Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GOufpLzk_Xbd5_nUWhyRyQJz-38.roa
File: GOufpLzk_Xbd5_nUWhyRyQJz-38.roa (raw, json)
Hash identifier: PK9e3L4FWInbfB54qiPNNBXCnonaoAsdScVmFdn7qQA=
Subject key identifier: 18:EB:9F:A4:BC:E4:FD:76:DD:E7:F9:D4:5A:1C:91:C9:02:73:FB:7F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4DA39AAD9F4A78DA98626A16A6558D71
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GOufpLzk_Xbd5_nUWhyRyQJz-38.roa
Signing time: Fri 20 Oct 2023 15:10:49 +0000
ROA not before: Fri 20 Oct 2023 15:10:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:4d9d:99b9/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4d:a3:9a:ad:9f:4a:78:da:98:62:6a:16:a6:55:8d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 20 15:10:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18eb9fa4bce4fd76dde7f9d45a1c91c90273fb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:9c:9b:b9:3e:36:d3:ee:5a:8e:c3:0d:87:
c4:6d:f1:4e:87:5d:82:da:06:9c:36:55:af:91:2f:
b4:44:14:e8:6d:a8:b3:35:6c:4f:6d:55:f7:9a:99:
33:dd:b2:52:eb:bd:74:ff:3a:a4:78:9e:b6:53:00:
1d:1d:62:9d:bf:17:7f:f9:cf:eb:58:fb:84:7d:cc:
ab:37:6d:e7:3b:67:7f:e0:00:b6:ec:25:c7:0d:43:
2f:53:ff:dc:5a:d3:b5:c6:71:5e:b5:75:61:34:be:
dd:de:20:7e:22:6d:58:6b:32:41:85:0a:52:f6:08:
c7:74:77:09:ac:8c:d0:9f:72:28:9e:be:7c:18:c4:
19:0b:a0:c4:40:b9:4d:ec:c4:a2:e1:1b:7d:73:05:
5a:b3:60:85:ac:12:4c:d4:d7:d3:f7:e0:ea:d6:72:
61:2c:f9:86:dc:3c:e7:62:f3:80:7e:ad:60:33:96:
50:d2:4b:3f:09:79:b2:2a:a6:89:13:0b:62:3d:cc:
ae:57:8f:e2:ee:48:ec:7d:9a:5a:eb:7c:66:64:84:
67:b8:b7:39:ba:f6:6e:92:93:fd:75:24:13:23:eb:
06:c6:ed:32:17:5e:b5:f7:e9:74:3a:79:c6:2f:8c:
f5:16:45:0e:ca:29:4c:4e:da:59:46:67:3d:ac:4d:
8c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EB:9F:A4:BC:E4:FD:76:DD:E7:F9:D4:5A:1C:91:C9:02:73:FB:7F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GOufpLzk_Xbd5_nUWhyRyQJz-38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:0f:17:be:92:08:9c:17:9f:35:16:7c:2c:d0:ed:9d:ba:32:
a1:7a:b4:ae:fe:79:65:c2:57:72:3a:8d:d9:32:e7:f1:e3:13:
8d:f8:95:04:82:e0:82:18:46:07:26:2b:6f:17:5a:89:d1:58:
ea:9d:7f:d1:3f:e2:92:5c:36:53:1a:4e:af:a2:b0:10:f7:06:
30:39:fc:48:e2:94:23:67:c9:fb:d7:1d:2b:22:be:a9:67:3c:
63:31:e8:71:74:e0:3b:e0:6e:fd:af:49:2c:19:b8:af:25:27:
85:dd:bd:6d:42:c7:00:8e:f5:c8:00:dc:90:2b:9c:23:87:63:
c5:b3:6d:6d:fd:9d:fd:34:2d:6b:75:b2:70:d4:ef:8e:0f:45:
68:40:b2:2a:56:08:8e:03:ac:9d:84:71:1d:b4:de:49:dc:ca:
2f:51:54:56:9b:62:94:c0:25:8b:7e:8d:3d:ae:4b:28:48:61:
52:c9:7a:40:97:ec:ad:c2:a3:a5:96:b1:68:4e:66:28:2c:b3:
f6:c3:16:37:78:7e:a7:01:0e:02:62:07:22:0b:31:79:b5:a5:
c7:5d:d9:e4:1c:c9:f1:93:8e:f2:9b:d3:16:3d:8c:6a:5f:f3:
92:14:4c:76:4f:6a:4c:7d:e9:04:15:52:bb:b1:d8:1b:45:d1:
2e:51:67:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:18:22 2025 by rpki-client