Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gFDC5DF3jgckvk3nJitld58emD0.roa
File: gFDC5DF3jgckvk3nJitld58emD0.roa (raw, json)
Hash identifier: CYRfZaXuuqf+47ngRDHte8IURK7CdR8AunQJRYDx9k0=
Subject key identifier: 80:50:C2:E4:31:77:8E:07:24:BE:4D:E7:26:2B:65:77:9F:1E:98:3D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B416A98007882E97E6BEB6E8BB088B763
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gFDC5DF3jgckvk3nJitld58emD0.roa
Signing time: Wed 18 Oct 2023 06:13:06 +0000
ROA not before: Wed 18 Oct 2023 06:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:41:6a:98:00:78:82:e9:7e:6b:eb:6e:8b:b0:88:b7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 06:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8050c2e431778e0724be4de7262b65779f1e983d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:75:02:1b:2a:cf:74:96:bc:6a:e6:b4:40:0b:
ee:76:7d:9c:7d:42:63:dc:aa:09:1c:58:80:76:1d:
b8:8c:8f:32:5b:ec:59:7b:d6:d0:3b:85:8b:49:d1:
b5:d1:51:39:17:df:05:9f:2e:b8:d4:01:16:ab:62:
ac:37:3f:db:46:c6:3b:35:d1:42:ad:27:49:03:5d:
b3:c8:5c:ac:9b:f1:e6:94:d7:d3:66:a4:49:39:5b:
ce:22:c1:65:62:55:d1:ad:7b:76:26:ef:10:a5:b4:
cb:f1:eb:a9:f2:0f:b9:02:f8:6c:cb:f9:f1:f6:b8:
5d:fb:41:e3:b0:2c:24:39:c6:7c:e5:75:bf:5e:26:
99:b2:59:b6:a5:62:c0:6c:21:cd:fd:48:c9:7b:24:
67:d8:b5:7d:47:d6:aa:f8:6a:d6:73:35:26:87:e0:
ba:bb:3b:9b:57:93:3b:80:0d:30:89:60:46:18:33:
bf:e9:89:bb:d9:67:f8:56:58:47:93:60:59:5c:a2:
11:60:6c:87:cb:e1:64:f7:9b:bf:7b:81:a4:b8:cc:
69:27:fd:74:d0:0c:5d:3d:1b:47:22:b8:73:52:44:
50:23:04:58:08:e8:36:60:0b:26:23:64:d6:8c:92:
56:67:d4:4e:6d:5f:78:37:83:bb:55:90:63:cd:f8:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:50:C2:E4:31:77:8E:07:24:BE:4D:E7:26:2B:65:77:9F:1E:98:3D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gFDC5DF3jgckvk3nJitld58emD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:1b:17:6d:79:0b:43:e2:dd:b5:81:0e:43:af:ba:b8:3e:d7:
72:cb:f5:d4:8e:61:b1:82:a8:fd:2e:cc:61:cb:39:f3:3f:c5:
a5:cb:1c:15:db:6e:2b:3e:c4:99:1e:de:09:22:a5:34:3c:77:
0e:33:20:e8:13:50:7b:4c:fb:2c:ea:7c:cc:f6:44:c1:1c:3d:
e8:79:cb:80:f7:43:b5:76:4a:db:f9:64:fa:0b:52:a4:ea:68:
b9:99:38:2a:cc:7a:22:72:1c:be:a4:4b:d5:94:74:f6:c9:90:
f5:99:c0:17:2a:41:6d:c6:54:26:a6:39:98:0d:af:e0:2c:f7:
30:7b:e9:e6:5d:7b:fb:e6:bb:72:64:29:31:5a:e4:72:87:bf:
f8:45:fb:d6:ea:20:39:d2:05:8c:54:64:09:f7:2e:3b:e3:8d:
46:08:41:ec:12:1d:cd:cd:06:c6:25:7c:8b:fa:d6:b1:dd:64:
0a:b0:3f:db:c8:e7:f8:99:fb:03:fb:37:e7:fa:19:6e:a1:5a:
cd:fd:22:fb:96:06:12:77:80:ed:f0:aa:bf:3b:82:43:11:2c:
14:3b:aa:23:78:01:c0:dd:38:c9:b0:56:74:3e:d7:3f:0b:10:
4a:7b:ff:1a:a7:56:06:02:92:50:f0:bf:16:d3:fa:43:3a:d2:
eb:46:c6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:37:46 2025 by rpki-client