Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GJ9iRUyaVw_3DVKFLrmx2ALyMy0.roa
File: GJ9iRUyaVw_3DVKFLrmx2ALyMy0.roa (raw, json)
Hash identifier: Wwqz59uCEp2rTLrqBjWsQ6LYVE7VAocMntxSevEfBrg=
Subject key identifier: 18:9F:62:45:4C:9A:57:0F:F7:0D:52:85:2E:B9:B1:D8:02:F2:33:2D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B255037C4EA35523BEFFE1EF17CADC6D7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GJ9iRUyaVw_3DVKFLrmx2ALyMy0.roa
Signing time: Thu 12 Oct 2023 19:14:55 +0000
ROA not before: Thu 12 Oct 2023 19:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:25:50:37:c4:ea:35:52:3b:ef:fe:1e:f1:7c:ad:c6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 12 19:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=189f62454c9a570ff70d52852eb9b1d802f2332d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:87:dd:e4:65:70:2f:7f:18:83:78:7d:69:8c:
d3:49:0a:34:e9:f1:32:c0:c0:ed:d7:ba:ce:0b:d2:
ea:e3:3e:ce:52:e7:cd:c1:23:a8:a9:d1:92:9d:b8:
64:e7:26:81:1f:29:07:e0:c4:ae:07:fb:23:d9:72:
2b:c5:22:c1:84:d2:f5:d6:cf:61:f3:7d:0f:c2:f1:
55:b9:cb:39:77:0b:51:6a:af:12:f7:d2:4a:92:12:
1a:28:9d:8c:d5:f6:b2:e9:7b:b6:27:c8:c3:96:dc:
7c:6a:6c:2e:a0:90:89:70:3d:39:41:e3:4a:eb:39:
89:45:98:7a:1d:60:c1:6b:4a:72:3c:92:70:e4:dd:
c7:ab:c2:36:d2:09:9e:61:9c:80:df:d6:7b:cc:5c:
a4:d4:ef:d6:d7:7d:bf:61:99:cd:ae:2d:03:71:9f:
d1:c9:8a:23:3d:ca:a6:a5:49:6d:23:4b:8b:08:4f:
68:cc:62:e4:30:e5:dc:c3:fb:5c:e9:d9:3c:03:ea:
51:fc:96:9d:76:00:40:0e:15:74:a0:30:b9:bb:b9:
d3:9d:be:30:a9:ef:99:1a:cd:8a:5d:11:5d:22:ea:
c7:93:88:2a:fe:08:c0:cc:73:92:35:e3:64:53:0b:
a0:2c:23:a3:35:6e:b1:d8:6a:69:8c:16:0e:a9:6b:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9F:62:45:4C:9A:57:0F:F7:0D:52:85:2E:B9:B1:D8:02:F2:33:2D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GJ9iRUyaVw_3DVKFLrmx2ALyMy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:2c:ca:86:2f:f0:83:1a:d6:2d:4f:a3:b4:be:08:5a:04:58:
d0:d2:72:2b:51:9b:ec:c1:77:43:b5:01:f6:9d:05:8e:59:a7:
b5:d5:37:80:2c:e5:33:43:a2:ac:ec:3b:e8:79:b9:92:59:cf:
64:46:b9:a4:16:13:4a:8b:39:23:29:8d:8c:d9:28:fd:97:70:
aa:58:72:30:38:dd:5f:45:fe:02:e6:00:18:6f:e5:12:f5:75:
d8:75:70:99:70:a2:2b:98:95:87:03:f9:d4:d3:a2:ed:29:aa:
40:4c:2d:50:92:f1:1f:a2:9d:a4:24:7a:64:98:05:a9:57:88:
33:2b:29:a6:64:ab:a3:41:2d:17:a8:8d:85:f7:d1:52:52:93:
18:87:f1:b6:82:83:21:a8:08:ab:9a:d8:78:59:da:ef:64:3a:
d3:d5:03:38:10:99:c2:01:11:29:16:fa:5b:e1:95:c8:ea:b7:
08:44:1a:58:98:92:cd:6e:b0:b4:7f:64:ec:e9:aa:13:7c:8a:
d0:82:9e:8b:41:54:2c:35:8a:e9:e2:94:50:43:55:ee:6c:35:
bc:96:e3:e8:00:29:33:04:a0:04:99:66:3b:04:ef:73:a8:31:
e4:08:f3:a4:04:16:f2:6e:63:81:59:6e:37:b4:ea:fc:19:b3:
64:21:f4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:26:29 2025 by rpki-client