Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gjc6QTjDB2n3i8_uHmVhXNd7hss.roa
File: gjc6QTjDB2n3i8_uHmVhXNd7hss.roa (raw, json)
Hash identifier: ZnKTl295pZYLrjlNe7aupl5evM47wQtxgC4HLHXraOg=
Subject key identifier: 82:37:3A:41:38:C3:07:69:F7:8B:CF:EE:1E:65:61:5C:D7:7B:86:CB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C97A31BB54AA8DC3A26FAC4C943A00B1F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gjc6QTjDB2n3i8_uHmVhXNd7hss.roa
Signing time: Sat 23 Dec 2023 17:04:58 +0000
ROA not before: Sat 23 Dec 2023 17:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:97a2:6e10/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:97:a3:1b:b5:4a:a8:dc:3a:26:fa:c4:c9:43:a0:0b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 23 17:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82373a4138c30769f78bcfee1e65615cd77b86cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ef:19:c3:0d:8e:9d:22:d9:37:39:c9:e3:f7:
48:ee:75:c0:fd:4c:a3:44:e4:1f:a0:4b:c6:5a:64:
65:64:70:2f:27:55:dd:9e:43:b1:53:a7:b7:d8:87:
a0:0a:2c:b8:13:fe:b2:c6:80:8c:5b:e2:52:c1:44:
aa:a5:f8:34:d1:37:5d:6f:ec:dd:cc:49:2f:89:a3:
7c:88:d1:2f:18:1f:a8:fc:68:97:49:79:a0:37:55:
14:17:ee:09:82:af:74:75:9b:87:e0:ee:6a:35:de:
f1:4c:74:19:9d:fe:63:91:c5:84:19:45:f5:6f:8a:
f3:60:e3:b0:9f:27:e8:9f:93:b8:e0:8c:6c:6a:a5:
ec:ba:8c:f4:61:46:86:ab:dc:a0:0f:9b:51:e0:29:
cb:b0:c6:6b:e3:32:7d:d6:dd:8a:4d:51:92:a5:db:
3b:b2:37:1c:83:dc:87:00:e3:50:9b:96:dd:2d:8b:
bd:84:a4:ad:4c:d8:2c:6d:c4:f1:2f:c3:5b:67:fe:
e9:7f:90:96:34:7c:a3:43:b4:b2:3b:77:93:c6:d9:
fe:e4:08:e7:9c:b4:14:9d:54:4e:a4:36:44:7c:7f:
ae:3a:ea:59:00:77:95:12:a7:92:92:4c:de:53:15:
20:07:a9:7a:cb:7d:6a:68:21:01:71:7d:08:4b:83:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:37:3A:41:38:C3:07:69:F7:8B:CF:EE:1E:65:61:5C:D7:7B:86:CB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gjc6QTjDB2n3i8_uHmVhXNd7hss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:41:d0:af:64:93:5c:b7:89:1a:d4:9f:49:4a:38:ab:14:2a:
4b:e2:6d:03:72:0f:51:d3:67:2f:07:0a:83:c5:5f:41:a6:b6:
66:de:55:32:d9:7d:96:33:c9:c8:20:12:6a:dd:ef:d6:d9:86:
a1:db:5c:09:17:bb:41:73:6d:10:bf:f5:68:90:bd:8d:b8:a9:
7b:72:8d:26:73:bf:6b:31:36:5b:c3:91:66:d0:31:2e:93:5c:
0d:58:da:14:87:1f:71:5e:f3:3a:2b:1f:67:14:5b:d2:50:e5:
42:52:df:8d:1b:4a:f1:08:c5:ca:4e:fa:9d:e5:4f:cd:97:57:
1d:11:c5:fb:b1:9f:19:1d:77:da:7e:b0:eb:5c:df:35:54:45:
44:2d:ce:3a:16:5a:42:6f:ec:69:2a:4f:eb:56:79:52:97:59:
78:e6:be:85:68:6d:35:95:84:49:0c:af:2e:be:c2:11:3b:07:
90:ce:b1:8f:2c:56:0d:02:48:71:22:a7:67:ed:c1:b6:02:ff:
fc:c2:57:e8:cf:bb:72:98:9f:8f:67:e7:b6:a6:26:56:86:86:
a3:ce:e9:e6:d4:9e:3b:a7:a2:39:d4:53:e6:23:91:6d:99:d6:
ab:57:37:76:9b:5e:b1:5d:a4:cb:aa:30:ad:b3:aa:d4:a7:ca:
e7:3d:c8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:28 2025 by rpki-client