Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gbJqOiRafMAjFO9fSRbOh16nc58.roa
File: gbJqOiRafMAjFO9fSRbOh16nc58.roa (raw, json)
Hash identifier: EMWtrJ21IwMZEClOtta2yAFpQNGMhgkN6oTRD6x0XRw=
Subject key identifier: 81:B2:6A:3A:24:5A:7C:C0:23:14:EF:5F:49:16:CE:87:5E:A7:73:9F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C28E9D243B4FB85FDA0838773A2CE8A7E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gbJqOiRafMAjFO9fSRbOh16nc58.roa
Signing time: Sat 02 Dec 2023 05:04:21 +0000
ROA not before: Sat 02 Dec 2023 05:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:28e9:c17d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:28:e9:d2:43:b4:fb:85:fd:a0:83:87:73:a2:ce:8a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 05:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81b26a3a245a7cc02314ef5f4916ce875ea7739f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6b:d8:99:ff:e9:d5:4c:dd:2c:83:c4:19:92:
78:c6:a4:6a:a1:90:9c:1a:2c:6f:97:74:5a:22:b8:
64:9a:ad:41:e5:ca:bf:1c:7a:7d:eb:58:3a:3e:1b:
39:fd:85:ee:75:76:58:6d:26:04:68:7b:80:dd:a1:
ea:f1:53:92:91:1c:bb:56:fb:c8:da:39:74:b2:ab:
a5:e8:23:39:dc:0d:63:d9:bc:51:23:d1:dd:b8:60:
e3:9c:53:7b:19:62:7e:2a:2d:0b:15:66:ba:fe:90:
3b:75:cd:db:47:3b:8f:69:df:e5:42:a8:e4:b3:53:
ab:0c:63:c5:0c:34:83:d2:71:1b:e3:33:9c:ed:72:
5a:9b:26:ad:a7:cd:5b:7d:2b:42:a3:6c:96:2b:f8:
0e:6f:a9:40:5d:3d:a5:d9:9b:df:f7:8b:04:3d:3c:
e1:f8:86:f9:b3:ac:68:9f:3f:17:19:c9:d0:8b:cd:
66:b5:64:a6:52:97:c7:25:12:ed:2d:f1:9a:16:c7:
bb:14:72:a7:c8:c4:83:61:1a:25:e7:d7:a4:d4:dc:
b8:21:41:93:f5:46:02:f1:33:6c:49:2d:17:72:08:
f2:1a:ce:17:60:f4:3b:6d:43:74:a2:3e:d2:8d:b1:
5d:84:04:16:09:2d:51:16:93:22:09:5c:e9:6e:3c:
e4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B2:6A:3A:24:5A:7C:C0:23:14:EF:5F:49:16:CE:87:5E:A7:73:9F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gbJqOiRafMAjFO9fSRbOh16nc58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:1a:86:99:39:e1:0e:46:22:bc:2e:08:7b:fb:15:ad:6b:21:
98:7b:47:89:34:7b:29:b0:86:98:cc:67:16:89:0c:a7:1b:60:
f9:cb:9d:4b:7f:d3:77:5a:b0:74:74:14:e6:b5:d3:1f:56:5f:
c9:79:b1:60:12:95:7d:6d:b0:c6:43:45:fd:91:88:5d:63:a5:
af:ad:d2:78:47:c1:a1:a9:58:00:b3:f9:57:6a:35:0f:36:55:
25:67:e4:d1:35:03:80:3f:28:fd:dd:76:e6:9f:d2:c8:6b:32:
f5:39:2d:0e:b0:a0:c2:29:be:ac:94:a8:c0:42:2b:f3:a8:28:
ee:41:d9:75:90:11:05:66:cc:a7:74:4f:31:8f:bc:40:47:ab:
4e:b8:21:95:96:41:8b:3b:0f:74:a9:05:9f:ae:75:7c:46:f1:
60:bf:69:25:34:ea:61:5c:2e:18:78:72:42:60:07:dd:f7:f6:
ca:bd:40:4f:b1:15:22:57:30:55:53:39:fb:e8:e0:01:da:35:
b0:8a:56:fe:53:a2:0c:c5:36:aa:72:57:99:ea:8c:80:6a:3e:
a5:43:ee:44:c2:a8:47:26:aa:48:f6:ef:8e:a2:7d:83:79:bd:
c3:b0:94:e1:94:46:ed:14:cb:cd:e7:85:cb:f2:24:51:dc:18:
59:2f:60:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:18:19 2025 by rpki-client