Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GYe-gguw57did4DdEScdxNtg7dY.roa
File: GYe-gguw57did4DdEScdxNtg7dY.roa (raw, json)
Hash identifier: aKbDjmdWPPiIsokLkWz01WqnitJOgL0hwe5yzDkqUW4=
Subject key identifier: 19:87:BE:82:0B:B0:E7:B7:62:77:80:DD:11:27:1D:C4:DB:60:ED:D6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD3891130956BB6076AE474CAFDB48C98
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GYe-gguw57did4DdEScdxNtg7dY.roa
Signing time: Wed 15 Nov 2023 15:10:57 +0000
ROA not before: Wed 15 Nov 2023 15:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:89:11:30:95:6b:b6:07:6a:e4:74:ca:fd:b4:8c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 15:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1987be820bb0e7b7627780dd11271dc4db60edd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:7e:02:06:95:de:dd:1d:0e:2c:cd:f9:d4:
65:61:59:d1:e6:21:00:cf:b6:12:2c:1e:0c:94:d3:
c2:f7:d2:ce:ca:f6:4e:7c:5a:85:a9:77:cd:ab:3e:
02:b9:93:89:f1:ac:cf:81:4d:83:d1:21:ba:87:82:
59:b1:3c:8b:e4:12:8a:30:a3:1e:98:56:2c:be:89:
46:7a:8a:cc:51:dd:94:78:e5:67:eb:d0:3e:db:32:
d0:39:66:92:88:b6:83:7d:b8:73:a6:ba:4b:84:cc:
5d:8b:bf:c0:bf:50:5f:78:19:46:8e:89:20:45:df:
7b:bc:a8:8e:56:fc:a9:22:42:f6:63:10:99:f6:aa:
43:64:04:a5:53:54:28:cc:26:63:a1:7a:c8:61:04:
d0:bf:fd:f1:f3:ca:0e:86:fb:0c:ec:b9:cb:99:b9:
0d:11:e9:c9:d1:ff:11:77:85:bc:6b:95:b9:a4:0b:
d5:bb:01:e0:3d:67:da:01:ba:35:d6:d6:09:bf:96:
ee:76:12:cd:e5:03:d4:fc:00:5a:0b:82:4f:2e:85:
4a:6c:a5:f4:4b:93:98:32:65:d0:ec:00:99:35:c8:
68:a0:b0:f8:18:22:03:55:4c:b3:55:af:54:a7:24:
e3:52:c0:8b:6d:79:13:82:de:66:a2:d6:a3:37:2a:
a1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:87:BE:82:0B:B0:E7:B7:62:77:80:DD:11:27:1D:C4:DB:60:ED:D6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GYe-gguw57did4DdEScdxNtg7dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:2b:ce:3b:bc:63:76:3c:7f:27:c2:f4:da:2f:73:dc:21:32:
1a:b1:56:94:8f:49:93:f2:96:48:07:2a:74:5b:9b:1a:04:6f:
7e:96:e3:b9:81:0d:83:7c:fd:73:d7:b3:13:db:15:b7:a1:eb:
a9:e6:8e:2a:06:36:02:97:26:d5:08:0e:d2:dd:83:db:95:a5:
30:5c:eb:7b:c0:3d:bf:3c:f4:bc:80:82:53:01:33:b8:e0:6a:
b8:cc:2c:9b:22:fc:c5:5e:75:d1:68:66:f1:d2:6d:c8:6e:90:
44:d6:df:f3:ae:d4:7e:82:7a:46:ad:e4:fe:e6:16:01:74:de:
bf:2f:54:0c:75:72:a7:a9:a8:5c:1f:96:c9:60:d7:f1:be:f5:
a8:17:97:95:1b:7b:6b:61:a8:0c:75:55:6b:d8:a8:cc:fc:80:
3b:f1:3c:9d:d2:de:a0:c8:68:39:15:00:30:af:1b:1b:54:aa:
2d:6f:a6:91:40:a5:2f:c7:34:dd:9f:04:eb:00:6b:4f:76:be:
ca:6d:13:91:88:ab:9c:15:6a:df:6d:ff:72:bc:87:41:07:7c:
ed:c1:ea:bd:2f:58:5d:68:96:a1:e0:2f:ab:f4:17:c6:fd:21:
0c:37:10:61:02:93:30:04:fa:14:73:d9:05:98:d7:51:8d:c2:
20:98:c3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:04:22 2025 by rpki-client