Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gUp4xGz2qAgczM3Lr9-hXXxy9kw.roa
File: gUp4xGz2qAgczM3Lr9-hXXxy9kw.roa (raw, json)
Hash identifier: p7aCdrzNepjLrschbQFAdmBf21YP0LEMiCcvAYgy/Fc=
Subject key identifier: 81:4A:78:C4:6C:F6:A8:08:1C:CC:CD:CB:AF:DF:A1:5D:7C:72:F6:4C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2D08F18F0ED46DE4E92DC5FE2FCEB5EE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gUp4xGz2qAgczM3Lr9-hXXxy9kw.roa
Signing time: Sun 03 Dec 2023 00:16:50 +0000
ROA not before: Sun 03 Dec 2023 00:16:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2d:08:f1:8f:0e:d4:6d:e4:e9:2d:c5:fe:2f:ce:b5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 00:16:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=814a78c46cf6a8081ccccdcbafdfa15d7c72f64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:52:e4:d3:6d:23:59:b8:ec:a2:7b:80:80:
d2:9b:2e:58:cb:3e:af:9b:71:82:58:ee:c8:9d:db:
54:a3:73:0b:29:5d:ca:17:5a:85:4d:4c:da:70:e6:
5a:18:f1:b9:7b:b9:0f:6b:df:4d:54:33:ce:03:d2:
cc:fd:ea:45:57:7c:62:30:a8:a9:eb:20:7b:75:de:
f6:fa:75:32:d9:72:24:00:69:fb:fa:be:2c:4c:9d:
14:96:1b:f3:1c:8d:8c:59:78:e7:45:70:73:da:10:
d9:f7:58:75:10:f9:3d:ef:1c:04:1d:bf:7f:9b:06:
ba:25:eb:b3:4b:34:3a:63:1d:ec:f4:f2:59:71:d1:
d4:a8:11:09:d9:0d:12:a2:79:eb:72:41:fe:03:c0:
72:4c:8f:98:05:e4:af:3d:9d:c5:06:75:07:f5:1a:
71:9f:27:bd:44:a1:fb:ae:ee:d2:2a:6c:a0:d9:58:
51:86:9d:9b:36:1c:0c:74:ce:f4:21:54:0a:d1:7d:
82:de:65:53:d9:8b:d7:16:c2:f4:c0:0c:a2:40:8a:
fe:02:4c:19:45:dd:38:9b:72:2a:6f:ef:72:b9:11:
ad:68:93:f3:f1:a6:de:39:95:34:62:90:58:27:04:
51:2b:78:71:8e:51:1f:ce:41:69:ed:38:33:02:8d:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4A:78:C4:6C:F6:A8:08:1C:CC:CD:CB:AF:DF:A1:5D:7C:72:F6:4C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gUp4xGz2qAgczM3Lr9-hXXxy9kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:3f:7f:0e:b9:bf:9c:47:31:92:5f:3a:93:01:a4:02:3f:df:
c4:05:e3:e8:0b:6c:5f:5f:5d:38:29:c1:fc:ab:d0:b3:6b:ae:
5b:8c:1f:89:7f:76:61:07:dd:83:34:c9:e8:4d:d1:99:fa:12:
d9:bf:ec:97:b6:1c:a2:ed:d0:1f:f0:be:ff:56:11:57:cb:80:
16:b7:87:47:a7:15:f3:8d:9f:fa:31:f0:a3:35:3b:cc:41:88:
21:a3:e7:ac:b0:46:74:82:32:da:68:b6:1b:80:a3:e6:1c:0c:
c8:c0:eb:34:4a:f8:f3:38:84:fd:2e:1f:90:c4:44:95:27:16:
03:3a:17:6b:c0:16:0a:70:8d:45:ea:2a:4d:b4:5a:3b:c2:28:
65:84:b7:96:4e:5f:25:fc:aa:da:41:28:49:d6:af:00:3c:d4:
96:3b:49:e5:a0:8d:85:36:98:d5:1b:ec:06:37:54:18:c1:9c:
27:45:b9:21:61:fb:d9:41:9d:0b:ac:ec:81:35:fd:d8:5f:a5:
70:3f:7a:61:37:f6:22:cf:c8:92:9c:be:27:28:17:67:44:64:
ce:13:87:2f:98:7a:7f:4b:b7:4f:36:24:23:be:2d:94:ab:09:
ef:54:a9:08:89:db:57:54:25:bf:a4:67:40:e1:ff:4a:38:0f:
2e:f6:ca:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:26:08 2025 by rpki-client