Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GGmPRKRpCwLpITZLkz5IJaX-HYE.roa
File: GGmPRKRpCwLpITZLkz5IJaX-HYE.roa (raw, json)
Hash identifier: FZpUXaVPAaudy4YBLJ+o0ZdAdx9tMklNIklPVzv4wvU=
Subject key identifier: 18:69:8F:44:A4:69:0B:02:E9:21:36:4B:93:3E:48:25:A5:FE:1D:81
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD2DEC861C6400ADB8BC2B6BB5048A9CB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GGmPRKRpCwLpITZLkz5IJaX-HYE.roa
Signing time: Wed 15 Nov 2023 12:04:57 +0000
ROA not before: Wed 15 Nov 2023 12:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18b:d2de:9270/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:de:c8:61:c6:40:0a:db:8b:c2:b6:bb:50:48:a9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 12:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18698f44a4690b02e921364b933e4825a5fe1d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0d:f4:76:0c:fa:66:69:d2:95:f1:9e:6f:93:
93:55:35:50:04:ba:12:52:df:27:61:62:c9:4b:8e:
16:80:e0:99:04:9d:c1:b2:ef:ae:83:1b:10:a5:26:
f3:fb:5f:2e:04:36:95:46:ae:f4:c9:bf:b9:62:5d:
6c:3d:6d:77:23:2f:40:47:9e:fc:c9:24:b8:a5:e2:
20:54:1e:4f:b5:d8:b0:c0:1b:86:62:9f:67:56:e7:
e1:49:83:6e:a0:43:71:4d:87:14:0f:13:d9:11:18:
09:2d:f4:7a:27:af:51:6e:7b:f1:ab:86:4a:a3:44:
98:c5:7c:61:17:4a:5c:db:b2:14:e5:f0:0a:f4:66:
62:7a:ee:7d:03:d4:8a:31:7b:3d:46:d1:3b:ca:db:
f7:10:19:6d:e7:10:4e:f3:c8:dc:12:3f:f3:e6:80:
23:63:04:f3:e8:f5:33:ac:80:7c:ad:e8:77:97:3e:
c8:34:9f:d6:99:11:d9:45:5d:51:34:1c:d3:0a:ef:
38:54:05:71:d0:03:8c:54:6c:53:f4:0e:df:f5:0e:
b9:25:df:a9:5e:46:81:d4:a7:f4:cb:68:a0:30:d8:
11:b9:32:e2:3a:ec:bb:d4:fa:f6:70:44:1f:b7:de:
6a:8a:bf:8c:e5:c9:d2:23:76:bb:17:67:d5:83:07:
36:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:69:8F:44:A4:69:0B:02:E9:21:36:4B:93:3E:48:25:A5:FE:1D:81
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GGmPRKRpCwLpITZLkz5IJaX-HYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:d1:ba:3e:92:4d:08:51:4c:bf:50:e6:34:a2:b1:75:c9:9e:
4e:fc:87:df:99:43:38:4e:4f:41:ed:e3:f5:13:0b:a1:31:f4:
ad:e9:c2:e5:33:75:bc:9e:b3:bc:2e:b0:54:7f:04:2c:cc:a4:
ad:0f:2d:73:9c:da:1e:54:21:a0:7e:ac:f2:47:d3:a2:3b:f6:
2b:44:9c:6e:2c:42:f0:cd:3c:e1:d0:93:92:b4:d5:b8:17:e2:
e0:7d:53:ee:36:6a:58:87:78:df:a3:15:3c:4e:31:2a:61:67:
e7:12:3f:bd:21:af:e0:22:6e:f8:aa:88:68:24:3b:f3:84:92:
80:d9:84:63:cc:09:b1:d5:11:0c:64:9a:39:eb:28:9a:26:2c:
c2:24:45:ae:b2:35:9b:47:cc:dc:1f:72:bc:d3:a1:f9:e8:57:
e1:f6:fd:ca:52:c0:99:80:77:9c:3a:6f:76:41:11:2e:fe:fc:
92:d4:bf:f1:d9:e6:63:a1:ed:2c:40:54:36:fb:85:42:df:28:
8a:1f:c0:31:f6:95:23:21:f8:af:aa:13:01:0e:1c:46:22:12:
17:cc:4a:27:a1:8f:07:3a:64:2d:bf:5e:8a:49:34:59:74:84:
e0:57:0c:35:1a:20:9e:53:6e:cb:4f:5e:4d:2b:5c:8d:74:9f:
7e:98:b7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:46:42 2025 by rpki-client