Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GUmosUbomi2Q0L3OPKu8VtqeXHM.roa
File: GUmosUbomi2Q0L3OPKu8VtqeXHM.roa (raw, json)
Hash identifier: A1AOBcQyJGsaun5HS5N9MAKaca5VMAWRdDLkDWKBaZ0=
Subject key identifier: 19:49:A8:B1:46:E8:9A:2D:90:D0:BD:CE:3C:AB:BC:56:DA:9E:5C:73
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7368EFB50547DA6600C70420026BD995
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GUmosUbomi2Q0L3OPKu8VtqeXHM.roa
Signing time: Sat 16 Dec 2023 16:15:06 +0000
ROA not before: Sat 16 Dec 2023 16:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:73:68:ef:b5:05:47:da:66:00:c7:04:20:02:6b:d9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 16:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1949a8b146e89a2d90d0bdce3cabbc56da9e5c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5f:29:71:8a:8f:88:b4:70:68:63:4b:b9:82:
49:a3:ec:e7:17:66:93:e1:75:bf:fb:dd:a3:00:dd:
2c:87:f9:0e:aa:48:b1:af:0c:ce:24:96:3b:31:c5:
f4:6a:69:ae:cb:86:f0:99:ef:a5:bf:27:61:a9:69:
7e:53:33:59:0d:da:aa:f9:b2:bb:b2:d6:4a:a7:2f:
0b:2f:8b:74:be:40:a7:ff:52:04:c8:ec:7d:6f:3d:
e2:00:70:bc:fc:1b:fc:cf:b1:5b:cf:f1:60:9c:3a:
67:47:7a:8d:7d:b7:87:2a:9c:c5:9a:20:43:8e:c5:
82:d7:bf:5a:b4:46:25:ad:cc:eb:a6:a2:03:ba:19:
d6:6d:2d:08:75:8f:c6:46:6b:ab:48:f8:fc:c1:e4:
e7:1c:fb:93:28:86:4a:04:3b:e4:8f:e6:6d:ee:3e:
e3:a6:ba:0c:9f:cf:7e:c1:d9:e9:5a:9e:3c:94:39:
d1:a8:e3:aa:b2:48:08:ca:e8:44:01:66:d6:ef:bb:
28:08:f5:c4:72:24:64:98:6a:53:42:b3:db:a5:5e:
fa:9e:6f:f3:a0:72:91:1b:76:76:dc:c4:2c:43:42:
3c:43:b6:93:82:a1:c6:11:f1:08:31:48:45:e8:d5:
fb:35:74:7b:43:46:17:c3:17:58:c6:a5:a5:49:08:
08:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:49:A8:B1:46:E8:9A:2D:90:D0:BD:CE:3C:AB:BC:56:DA:9E:5C:73
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GUmosUbomi2Q0L3OPKu8VtqeXHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:d1:15:74:46:b5:f7:48:99:06:61:64:8f:68:a2:91:02:82:
32:45:cd:dc:84:67:79:e4:8e:00:ca:1c:d0:c4:88:86:af:66:
51:80:b8:f1:9f:4e:49:a8:94:9a:1e:c0:c7:30:ec:0f:49:04:
a0:11:36:60:97:3c:f4:03:02:05:d7:07:0f:5a:65:55:f7:2d:
47:b3:a1:04:21:18:f0:12:72:dc:d4:7d:04:2f:d7:c0:1e:e6:
b0:ed:43:e8:ff:41:16:26:09:70:96:2f:d3:4e:05:db:79:a1:
f8:f2:db:60:76:e8:12:aa:e3:bc:3e:ba:12:35:11:6a:cb:59:
26:62:ba:50:1e:7e:02:a1:b6:de:02:61:3b:a1:ec:0b:0a:63:
4c:61:5c:12:03:0a:c8:b8:5e:61:95:a4:a1:4f:dd:90:3b:03:
39:f1:f1:1a:19:ce:9f:e3:40:d4:bd:ee:1c:a3:74:e8:77:e0:
e4:77:25:b9:c2:9e:57:ed:d2:8c:f5:76:02:cf:33:ed:b4:81:
58:38:d9:31:b6:a6:de:5b:f3:e6:48:bc:ed:0d:26:92:0f:ac:
9f:a3:5e:b6:cc:d9:e4:a7:d0:b4:eb:62:9c:a0:a6:c9:31:f1:
96:e4:e3:ac:5b:97:d5:4a:3d:6a:5f:bf:cc:8b:fa:fd:4a:48:
db:c6:f5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:41:25 2025 by rpki-client