Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GYssIqR8t50DE72UtQAZkTjdS9k.roa
File: GYssIqR8t50DE72UtQAZkTjdS9k.roa (raw, json)
Hash identifier: c0c/JkjX01t0RfXTdT2W6OIFH8chPPRnMq1fcyZkGnU=
Subject key identifier: 19:8B:2C:22:A4:7C:B7:9D:03:13:BD:94:B5:00:19:91:38:DD:4B:D9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE55DB6C7A45766A010A21E6946458D40
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GYssIqR8t50DE72UtQAZkTjdS9k.roa
Signing time: Sun 19 Nov 2023 02:16:45 +0000
ROA not before: Sun 19 Nov 2023 02:16:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e5:5d:b6:c7:a4:57:66:a0:10:a2:1e:69:46:45:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 02:16:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=198b2c22a47cb79d0313bd94b500199138dd4bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:10:3c:e5:78:a8:27:50:5f:4e:33:8b:c6:7b:
6d:32:d7:78:89:db:00:3e:e3:0b:c8:76:6f:85:97:
ae:9c:b1:d2:44:c4:93:b8:bd:fe:53:bf:b7:49:cc:
08:57:48:bf:c9:6f:32:59:28:19:7f:bc:fc:53:1e:
ea:34:f1:b6:de:fd:f8:d8:03:ef:f9:7c:dc:b7:e0:
19:11:e7:7c:5c:ee:85:45:a0:29:62:2f:8e:59:33:
e3:fd:e9:32:5c:fc:57:5e:17:54:8b:5d:2f:ec:d3:
7f:e3:5d:77:a3:46:1f:6b:9a:02:7a:6e:1a:b7:f2:
de:46:92:7a:29:44:2c:d3:7a:cd:db:11:75:5f:ae:
6b:d3:39:6d:64:2e:2c:d4:32:49:17:84:c9:cf:d8:
d7:0d:6d:2b:97:3c:c5:26:d7:fb:6f:9b:6b:d1:74:
30:43:a7:59:f3:f2:e6:91:58:4f:5f:8e:7e:ec:44:
6c:a2:83:40:76:21:79:62:c4:63:17:be:fd:47:e0:
c5:bc:62:be:52:09:b9:97:bc:8f:d0:18:b0:03:2e:
1b:9f:89:b7:99:93:f0:a1:de:ab:c3:c3:57:31:1e:
66:a1:e3:0e:6b:79:ec:08:2d:08:dc:e7:7f:cb:96:
9a:45:0e:6f:70:74:6c:80:78:a5:f0:53:ec:c9:41:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8B:2C:22:A4:7C:B7:9D:03:13:BD:94:B5:00:19:91:38:DD:4B:D9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GYssIqR8t50DE72UtQAZkTjdS9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:a4:9f:26:0b:87:dc:08:87:22:4a:8e:20:37:2b:f3:21:5f:
66:a5:51:51:8b:c3:48:69:04:41:71:3f:a3:e9:2e:55:8c:22:
20:0a:2f:59:84:18:7f:c9:a6:42:86:76:e9:4f:69:b4:ce:f8:
43:ef:b0:08:49:b2:02:cf:bb:df:29:64:e4:8d:b1:e3:1e:e7:
04:0a:e7:75:c6:0d:1b:ba:70:ff:f9:a0:ef:5f:fe:7a:a9:65:
5c:6e:1a:a0:1b:87:11:9c:08:ce:72:91:7b:bf:6d:9e:ca:48:
09:0c:50:ab:17:b7:1e:55:41:85:00:56:d4:11:a8:7a:04:f2:
be:53:e7:85:54:58:7f:60:8c:45:78:53:1d:4c:43:66:8c:ee:
d9:0e:3e:57:1d:40:25:52:96:28:da:b5:1a:06:2d:f8:b3:a9:
26:10:a6:b4:e2:51:ab:d4:c5:99:57:78:47:ae:50:a6:7f:9f:
a6:db:4c:a9:33:54:4e:59:e7:09:28:47:7d:6a:27:14:74:f7:
fd:4d:18:b1:1a:e8:b2:6e:7a:24:98:bd:e9:85:ae:2f:10:74:
96:dc:b9:44:31:15:56:49:a9:cb:f9:77:8f:0c:ad:c0:9c:ad:
2d:ae:66:c5:5d:df:b7:23:24:22:23:cf:6f:32:b0:79:96:01:
a6:ae:f2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:25:55 2025 by rpki-client