Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GcvJ_n5qR61WVn_aALTjwq2HXCA.roa
File: GcvJ_n5qR61WVn_aALTjwq2HXCA.roa (raw, json)
Hash identifier: MpF2DQdnr8lnVfuGOaGO5aSoh8Dddgezpzk/ZfJWSkc=
Subject key identifier: 19:CB:C9:FE:7E:6A:47:AD:56:56:7F:DA:00:B4:E3:C2:AD:87:5C:20
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD764014E85491BAF60389A2856A8740E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GcvJ_n5qR61WVn_aALTjwq2HXCA.roa
Signing time: Thu 16 Nov 2023 09:08:57 +0000
ROA not before: Thu 16 Nov 2023 09:08:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:64:01:4e:85:49:1b:af:60:38:9a:28:56:a8:74:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 16 09:08:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19cbc9fe7e6a47ad56567fda00b4e3c2ad875c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:fa:76:4c:d6:35:ff:39:ae:b9:fc:a6:94:
df:fe:86:0f:94:35:bd:ea:38:29:cd:7d:b2:eb:a7:
59:f2:ac:4c:e2:6c:c9:37:15:79:bf:f0:2c:dc:17:
6a:77:aa:ea:2a:30:06:7c:25:39:a2:11:75:f0:5e:
05:ce:42:f2:a7:dc:69:75:59:64:01:7e:00:84:11:
ad:0b:13:a4:07:e2:7e:18:51:e2:70:74:0b:e6:63:
9e:87:10:30:b8:f5:b5:db:36:18:86:3f:88:cd:32:
38:b7:2e:d5:01:f8:b7:f4:92:5a:e7:b2:a9:2a:61:
89:eb:a8:aa:03:c8:d2:da:17:5e:4f:d6:ea:ab:28:
e9:5f:3a:61:77:bc:20:d9:05:4d:ec:14:a1:e2:e8:
57:36:cd:8b:25:14:91:48:16:7a:5c:ac:33:41:1b:
e7:89:28:29:9a:c6:da:c4:78:2f:de:a7:3e:fd:e0:
01:fc:f7:49:e3:ae:ea:10:0b:09:9d:62:8c:08:31:
8a:7e:ca:4f:80:15:36:ef:53:7a:d3:05:04:a3:43:
8a:77:23:0c:21:45:99:a9:68:b6:67:18:99:f6:f5:
90:b3:60:c8:0f:b0:8d:cc:60:ec:72:9d:03:a7:05:
4e:a0:60:94:79:84:35:3f:0e:4b:98:51:be:48:bc:
97:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CB:C9:FE:7E:6A:47:AD:56:56:7F:DA:00:B4:E3:C2:AD:87:5C:20
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GcvJ_n5qR61WVn_aALTjwq2HXCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:6f:86:81:aa:7a:f3:18:08:e7:65:aa:17:06:b6:13:1c:07:
8c:4d:db:e1:b1:3b:75:03:60:60:8c:ca:0b:f4:69:8d:5e:4f:
b6:f7:9e:61:f8:b3:8b:34:57:21:40:5a:cf:9a:ac:1b:06:26:
86:fa:e6:8b:1e:2d:63:d6:00:27:91:1c:f1:0c:81:33:8a:8c:
1f:61:78:c2:bc:f0:db:b9:06:0e:55:73:a6:c3:1a:0b:9b:b8:
da:8d:e9:fd:f3:0a:9b:af:cf:09:a1:fd:4d:ef:98:74:ff:4a:
a9:c5:4e:74:ef:22:1d:84:2e:42:be:de:3e:5b:1c:8b:79:f8:
c2:dd:a1:a4:37:c6:d6:a4:41:49:8c:06:16:a1:66:7b:ab:2e:
25:76:b3:be:a3:03:e7:b0:aa:43:cc:f0:5c:2c:4b:e2:ab:64:
7d:38:70:c5:31:5f:3d:59:23:51:b8:e8:db:ae:5d:58:a1:f4:
6d:92:ff:f1:91:b5:a6:c4:dd:14:16:e7:57:79:67:4b:f2:2d:
e6:b8:77:4b:07:50:fd:70:99:46:49:f2:d2:e6:49:c3:5b:76:
00:17:7e:57:90:8d:78:b9:4f:90:0f:95:2c:0f:9e:88:d9:89:
ba:92:d9:18:1e:db:b9:99:91:0b:9b:67:2d:21:0a:53:0d:66:
d6:50:d0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:30:37 2025 by rpki-client