Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/g3yLg5J26bEzH18RBTtsjGoZhII.roa
File: g3yLg5J26bEzH18RBTtsjGoZhII.roa (raw, json)
Hash identifier: cApOi2oSxLzPd2YPTMWdRt7BIGUJMFS0M5ga6D1tfc0=
Subject key identifier: 83:7C:8B:83:92:76:E9:B1:33:1F:5F:11:05:3B:6C:8C:6A:19:84:82
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7668A9BE4AE574E5174AF7BC3C3318AC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/g3yLg5J26bEzH18RBTtsjGoZhII.roa
Signing time: Sat 28 Oct 2023 13:10:52 +0000
ROA not before: Sat 28 Oct 2023 13:10:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:76:68:a9:be:4a:e5:74:e5:17:4a:f7:bc:3c:33:18:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 13:10:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=837c8b839276e9b1331f5f11053b6c8c6a198482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:0d:18:f4:0a:a9:c1:2a:52:57:23:c8:2b:
c1:4e:61:e8:27:72:32:fa:ef:5f:52:5c:5b:21:39:
90:06:65:ea:32:54:54:67:69:94:1d:4a:ec:14:c4:
a5:ed:49:e7:0c:bd:52:f2:31:bd:6e:4b:51:21:b2:
d0:bb:30:7a:47:4b:7f:8f:3e:64:39:65:fe:ed:8c:
ff:a7:57:ba:a0:2d:8c:ae:57:0b:6c:f7:1e:6f:12:
fd:f4:2b:85:0c:70:98:9c:9f:3a:b1:77:d0:6b:35:
01:98:66:c4:8c:0d:5b:47:26:73:e6:65:f6:37:a8:
fd:e0:60:3e:a5:54:9d:80:5b:c5:07:0f:ab:53:b0:
bd:89:51:08:d6:56:06:b3:b4:95:ce:9d:94:02:83:
9e:e9:eb:07:04:5c:b2:81:bd:9e:3a:11:2d:f8:9d:
f1:89:33:03:49:f3:95:ab:4a:06:2a:c9:cf:71:cd:
07:7a:75:f2:2d:f6:c8:1a:36:8b:55:75:60:83:cd:
37:ae:74:f4:25:01:b9:f0:4f:a9:53:f8:03:47:db:
7e:3f:1f:e6:e4:1b:90:88:a0:fa:be:52:04:4e:a9:
09:dd:8d:75:05:10:a6:56:c7:7d:69:e0:b9:40:5d:
de:be:36:0e:98:cc:24:6d:45:7d:58:f8:46:d0:3e:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7C:8B:83:92:76:E9:B1:33:1F:5F:11:05:3B:6C:8C:6A:19:84:82
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/g3yLg5J26bEzH18RBTtsjGoZhII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cc:da:2c:00:84:d9:80:61:4d:2f:94:a8:97:dc:cd:c1:ea:f2:
1d:70:24:6d:ae:ad:d2:aa:32:c0:01:0a:bd:6b:05:10:5e:b6:
87:7c:66:9e:c3:80:08:6d:e7:0d:68:1f:50:0c:ba:82:b1:a8:
3b:e6:16:e3:81:20:e7:a5:69:f5:17:e7:21:ca:33:7b:34:49:
ec:c6:d6:53:91:ca:7f:c0:a0:e2:1a:10:b2:be:9d:f0:81:d8:
86:6e:e6:1e:d7:42:80:63:d1:0f:c3:78:9a:a6:18:60:a4:f8:
1c:89:91:6e:25:5d:8e:5b:89:a8:7f:99:d8:36:72:85:e7:f5:
1d:56:02:58:4c:b2:59:c9:a8:d4:5b:77:e3:c1:bd:b3:56:2f:
d1:7f:b1:3d:4a:1e:60:61:bd:2c:2f:30:71:f5:c5:6a:13:b0:
fb:2b:0c:2e:e3:36:82:7d:a3:ee:38:47:5e:83:fb:38:4a:29:
39:15:50:63:42:ed:99:9a:eb:5a:4e:a8:38:5d:c1:98:d1:57:
cc:23:4d:02:87:fe:ef:3e:d5:c1:39:ef:22:c1:a3:b6:67:d4:
28:60:63:52:87:da:b8:9a:29:02:0d:1a:bf:65:4f:a4:85:65:
7b:91:04:95:f5:85:1e:eb:24:7d:ba:49:38:3b:37:81:eb:df:
38:63:b1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:05 2025 by rpki-client