Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GJBqFKQHHpiM3YYhplOCEW9zbQE.roa
File: GJBqFKQHHpiM3YYhplOCEW9zbQE.roa (raw, json)
Hash identifier: eqgPVD4qyq64zP7WycNyPtY+7gjMvu+QGmPz6My8KQg=
Subject key identifier: 18:90:6A:14:A4:07:1E:98:8C:DD:86:21:A6:53:82:11:6F:73:6D:01
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB8ECA18E84BC63A1412D7A0A975A4B0E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GJBqFKQHHpiM3YYhplOCEW9zbQE.roa
Signing time: Fri 10 Nov 2023 11:09:57 +0000
ROA not before: Fri 10 Nov 2023 11:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:ec:a1:8e:84:bc:63:a1:41:2d:7a:0a:97:5a:4b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 11:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18906a14a4071e988cdd8621a65382116f736d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:6f:3d:23:80:42:3b:6f:16:7a:b9:d1:55:
d2:b0:57:44:f5:2c:85:c9:57:32:6f:c0:d3:60:3a:
4c:e7:52:39:f7:18:29:92:a8:3f:a3:36:95:1e:63:
9c:b4:36:b1:5a:cb:f1:b1:5b:78:bd:2f:10:f6:d8:
3c:55:d8:53:b7:50:6a:d5:b2:3a:41:95:92:57:99:
50:c4:03:de:ae:74:67:cd:e4:60:e4:62:1d:2b:08:
f8:29:fc:bf:5b:21:6b:55:32:84:36:b8:da:25:5a:
0f:eb:c8:c6:05:fb:8e:07:bb:a4:28:02:62:3b:03:
39:2e:ca:63:0f:9f:d4:25:0c:e6:8b:5c:2f:98:8d:
80:58:19:f8:84:7a:b2:19:c9:0b:cc:b4:84:7a:f8:
ed:01:2d:33:1f:f3:31:1b:3c:9b:28:af:66:e9:5c:
21:f7:f4:43:b9:6f:14:97:d6:09:09:91:db:31:9b:
2d:6b:5f:e0:d0:45:2c:af:a0:de:ee:1e:96:98:2a:
b5:aa:24:65:1e:e6:08:50:1c:62:1f:08:9c:aa:46:
05:1a:87:4c:04:f7:80:e3:29:4b:8b:8f:aa:0c:75:
fa:68:16:f5:f8:79:c5:b4:30:11:97:e2:94:dc:ff:
7b:bf:df:4c:ed:55:7f:d0:fd:53:9d:35:87:3f:68:
93:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:90:6A:14:A4:07:1E:98:8C:DD:86:21:A6:53:82:11:6F:73:6D:01
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GJBqFKQHHpiM3YYhplOCEW9zbQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:45:26:2d:34:10:8a:9c:97:6a:74:f9:56:c3:7e:d1:63:09:
7e:b6:59:e2:79:62:18:56:2a:77:0e:af:66:1d:0f:9b:64:42:
1f:71:58:47:16:77:5d:a7:03:f9:25:37:59:9a:19:9a:6c:f2:
df:94:b1:3b:3b:44:e9:83:92:fb:eb:d2:0d:55:78:04:f8:71:
25:99:8a:22:a2:de:7d:38:7c:1a:87:c0:b5:78:54:73:b2:10:
ac:e5:36:73:47:39:ee:e1:e7:c2:46:79:13:a4:96:4b:d7:bd:
88:a4:32:3f:c5:76:10:46:93:ca:96:a2:b0:05:bb:8d:32:cb:
63:e8:ac:70:35:2b:01:6c:0e:bb:bc:e6:a1:e3:ca:0d:87:38:
7d:5e:5b:62:8f:83:d7:bf:ff:ed:15:a5:fe:4a:20:e7:15:5c:
8c:dc:de:34:05:e2:23:f6:0e:dc:3c:20:bc:78:b7:32:c6:71:
df:57:60:db:0a:54:3b:fa:e6:bb:7b:20:37:97:91:63:1e:75:
ab:b3:92:ac:76:1c:2e:ae:2a:ef:9b:68:2e:a6:d6:f4:fc:91:
4f:e5:c6:3e:b6:87:5e:fa:bb:c6:eb:30:98:5f:5b:9e:33:ca:
88:f0:0f:bc:e5:c5:d0:13:59:11:72:67:6b:ee:72:17:5f:89:
62:e0:e6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:34:44 2025 by rpki-client