Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/G0jZs3E4UK_rJuptMBHFlUc59_E.roa
File: G0jZs3E4UK_rJuptMBHFlUc59_E.roa (raw, json)
Hash identifier: WJtfaWkaQX5s6/1YO/BYbU1hSVucSt6TXwhc29lNUpY=
Subject key identifier: 1B:48:D9:B3:71:38:50:AF:EB:26:EA:6D:30:11:C5:95:47:39:F7:F1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C758F2BBB2EF65A49C2700358BEB3F154
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/G0jZs3E4UK_rJuptMBHFlUc59_E.roa
Signing time: Sun 17 Dec 2023 02:16:06 +0000
ROA not before: Sun 17 Dec 2023 02:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:75:8f:2b:bb:2e:f6:5a:49:c2:70:03:58:be:b3:f1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 17 02:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b48d9b3713850afeb26ea6d3011c5954739f7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:fa:00:1e:9c:3c:1c:e3:ec:de:23:68:06:
36:8c:27:90:e1:ed:d3:5b:8e:cb:b2:1c:94:dc:f3:
4c:95:f6:b8:1c:b4:a8:9e:8a:ac:b3:56:97:10:97:
de:73:15:b8:ec:d7:e6:62:e0:c0:fe:68:08:59:ec:
b1:8c:41:7d:db:9d:22:d6:f4:89:a0:74:e6:34:a2:
f2:b7:3a:e0:f2:d8:fc:f1:ac:57:15:3c:81:d6:94:
39:46:db:21:23:92:a3:15:1b:b5:ae:ad:53:84:77:
2d:71:71:98:26:40:a0:32:f9:54:f8:5a:38:c5:cd:
2b:b3:44:e3:93:9d:2a:cf:0f:ca:e8:c7:51:0c:e1:
6e:f6:27:f9:63:92:0d:8a:f9:dd:b9:d7:5b:b5:ef:
75:9a:ef:41:7f:cc:95:a1:c8:0f:2b:0b:9b:7b:22:
4a:bb:61:9e:4e:d3:4a:96:6a:5b:38:cd:24:cd:00:
dd:01:c5:c5:54:f6:ce:08:da:61:87:d1:63:cc:f6:
7c:fb:35:00:f0:68:d2:15:4b:ae:f0:95:f9:b7:d2:
56:fd:b2:de:03:5d:cd:e9:0f:f0:bd:b0:6b:5c:90:
f6:c3:50:8f:2d:25:33:25:98:ed:dd:2b:f4:53:ae:
01:25:98:7d:94:8a:11:7c:5d:4b:74:3a:8a:7b:fe:
0d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:48:D9:B3:71:38:50:AF:EB:26:EA:6D:30:11:C5:95:47:39:F7:F1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/G0jZs3E4UK_rJuptMBHFlUc59_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:8f:8f:46:03:10:80:35:f9:75:73:9e:79:e7:9b:41:72:c8:
6f:d9:c4:6f:2c:b1:2b:03:fd:26:47:0d:d7:37:9e:4f:d6:c2:
98:77:80:b7:d0:bf:78:80:9f:f5:9e:ae:7c:ac:01:99:9c:d0:
27:91:59:f3:b4:f6:5c:f3:2f:2c:db:c7:aa:79:02:d0:83:f4:
89:1b:45:27:35:9c:2c:0a:cb:3d:73:21:1a:e3:79:e9:12:9f:
7f:a0:e1:a2:db:d9:ef:05:05:a7:52:56:d0:8f:9d:8d:9c:3e:
f4:48:aa:ad:02:44:8e:6c:41:40:1f:1f:38:7e:43:64:29:d5:
40:10:c4:ca:77:78:1f:85:0b:1d:8f:f4:49:a1:6c:a1:51:44:
19:b3:3c:73:9c:18:b6:5a:90:6c:cb:45:74:65:23:89:00:88:
30:9f:bf:dc:d1:7c:aa:a5:d5:64:1f:a2:7c:fe:b0:0d:ef:6f:
c0:59:98:bc:bf:e1:b2:ea:66:03:bf:51:66:b0:f6:8e:de:78:
3f:6b:73:96:8d:be:90:78:2c:a5:d2:3e:51:ea:72:61:d8:95:
5f:91:09:f4:86:27:98:60:df:05:a2:86:97:e6:03:73:e6:ca:
38:ae:8f:96:b3:02:fc:05:bf:83:f2:a7:45:f6:e1:56:41:3e:
d5:76:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:46:39 2025 by rpki-client