Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gjtpbDKPb-Dav1YLZp_X7ofmHCk.roa
File: gjtpbDKPb-Dav1YLZp_X7ofmHCk.roa (raw, json)
Hash identifier: jPF2+mOO9sLIQtUCdgaVpxeG3e4otnJaHrM8sXI98aU=
Subject key identifier: 82:3B:69:6C:32:8F:6F:E0:DA:BF:56:0B:66:9F:D7:EE:87:E6:1C:29
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BBCFBBFBDA4D7BD8FA3348AE2102B3BFF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gjtpbDKPb-Dav1YLZp_X7ofmHCk.roa
Signing time: Sat 11 Nov 2023 06:04:57 +0000
ROA not before: Sat 11 Nov 2023 06:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:bcfb:4a80/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bc:fb:bf:bd:a4:d7:bd:8f:a3:34:8a:e2:10:2b:3b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 11 06:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=823b696c328f6fe0dabf560b669fd7ee87e61c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:60:ab:87:a6:b9:ef:78:a3:42:4a:63:c4:
ed:00:b6:93:de:c0:57:01:3c:92:ab:59:de:b8:c0:
cf:7c:26:58:ae:07:f5:1f:a5:85:dc:2a:24:ce:19:
e5:72:2b:9f:65:10:32:cb:8b:fa:2e:d1:e4:b6:76:
16:1a:01:bb:93:d6:fb:dd:8e:ee:7b:18:6a:65:84:
80:57:49:28:df:b1:5f:3b:d7:c4:a1:41:ad:f1:fa:
e3:27:82:fd:6d:df:87:07:09:1a:74:23:b6:ab:37:
e2:18:3c:11:61:ef:c9:de:25:2e:91:fa:4b:7b:ea:
1d:5a:e2:b4:7f:3e:b1:8c:8b:bf:73:bc:30:98:68:
2e:43:98:b7:58:54:91:46:7c:f5:9a:87:2b:2b:e5:
c1:24:11:84:a0:4f:7b:bd:b3:d7:8f:14:dc:03:41:
e1:b7:06:8a:4c:5d:4d:ee:3c:c1:09:6d:67:e3:d2:
02:51:95:ef:98:b6:71:38:a3:b3:b7:34:1a:9f:ba:
27:9a:61:ed:04:26:47:2b:2a:41:d2:91:de:7d:91:
21:b4:ad:b7:7d:1a:62:ed:32:65:3e:69:d8:ab:23:
d6:a1:34:4c:27:d8:9b:bd:15:38:3c:5e:e0:70:63:
a8:65:1f:ca:5d:a0:ef:33:cd:35:f9:9c:e0:c2:fd:
ea:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3B:69:6C:32:8F:6F:E0:DA:BF:56:0B:66:9F:D7:EE:87:E6:1C:29
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gjtpbDKPb-Dav1YLZp_X7ofmHCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ba:51:51:fa:c9:a1:08:b8:cd:3f:71:c7:1c:fb:1b:cd:a2:9c:
b5:8c:3a:03:8b:6d:ef:47:ac:55:ea:eb:34:db:42:e7:8b:25:
1b:ce:9e:19:6b:60:be:81:f4:08:40:91:3c:2f:f5:bd:dd:9f:
e3:aa:e4:fe:1d:e5:4a:c5:a6:9d:2f:c8:5d:e3:c4:0e:19:2b:
2d:bc:8c:05:bb:0b:60:f2:99:75:e9:ea:51:cf:97:5c:3e:85:
0b:ef:5f:82:82:07:5f:34:ed:77:16:e7:57:df:61:4d:fa:0f:
f7:14:ee:9f:ca:d5:1c:a2:ec:9b:82:ba:68:cb:dd:62:b2:ec:
2c:02:cc:bf:99:6b:b6:a9:b5:a5:c6:54:23:74:02:ac:2d:e0:
0d:8a:f9:20:c8:70:44:a3:57:d8:ee:ba:c8:30:88:8e:df:1d:
a8:fc:74:0b:06:f9:d4:5c:c4:c1:7c:4f:ff:50:81:0d:fe:8a:
aa:8c:ce:76:4f:f7:35:99:a4:71:02:a7:f0:da:79:03:c8:24:
0a:01:94:ca:67:31:38:c3:f0:0d:06:82:ed:e3:0a:bb:f9:cb:
66:f1:2d:b8:82:dc:b6:00:1a:12:06:d3:d1:61:13:8e:38:26:
a6:70:b5:4a:47:38:fc:f7:5c:08:c6:87:78:55:97:7b:4d:05:
9d:23:34:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:50:02 2025 by rpki-client