Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GBdZiHlDGtUnz-NhRKi3C2Zisl8.roa
File: GBdZiHlDGtUnz-NhRKi3C2Zisl8.roa (raw, json)
Hash identifier: KESutLxndKxFKeDHzwiJlWHvvRKbxkb+xTAweEwYHUs=
Subject key identifier: 18:17:59:88:79:43:1A:D5:27:CF:E3:61:44:A8:B7:0B:66:62:B2:5F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB5F3353DF3ECAB232AD03097D52BF005
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GBdZiHlDGtUnz-NhRKi3C2Zisl8.roa
Signing time: Thu 21 Sep 2023 04:15:29 +0000
ROA not before: Thu 21 Sep 2023 04:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b5:f3:35:3d:f3:ec:ab:23:2a:d0:30:97:d5:2b:f0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 04:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1817598879431ad527cfe36144a8b70b6662b25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:e3:dd:70:23:84:6f:21:a2:0f:f8:3b:ad:
fb:8d:cf:bc:e0:e5:1d:95:3b:db:f3:9b:64:96:32:
4e:cf:c8:41:62:d0:8c:a8:51:1e:7f:62:d6:fd:58:
2d:53:b0:86:ca:b0:12:1a:24:aa:95:55:4d:ac:c5:
a4:bc:08:0c:09:71:c8:96:58:85:0d:45:65:62:9a:
48:6d:6f:af:5c:9f:8a:ea:15:7f:a5:5f:df:57:63:
4e:1b:35:4e:71:10:14:82:74:2c:f8:4c:2a:6c:57:
1e:3a:1f:63:ce:d6:70:69:3e:af:ee:1c:9e:b9:69:
39:7b:ee:b3:a1:aa:ca:45:23:c5:32:17:6e:ad:7e:
e5:ab:3b:96:b1:cf:0f:d6:70:b1:18:6a:76:d7:62:
02:14:82:0b:d4:dd:23:14:84:e5:5f:cd:38:ea:86:
03:ae:4b:9b:70:f0:91:ec:40:97:82:a8:a1:ff:c6:
8d:ad:a4:b2:b1:db:ff:42:28:c8:f6:68:de:fb:f5:
07:d3:85:da:f0:4d:9c:c1:1e:f4:3d:88:28:62:00:
c9:ca:b1:5f:a3:4a:34:1d:c7:90:8d:ea:a0:b6:7a:
35:ff:56:b5:d4:7d:b9:cf:31:cd:f7:bc:f8:8a:93:
6c:9a:be:d4:c3:ef:ae:e6:4a:8f:8a:1a:18:d9:e4:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:17:59:88:79:43:1A:D5:27:CF:E3:61:44:A8:B7:0B:66:62:B2:5F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GBdZiHlDGtUnz-NhRKi3C2Zisl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:5d:c2:d7:1d:14:c1:43:97:15:54:13:e1:85:f0:15:34:ef:
03:7d:9f:c8:03:75:35:0a:d3:22:13:73:f7:58:64:0b:06:a6:
2a:96:f3:9a:d8:76:c8:c9:15:a7:05:5e:a4:e7:fc:ce:d3:0f:
e4:e1:74:56:52:e1:96:d3:59:37:b8:00:9f:4a:cf:7a:db:d5:
2c:06:62:b1:95:a0:53:65:c4:d3:1f:9f:d3:27:1f:d6:59:c2:
26:66:99:48:94:3a:90:d9:6b:c5:f8:69:0e:db:0d:ca:09:0b:
64:a1:a2:a8:3d:11:57:28:f4:fe:48:a6:bd:79:db:5f:ec:62:
22:2c:15:84:8a:29:f6:36:69:15:1d:9d:08:ff:0b:bf:e8:40:
35:61:10:b5:a5:d9:f4:19:e9:6c:1f:28:78:cc:54:6d:bc:27:
85:55:73:ba:12:c3:70:f9:63:ed:28:30:82:6f:d2:08:a1:75:
25:de:92:74:f9:35:1a:5c:37:93:e2:0b:4b:4c:be:e6:52:8f:
22:c1:87:ea:b7:8f:3c:6f:80:6d:24:20:b9:c0:ed:4e:48:9d:
38:49:5e:51:ec:17:70:75:5d:52:e0:c3:d2:48:92:5d:97:37:
0d:33:1f:08:d0:5d:13:e8:ed:a1:88:84:e8:9f:40:1a:b0:37:
9f:e0:84:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:11:08 2025 by rpki-client