Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gq-bS6giCCn2jpsjRtrTcDPMUFc.roa
File: gq-bS6giCCn2jpsjRtrTcDPMUFc.roa (raw, json)
Hash identifier: kgOkQSThhqDtmCaIYw1AwUXFKtyx8NeQiNgKgQp2aS0=
Subject key identifier: 82:AF:9B:4B:A8:22:08:29:F6:8E:9B:23:46:DA:D3:70:33:CC:50:57
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D1F0EACF17F28FFC583084B26FAF3A41D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gq-bS6giCCn2jpsjRtrTcDPMUFc.roa
Signing time: Fri 19 Jan 2024 00:11:11 +0000
ROA not before: Fri 19 Jan 2024 00:11:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1f:0e:ac:f1:7f:28:ff:c5:83:08:4b:26:fa:f3:a4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 19 00:11:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82af9b4ba8220829f68e9b2346dad37033cc5057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:e1:04:48:5d:a1:12:c4:47:8b:43:2e:53:
51:73:fe:4c:d1:ea:8d:e7:60:d2:ea:f6:c3:de:47:
5f:d5:aa:24:f3:6d:41:65:60:20:6b:82:c0:71:70:
14:7a:e7:86:b9:04:df:d5:67:48:86:08:67:bb:65:
cb:ef:d1:76:b2:6c:6a:94:e0:e8:bf:df:6d:19:63:
25:65:62:82:4d:a2:e1:e7:09:7e:bf:0b:b6:93:61:
2a:9f:8d:af:1f:c4:ba:40:8a:41:6b:ee:b9:6c:09:
84:ab:57:7c:86:ec:24:20:95:b4:be:e4:1e:ed:ec:
c6:66:b2:fc:e6:81:66:6c:65:68:bd:cd:18:92:97:
3a:1f:52:b3:71:1b:f8:6a:72:ed:e3:21:c6:41:03:
77:70:f6:c4:e3:63:10:ea:06:93:0e:0a:27:d1:e9:
7b:df:8a:67:b7:f8:70:28:b7:23:da:43:40:62:0e:
9e:72:90:66:1e:81:d1:07:92:26:8c:92:98:23:82:
33:65:cf:1e:be:48:10:a9:c1:77:e9:b0:a6:9d:33:
18:4d:52:0d:cb:3e:b7:08:4c:55:0f:db:9b:f5:8e:
06:e3:63:2d:53:c5:e7:37:4b:17:ee:3b:5c:e9:cf:
2b:3b:b3:dc:3f:28:cc:9b:7f:8a:68:16:ed:41:01:
a8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AF:9B:4B:A8:22:08:29:F6:8E:9B:23:46:DA:D3:70:33:CC:50:57
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gq-bS6giCCn2jpsjRtrTcDPMUFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:d0:f6:ad:aa:16:e9:69:25:33:e0:19:e4:b5:66:66:dd:ac:
ca:72:8b:7d:c1:44:2f:2c:49:e0:5f:d7:a9:24:e1:7e:fb:18:
20:7b:91:e6:94:9e:50:d9:6c:24:53:1f:02:78:77:94:f7:c3:
d0:6c:18:77:c3:f0:59:0f:e3:13:a7:c8:7b:f6:cd:b4:20:e7:
46:ab:e7:06:85:7a:bb:d9:52:63:fb:ae:b2:a4:96:99:0f:93:
e4:8b:ad:58:44:84:36:15:7d:e2:c5:7e:8d:a4:85:ba:25:8b:
1b:4e:65:8e:1f:a0:68:05:ec:c7:f2:17:02:a9:9d:71:b0:d2:
5b:2b:eb:4f:03:c8:f2:fc:ec:8f:19:9a:8c:46:40:9e:59:b5:
47:60:94:cf:23:41:e3:88:47:46:9e:3d:a5:19:fc:49:c8:46:
29:d4:cb:15:0f:90:8e:cf:fa:4a:da:c1:01:6b:6a:10:7b:31:
ec:d8:b1:99:dc:91:1a:5f:ce:8e:4b:49:59:90:85:f1:a9:8d:
70:8e:88:16:d8:81:c0:fe:26:f5:56:16:cb:22:92:3b:08:b2:
ee:d4:52:c2:2b:f9:83:8b:da:b0:41:e6:e7:a5:ce:38:0d:e0:
8c:12:4a:18:96:cf:cc:f4:02:54:1f:ad:cb:8e:f3:34:e7:04:
8f:37:f1:d9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY0fDqzxfyj/xYMISyb686QdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTE5MDAxMTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmFmOWI0YmE4MjIwODI5ZjY4ZTliMjM0NmRhZDM3MDMzY2M1MDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcfhBEhdoRLER4tDLlNRc/5M0eqN
52DS6vbD3kdf1aok821BZWAga4LAcXAUeueGuQTf1WdIhghnu2XL79F2smxqlODo
v99tGWMlZWKCTaLh5wl+vwu2k2Eqn42vH8S6QIpBa+65bAmEq1d8huwkIJW0vuQe
7ezGZrL85oFmbGVovc0Ykpc6H1KzcRv4anLt4yHGQQN3cPbE42MQ6gaTDgon0el7
34pnt/hwKLcj2kNAYg6ecpBmHoHRB5ImjJKYI4IzZc8evkgQqcF36bCmnTMYTVIN
yz63CExVD9ub9Y4G42MtU8XnN0sX7jtc6c8rO7PcPyjMm3+KaBbtQQGoKQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIKvm0uoIggp9o6bI0ba03AzzFBXMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvZ3EtYlM2Z2lDQ24yanBzalJ0clRjRFBNVUZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACXQ9q2qFulpJTPgGeS1
ZmbdrMpyi33BRC8sSeBf16kk4X77GCB7keaUnlDZbCRTHwJ4d5T3w9BsGHfD8FkP
4xOnyHv2zbQg50ar5waFervZUmP7rrKklpkPk+SLrVhEhDYVfeLFfo2khbolixtO
ZY4foGgF7MfyFwKpnXGw0lsr608DyPL87I8ZmoxGQJ5ZtUdglM8jQeOIR0aePaUZ
/EnIRinUyxUPkI7P+krawQFrahB7MezYsZnckRpfzo5LSVmQhfGpjXCOiBbYgcD+
JvVWFssikjsIsu7UUsIr+YOL2rBB5uelzjgN4IwSShiWz8z0AlQfrcuO8zTnBI83
8dk=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:15 2025 by rpki-client