Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gwj2K0cg9smPvsbtRX4HwpiqDIY.roa
File: gwj2K0cg9smPvsbtRX4HwpiqDIY.roa (raw, json)
Hash identifier: +Sec0K3aWktVhed8OU4ahOFOxAf05MqmQIV+JYyRZ4s=
Subject key identifier: 83:08:F6:2B:47:20:F6:C9:8F:BE:C6:ED:45:7E:07:C2:98:AA:0C:86
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1B6520D1E0A028900E973646B98D9724
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gwj2K0cg9smPvsbtRX4HwpiqDIY.roa
Signing time: Wed 29 Nov 2023 14:04:21 +0000
ROA not before: Wed 29 Nov 2023 14:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:1b64:f9c2/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1b:65:20:d1:e0:a0:28:90:0e:97:36:46:b9:8d:97:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 14:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8308f62b4720f6c98fbec6ed457e07c298aa0c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6e:98:1f:af:ec:a5:51:ce:6a:3f:14:87:49:
68:d7:8e:9d:9d:58:31:93:bb:55:1f:a7:b4:14:9a:
e0:4d:e1:42:00:9d:4b:74:b6:fd:2c:ce:85:ae:f2:
05:c0:a9:4f:55:3d:fc:c4:68:53:b0:d7:99:1c:39:
a1:f4:60:8f:e4:52:ac:ed:fa:4e:25:cb:c3:ea:6d:
48:c6:2b:45:0b:88:5c:9b:53:43:fd:fd:99:ca:8a:
8a:8b:26:4b:22:57:aa:99:e5:bd:23:30:ea:5d:4c:
ed:4e:ba:e1:ec:69:3e:16:50:08:ab:b5:fa:b0:80:
dc:a0:aa:76:80:4f:c6:90:0f:26:85:05:65:6b:00:
90:92:4c:ef:65:f4:53:54:52:5b:f6:1c:57:b1:7d:
6e:9b:f1:a3:28:9f:f7:ae:c6:24:ca:4c:d4:22:70:
27:7c:ad:91:2e:02:f4:e6:a5:9a:ee:ae:2c:fe:62:
d9:f9:80:95:5f:26:6c:d3:ba:70:5a:13:e6:35:9e:
ae:3e:55:a6:96:3d:78:b9:e7:71:b5:1f:39:c3:6b:
21:df:0b:1a:b2:42:1b:ac:c8:b6:28:c4:91:b9:25:
fd:c6:f1:46:3c:6f:f4:86:b6:dd:cc:13:c4:b4:48:
4f:6b:59:1f:f2:80:96:4e:3c:09:2d:2f:47:6c:51:
82:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:08:F6:2B:47:20:F6:C9:8F:BE:C6:ED:45:7E:07:C2:98:AA:0C:86
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gwj2K0cg9smPvsbtRX4HwpiqDIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:2b:51:eb:1a:d1:ec:dd:4d:c2:de:9a:fa:d1:65:79:ae:8e:
a3:93:99:3f:81:35:42:a1:20:15:62:ba:8f:c3:f6:32:c4:da:
44:e1:87:90:6d:98:1f:1c:66:33:5a:2d:ea:7f:ac:23:39:32:
af:3a:8d:0d:6a:af:75:72:1b:a4:40:c7:fc:56:a7:52:af:5a:
ad:98:7d:fa:09:5a:1b:40:24:94:23:cb:3f:eb:c3:ff:f6:da:
35:cc:3e:fe:f9:65:b0:be:ba:4c:23:6a:a2:b0:75:a5:b4:76:
68:b6:18:9d:89:15:09:13:ea:06:09:f7:8a:13:86:d0:2a:92:
7e:03:5a:cb:6b:d7:d3:89:95:34:64:a4:cc:6d:07:37:f3:62:
14:18:04:30:37:9d:2d:2f:dc:3f:e4:df:b2:1d:18:5c:87:5e:
82:36:ea:ae:e8:b1:64:52:12:bf:31:75:12:85:19:26:55:da:
13:ca:46:6e:ed:b7:43:71:99:52:df:57:2b:4b:a9:ca:00:8e:
16:1f:21:c8:fa:bb:1a:e2:7b:e7:3d:ac:2c:f5:7e:4a:f9:0d:
33:3b:3a:0d:b5:6e:0a:e0:f8:42:fd:a6:c8:da:ec:91:b1:56:
ab:fa:1f:0c:04:40:5f:d3:0e:30:08:2d:9d:eb:64:aa:71:b7:
1e:61:4e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:53:16 2025 by rpki-client