Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GM7o0EeeUf_eGqcCnTgOZLsV8hg.roa
File: GM7o0EeeUf_eGqcCnTgOZLsV8hg.roa (raw, json)
Hash identifier: GZciiHPtfDo1kDMIXjASWObWegk853WLpyoHuQ1+J50=
Subject key identifier: 18:CE:E8:D0:47:9E:51:FF:DE:1A:A7:02:9D:38:0E:64:BB:15:F2:18
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2C2D1CAE1CB2A4EBF6E0394450AD995E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GM7o0EeeUf_eGqcCnTgOZLsV8hg.roa
Signing time: Sat 14 Oct 2023 03:13:55 +0000
ROA not before: Sat 14 Oct 2023 03:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2c:2d:1c:ae:1c:b2:a4:eb:f6:e0:39:44:50:ad:99:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 03:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18cee8d0479e51ffde1aa7029d380e64bb15f218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9d:72:28:01:74:8c:d0:f4:62:88:55:c2:d1:
71:5b:c6:e1:68:8b:9f:21:18:c1:ae:ed:ee:3d:cb:
1e:f0:15:21:0b:28:98:21:2b:cd:41:bf:48:4d:77:
eb:56:65:22:d2:97:2b:ae:75:03:3a:0f:a4:82:30:
aa:8e:6b:aa:47:2d:4a:f2:c4:d3:b6:7d:7c:e5:d7:
d1:fe:13:a7:dc:d0:ec:19:84:bb:f0:1e:ca:84:93:
3e:66:9f:2d:1e:2a:45:0b:dd:9a:43:86:de:c4:a3:
22:10:17:6e:4d:c7:28:76:1b:d9:24:76:ce:14:ed:
65:db:d8:95:ae:fd:bc:99:2e:b9:f2:d5:ba:a4:df:
c9:b0:33:fc:05:65:91:b2:e7:f1:98:8a:0c:70:0d:
c3:de:d3:0c:1c:f3:aa:fa:f0:da:d8:9a:7c:58:ba:
6c:60:8d:9e:33:ef:6a:a9:e5:08:04:32:2f:f7:c9:
24:94:5e:0b:06:64:ef:e7:57:50:6d:a6:30:29:b5:
04:df:c1:c3:26:f6:6d:00:2e:66:b8:0f:98:97:80:
ea:ab:10:c8:c9:79:76:5c:54:84:12:b8:41:71:4d:
dd:6b:74:49:04:14:ff:30:2d:90:24:7d:47:0f:e3:
bb:91:97:ea:ac:b3:65:78:1e:3c:2b:db:76:67:2e:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CE:E8:D0:47:9E:51:FF:DE:1A:A7:02:9D:38:0E:64:BB:15:F2:18
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GM7o0EeeUf_eGqcCnTgOZLsV8hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:7b:d7:27:fc:bb:25:c9:0a:f7:14:c6:7a:36:ec:47:b1:2b:
cf:72:9f:ca:65:45:1c:43:cb:18:be:8f:eb:07:db:50:c9:fb:
54:f6:1d:88:f3:73:2f:e7:d0:a6:96:8a:03:b3:c2:24:e6:b1:
e5:63:ff:40:e2:29:d4:d1:0d:ba:5a:10:98:5b:6d:52:26:f9:
1d:8f:95:7e:bf:08:2e:24:af:0c:1f:9b:99:06:95:14:88:91:
12:1f:62:79:55:78:c9:80:fb:c6:08:6b:aa:f0:b0:b9:1c:cb:
50:1b:f5:a3:ad:2d:3a:e9:4f:6c:2f:71:05:c7:c3:95:8e:e3:
72:4e:1d:1c:1f:ee:56:98:15:64:3c:bd:85:bd:16:44:55:17:
e3:0a:34:18:d2:e7:f2:28:b7:ae:f6:fb:19:82:8e:e6:4c:12:
13:8a:b6:bd:12:ee:15:f5:99:92:74:16:2d:3c:95:9a:13:20:
31:97:97:2d:a1:6f:27:90:94:77:36:67:81:84:00:b3:91:6d:
28:85:49:ce:61:a8:c0:58:78:8f:61:be:ea:fa:78:d0:5e:95:
96:2d:e0:e7:06:6b:4e:07:ca:3a:59:80:f0:d0:07:6b:0c:33:
65:56:1b:fa:ff:f5:dc:2e:0f:9a:65:15:ae:c1:b5:55:7a:d7:
03:8a:d4:fc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYssLRyuHLKk6/bgOURQrZleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE0MDMxMzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGNlZThkMDQ3OWU1MWZmZGUxYWE3MDI5ZDM4MGU2NGJiMTVmMjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp1yKAF0jND0YohVwtFxW8bhaIuf
IRjBru3uPcse8BUhCyiYISvNQb9ITXfrVmUi0pcrrnUDOg+kgjCqjmuqRy1K8sTT
tn185dfR/hOn3NDsGYS78B7KhJM+Zp8tHipFC92aQ4bexKMiEBduTccodhvZJHbO
FO1l29iVrv28mS658tW6pN/JsDP8BWWRsufxmIoMcA3D3tMMHPOq+vDa2Jp8WLps
YI2eM+9qqeUIBDIv98kklF4LBmTv51dQbaYwKbUE38HDJvZtAC5muA+Yl4DqqxDI
yXl2XFSEErhBcU3da3RJBBT/MC2QJH1HD+O7kZfqrLNleB48K9t2Zy6T7QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBjO6NBHnlH/3hqnAp04DmS7FfIYMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvR003bzBFZWVVZl9lR3FjQ25UZ09aTHNWOGhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKR71yf8uyXJCvcUxno2
7EexK89yn8plRRxDyxi+j+sH21DJ+1T2HYjzcy/n0KaWigOzwiTmseVj/0DiKdTR
DbpaEJhbbVIm+R2PlX6/CC4krwwfm5kGlRSIkRIfYnlVeMmA+8YIa6rwsLkcy1Ab
9aOtLTrpT2wvcQXHw5WO43JOHRwf7laYFWQ8vYW9FkRVF+MKNBjS5/Iot672+xmC
juZMEhOKtr0S7hX1mZJ0Fi08lZoTIDGXly2hbyeQlHc2Z4GEALORbSiFSc5hqMBY
eI9hvur6eNBelZYt4OcGa04HyjpZgPDQB2sMM2VWG/r/9dwuD5plFa7BtVV61wOK
1Pw=
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:10:08 2025 by rpki-client