Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RGRLGoWL8YcANOeg34rOTQk09C8.roa
File: RGRLGoWL8YcANOeg34rOTQk09C8.roa (raw, json)
Hash identifier: muXy7E37N9S0BQhiDtHwOEllXUErQ5wLpI3qoq3oee0=
Subject key identifier: 44:64:4B:1A:85:8B:F1:87:00:34:E7:A0:DF:8A:CE:4D:09:34:F4:2F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0A7CA965B49A212FECDE221B7B022024
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RGRLGoWL8YcANOeg34rOTQk09C8.roa
Signing time: Sat 07 Oct 2023 14:13:43 +0000
ROA not before: Sat 07 Oct 2023 14:13:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0a:7c:a9:65:b4:9a:21:2f:ec:de:22:1b:7b:02:20:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 7 14:13:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44644b1a858bf1870034e7a0df8ace4d0934f42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4d:9d:96:be:04:7f:6b:c1:33:d6:62:fc:de:
66:35:4e:45:6f:06:9a:cb:fd:00:38:43:ad:2d:0c:
79:78:52:c0:43:a9:5c:71:9e:14:0b:72:bd:b1:bc:
87:d7:cc:f4:be:0c:52:a5:3d:5e:42:25:5c:6b:25:
28:88:45:9c:02:11:3b:0b:49:9c:83:8a:8f:e7:34:
b6:b5:1f:e3:6e:e0:e1:7b:22:33:43:bb:9a:4a:0e:
1b:d9:a6:58:16:43:f9:ed:08:25:22:55:49:c7:b4:
b6:f1:9e:da:78:dc:8b:f9:6c:10:0e:77:dd:c8:9e:
c2:a6:a1:d4:10:01:2c:ff:a1:b3:34:40:72:c1:a3:
73:96:65:e6:ce:3b:a8:ad:b4:cd:66:75:c0:7a:e8:
8d:5f:54:82:2e:37:51:64:21:db:4c:ab:b3:07:5a:
42:62:a8:7b:34:9d:f8:92:7e:39:17:34:9e:8d:35:
3a:3e:ee:6f:86:18:76:54:21:fd:af:59:0d:59:25:
73:7b:ba:8d:a9:4b:ee:96:45:cc:21:08:7a:7b:e1:
71:ba:2a:75:91:94:68:78:d6:ab:ea:8e:73:f8:37:
06:50:01:63:8c:61:73:cb:2e:03:6f:8b:25:d0:20:
4a:61:ab:f4:c8:9d:da:41:f7:68:58:01:b3:ea:38:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:64:4B:1A:85:8B:F1:87:00:34:E7:A0:DF:8A:CE:4D:09:34:F4:2F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RGRLGoWL8YcANOeg34rOTQk09C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:70:7f:e0:d3:4a:6f:e8:67:cd:2c:cf:70:b6:13:59:c3:a4:
e8:1b:86:1e:a6:b9:5e:18:38:6f:e6:8b:aa:80:78:9f:84:0e:
0d:6b:19:c4:9d:3f:12:cb:14:1a:bb:21:6a:4a:b6:e8:ef:8b:
94:a8:90:e8:f0:61:75:60:6d:0f:19:56:59:34:71:d3:d9:40:
7a:22:fe:ac:24:44:ee:4e:5e:ae:58:4a:6e:cf:d0:19:4d:65:
76:f5:c3:d0:f6:61:d0:4f:4a:0d:20:eb:54:fb:5d:3b:03:7c:
db:20:7e:49:59:f7:56:a4:fe:23:cd:a1:92:f3:31:2b:26:39:
15:3d:48:4c:85:3b:c2:ff:ca:38:38:e3:6c:2f:0d:9f:73:8b:
12:e0:67:8a:41:da:04:13:9d:8f:a4:49:4b:b2:ce:88:f6:35:
cd:1f:3f:b2:59:19:49:4f:62:91:c0:a7:d8:d3:5f:bc:77:e3:
32:f6:cc:60:f3:79:a9:d8:97:9b:f7:03:ef:a3:17:ab:d9:98:
81:83:9e:46:92:ef:db:b8:14:06:39:c0:9a:03:cd:a0:e5:7f:
42:84:2a:a1:cc:19:2c:cf:0d:6d:f9:11:98:be:b0:a9:a2:52:
b5:4e:b0:6f:b7:d9:f8:92:09:52:b5:58:0e:c3:3a:8b:08:d9:
14:f0:f9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:23:34 2025 by rpki-client