Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gGZis9VCHDDFLECUaHWlDUuSyWU.roa
File: gGZis9VCHDDFLECUaHWlDUuSyWU.roa (raw, json)
Hash identifier: 0F+75a58sSXckgnFq7bSxpGbqUdqIcMONpnzZWd+kWk=
Subject key identifier: 80:66:62:B3:D5:42:1C:30:C5:2C:40:94:68:75:A5:0D:4B:92:C9:65
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1EA5579BE6E595102C1754CC968AC49B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gGZis9VCHDDFLECUaHWlDUuSyWU.roa
Signing time: Thu 30 Nov 2023 05:13:21 +0000
ROA not before: Thu 30 Nov 2023 05:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1e:a5:57:9b:e6:e5:95:10:2c:17:54:cc:96:8a:c4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 05:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=806662b3d5421c30c52c40946875a50d4b92c965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c6:db:b6:77:6f:28:41:31:1c:5c:49:17:f6:
e3:f1:3a:bf:f5:66:ba:4d:e9:eb:e8:fe:cd:d2:04:
4d:2b:2b:e6:9f:68:52:80:36:be:26:c1:85:4b:d4:
56:c9:9f:d8:7f:6f:a9:26:7d:45:4f:fe:48:c6:74:
d2:63:3f:b4:0f:54:f4:6c:35:74:0b:06:69:d3:d0:
b0:7a:73:3c:18:6f:6d:09:1c:cc:52:b8:5f:ab:0c:
54:ef:36:cf:85:37:40:2f:e3:da:51:d9:fa:00:b3:
5b:65:1a:4b:d6:9b:4d:73:fa:26:cc:85:10:4e:69:
8e:ae:c8:64:6d:b9:a6:eb:d6:db:3f:49:f9:de:67:
bf:43:31:cc:a6:1f:b2:6f:78:7f:d0:10:5a:77:d9:
cf:14:77:6d:41:02:32:84:74:bb:ae:93:cc:b0:20:
6f:83:79:d4:5c:27:64:54:1f:6c:7f:fc:d6:95:64:
3d:79:6b:99:06:37:35:b6:c7:4d:0a:a3:03:d5:ea:
44:61:00:6d:cf:3a:59:7a:79:d5:3c:b7:33:f4:d5:
8a:34:b3:b6:7b:22:ca:bd:63:46:58:34:cc:ba:42:
c3:20:3a:28:d3:33:15:2f:93:19:f4:84:d1:7e:c4:
89:ba:6c:de:af:1c:5b:d2:a1:e4:4c:9d:c6:80:23:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:66:62:B3:D5:42:1C:30:C5:2C:40:94:68:75:A5:0D:4B:92:C9:65
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gGZis9VCHDDFLECUaHWlDUuSyWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:55:b2:23:07:29:a6:1e:17:bd:76:00:5f:49:c7:16:f8:c9:
7d:2a:e6:a8:1e:22:04:79:06:bf:86:bb:bb:49:53:4d:5c:c1:
93:d9:e9:c0:8d:90:78:45:9e:d1:c0:16:59:90:51:a0:60:28:
3c:fd:2b:94:04:b0:5e:c3:68:79:37:ae:a2:2c:fb:e8:9d:b1:
14:34:16:50:08:10:1e:ad:da:5b:0b:38:b7:0c:10:df:82:23:
0f:0a:d5:97:53:7d:41:06:e3:b2:a5:59:cb:e1:d5:4f:34:e4:
29:53:80:f4:3a:7f:27:ef:37:11:6d:db:d3:99:48:a2:cb:73:
1e:6b:53:60:80:22:88:b0:c5:11:af:43:9d:d8:30:85:cc:c5:
e4:79:30:14:75:94:bc:1c:90:9e:5b:89:c9:b9:64:e2:4f:03:
9f:14:fe:65:1f:e4:e8:3a:c8:c0:dc:07:a6:51:5c:7c:ca:42:
0e:9c:6b:53:e3:f8:7d:a7:2d:a5:97:68:d9:61:45:69:94:a9:
dd:12:ab:02:a1:5d:4a:f6:e3:cb:3c:4f:fd:3e:52:2c:42:c8:
0e:09:f1:0f:69:b9:bf:41:55:64:d5:19:de:ce:39:30:00:b8:
05:af:4e:12:b8:dd:e0:77:b1:b2:e1:3b:ff:ac:9d:35:65:12:
37:79:b4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:15:53 2025 by rpki-client