Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gPfS2c_YKI0cJ-NOeA7tZELOJA0.roa
File: gPfS2c_YKI0cJ-NOeA7tZELOJA0.roa (raw, json)
Hash identifier: E8i6HxIVV7MdoHdBScg9rhQ+78IbkrV/Mj8mopXHfrw=
Subject key identifier: 80:F7:D2:D9:CF:D8:28:8D:1C:27:E3:4E:78:0E:ED:64:42:CE:24:0D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAD1ECB88A14EE1642704FC4675803E99
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gPfS2c_YKI0cJ-NOeA7tZELOJA0.roa
Signing time: Wed 08 Nov 2023 04:09:18 +0000
ROA not before: Wed 08 Nov 2023 04:09:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ad:1e:cb:88:a1:4e:e1:64:27:04:fc:46:75:80:3e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 04:09:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80f7d2d9cfd8288d1c27e34e780eed6442ce240d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:b6:94:d0:ee:81:45:cf:04:73:04:38:d3:
ba:6b:8b:bd:ea:97:6c:9e:d5:57:ac:b6:55:ec:2b:
4b:a7:1b:df:3b:14:b4:5f:73:00:5c:49:c8:e6:1f:
ce:14:db:a2:a8:02:15:29:72:c6:31:a5:56:6b:d7:
90:74:1a:7c:46:c0:a0:ed:30:fb:5c:a0:8c:b3:91:
0c:26:83:5f:07:7e:4f:29:b2:d2:75:87:d9:b2:ba:
85:1b:65:7e:94:ff:db:40:f3:73:6d:6e:04:d8:89:
86:75:9d:c0:26:6c:29:c5:23:13:e9:86:de:b3:cb:
d6:ca:19:be:d6:df:85:dc:60:55:2e:a3:eb:e9:38:
35:5b:ce:08:bf:84:bd:7e:2f:bd:63:86:36:9b:cb:
2c:f3:09:da:18:da:47:f8:3d:b0:a4:cb:56:a3:64:
78:b0:da:84:98:5d:2a:54:ed:e3:de:24:0f:71:a3:
6a:0f:9d:93:48:1c:06:15:44:d4:e1:70:ad:9f:4d:
47:a9:27:55:4f:06:91:a8:2d:37:97:34:d4:70:a4:
d6:7b:7e:0a:36:d5:1d:e3:1f:6d:7a:9a:2a:cb:47:
c5:f3:be:36:91:21:66:4d:30:33:e5:b5:2c:f2:e7:
9d:81:b1:a1:ea:3f:5b:1f:c3:1c:d0:73:57:ac:f6:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F7:D2:D9:CF:D8:28:8D:1C:27:E3:4E:78:0E:ED:64:42:CE:24:0D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gPfS2c_YKI0cJ-NOeA7tZELOJA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:f9:02:ad:97:d3:fb:09:63:35:d0:10:06:f9:f3:10:86:f7:
af:29:70:ed:b1:82:01:9e:83:ff:3d:6a:fe:b9:c0:6c:e8:f5:
ea:f8:ab:0a:b8:25:7a:48:a9:68:49:ac:c7:d3:6a:fe:ed:ee:
62:34:d7:af:95:af:5b:4c:a7:8d:79:dd:57:68:d3:51:db:e9:
5d:c2:5f:65:63:07:13:6c:4f:69:3e:23:d1:61:99:5c:67:77:
7b:57:cf:0c:ce:ad:6d:ac:2b:38:12:80:a3:2b:90:df:63:48:
d7:21:2c:f8:eb:42:83:6b:80:af:bf:dc:79:41:34:f4:4e:f4:
0f:ad:5c:bf:25:d7:6d:2a:2f:cd:3d:5f:7e:a2:7f:60:7b:6e:
58:19:db:7c:c0:4a:85:6d:15:27:8c:6d:42:02:e1:a2:7c:3f:
12:4b:0c:44:5b:73:07:eb:3f:ad:02:31:b9:e9:e5:84:92:92:
01:2e:cc:e0:17:ea:7d:dd:7b:aa:63:7d:36:3f:13:e8:b1:0d:
c8:26:94:7d:a2:e4:53:24:81:a4:05:70:ad:64:ae:94:39:e7:
f7:1d:d2:e6:d7:2b:80:09:7f:5b:16:9c:6b:d1:cc:ee:3d:1b:
e0:6a:f5:1b:dd:fa:0e:36:07:3e:1b:75:a0:ad:c2:25:31:ec:
d8:fb:0b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:36:09 2025 by rpki-client