:d7:7b:44:4d:e6:aa:37:80:6f:4b:bc:e6:
99:03:04:62:98:56:69:51:78:a7:9f:53:df:c2:e9:
d7:8e:83:c0:5d:84:ab:e3:29:b5:f7:d6:c7:2f:5a:
08:5d:95:cc:1d:ee:1f:92:47:55:54:1b:8e:10:0b:
f8:e1:2f:dd:97:27:ca:aa:df:df:77:c0:45:b0:99:
89:17:14:a0:3d:18:96:0d:78:98:92:f5:c7:d6:0a:
68:01:c0:b7:0f:65:04:17:cc:be:fb:c1:b7:6b:3f:
bd:78:29:1c:5e:04:b8:ab:cd:e1:e4:43:49:db:9e:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:61:95:33:F2:06:A8:20:56:A1:EF:86:6C:CE:45:37:08:3A:8A:E5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cGGVM_IGqCBWoe-GbM5FNwg6iuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:79:7c:43:6a:94:d2:8e:d2:d1:16:c7:1f:80:a4:34:09:29:
4b:a2:69:00:32:18:86:1a:14:ae:5f:be:b5:fc:f2:95:af:9e:
93:8d:98:9e:2a:46:49:a4:0e:60:99:8b:82:9c:03:b9:05:b3:
93:d4:c5:02:2f:22:c1:03:81:6b:f9:db:80:45:67:96:9c:0b:
4e:f1:c6:d0:99:d6:0d:db:a7:5c:48:b8:31:a8:58:30:53:99:
09:c2:5c:46:c3:96:13:ca:11:d7:16:ee:42:37:39:bc:e5:a1:
d9:99:85:67:c6:57:92:8c:63:86:dd:fc:c6:66:7c:77:35:e0:
9a:8e:b8:40:43:76:70:5b:11:0a:20:18:52:46:b3:f9:3a:b2:
f1:04:af:3d:e3:c6:3c:23:12:e7:8c:9b:ba:61:a4:07:b2:81:
b5:22:6c:7f:93:df:31:8f:32:a8:99:1d:7f:82:96:1a:63:d0:
10:8d:26:2a:2f:5c:69:30:6e:8e:f6:44:9a:0d:25:95:3f:0f:
70:95:c3:70:17:ec:09:be:96:e2:0a:6b:ef:7c:82:a9:b7:7b:
e2:8a:db:11:5d:c3:bd:81:96:58:27:81:8e:95:34:17:21:84:
2f:cb:f3:cc:bf:a0:51:32:3f:0f:08:36:a4:5a:44:0d:53:5d:
33:b5:e3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:37:17 2025 by rpki-client