Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gdog1Y4tn_3SHJmXAEI1d9QhAsM.roa
File: gdog1Y4tn_3SHJmXAEI1d9QhAsM.roa (raw, json)
Hash identifier: IC7QzqXDQVtwNuOlbA+ttQs+iKvuCFPDA5HXvKf5PXo=
Subject key identifier: 81:DA:20:D5:8E:2D:9F:FD:D2:1C:99:97:00:42:35:77:D4:21:02:C3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3F3DF4A5B28D7FD3ADC2C9DCBD83A144
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gdog1Y4tn_3SHJmXAEI1d9QhAsM.roa
Signing time: Tue 17 Oct 2023 20:05:06 +0000
ROA not before: Tue 17 Oct 2023 20:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:3f3d:5507/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3f:3d:f4:a5:b2:8d:7f:d3:ad:c2:c9:dc:bd:83:a1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 20:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81da20d58e2d9ffdd21c999700423577d42102c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:84:f1:ba:c0:0c:89:02:15:03:41:ff:81:
cd:dd:99:2b:21:52:17:51:9d:9c:c7:8b:38:f3:ba:
90:72:24:b0:b1:61:0c:23:6f:a8:d5:9f:5e:14:7f:
57:3e:6f:18:ef:d4:53:69:3e:f0:c2:12:12:14:0a:
68:ad:4d:d7:26:9e:0a:d3:57:1a:af:af:49:96:3e:
8d:3c:4e:a8:d4:99:9b:0a:27:3e:40:29:9e:b2:90:
36:ce:fe:f5:9b:26:de:50:3f:c4:d2:f6:32:dd:b7:
53:21:d1:90:50:da:76:cb:b0:a1:08:48:f5:60:8e:
91:be:b2:32:30:fe:3b:8f:e9:6f:e9:ad:03:4e:f3:
f1:31:9c:6f:5a:03:0a:ac:ff:9a:06:dc:4b:a2:38:
5f:62:b6:30:e8:a8:a7:ac:da:d0:a5:5e:f8:cf:b2:
5a:70:fb:ab:50:73:fa:65:7d:fe:9a:f0:7b:04:08:
25:7a:68:6a:3a:ce:4c:f8:8a:58:04:6b:df:d3:88:
d3:c3:26:a9:6c:a7:c1:a5:10:e4:cd:b9:b2:99:0c:
fd:da:be:3c:3b:53:a5:da:e3:e3:ec:3a:4b:3b:16:
92:4e:88:f1:95:06:4e:e1:7c:da:a6:ce:ca:dd:03:
8d:29:d3:7d:4d:73:6f:58:59:da:e6:1f:d7:ae:c8:
04:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DA:20:D5:8E:2D:9F:FD:D2:1C:99:97:00:42:35:77:D4:21:02:C3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gdog1Y4tn_3SHJmXAEI1d9QhAsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:dc:93:25:aa:fd:51:81:dd:52:91:43:2d:ea:de:ce:3b:6b:
f8:81:ee:de:a7:1d:c6:38:9a:f9:3c:8d:f1:a7:be:0c:fb:cf:
a2:a6:67:7c:61:bd:aa:8f:ee:8f:7d:7e:09:97:04:43:63:a5:
d2:b4:cd:55:92:e0:60:4e:63:de:77:6f:d8:50:98:d5:8c:9c:
a2:89:5a:f8:b9:b1:47:61:60:56:1a:4e:72:a5:3e:29:f6:9f:
8c:31:1a:2e:ea:31:68:cd:70:d8:9a:17:04:d5:1a:23:76:18:
fa:67:31:38:7c:87:55:6e:20:39:be:ee:23:5f:a9:81:c1:3f:
36:db:18:d1:6d:33:c1:64:bf:7c:38:71:8e:8f:cb:18:4e:d0:
59:0a:7b:46:5c:72:0f:b0:f1:9d:63:3c:f9:99:6f:60:7e:2e:
62:74:c5:0a:ee:3d:fd:26:c3:70:5f:8f:9b:88:8c:6e:c6:7e:
39:2c:d4:24:c3:db:c9:a1:e5:02:98:b2:de:4f:57:c0:c6:3b:
bc:a5:6a:6c:9f:41:91:56:a8:e4:30:fb:1c:c7:8b:7b:25:71:
de:77:be:88:bd:62:4b:44:a3:ef:78:da:31:60:c6:65:20:63:
7a:d2:9b:1b:27:9e:9e:35:a7:e3:5b:7d:07:94:4e:0c:9c:7e:
10:2a:95:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:04:45 2025 by rpki-client