Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gPSIn0ik3epUxicpDUi8ORemOzM.roa
File: gPSIn0ik3epUxicpDUi8ORemOzM.roa (raw, json)
Hash identifier: oIMXcCoxQQqFTuEUQ29j7MtkIWit9fOKq/pXWx0AuK8=
Subject key identifier: 80:F4:88:9F:48:A4:DD:EA:54:C6:27:29:0D:48:BC:39:17:A6:3B:33
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3AC2CFC3C7D3B2573835982DEA0CC3E2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gPSIn0ik3epUxicpDUi8ORemOzM.roa
Signing time: Tue 05 Dec 2023 16:14:54 +0000
ROA not before: Tue 05 Dec 2023 16:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:c2:cf:c3:c7:d3:b2:57:38:35:98:2d:ea:0c:c3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 16:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80f4889f48a4ddea54c627290d48bc3917a63b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:db:b5:87:6d:a4:6d:4b:15:1c:52:34:77:
28:7a:2d:e7:fe:a7:f9:f5:7f:1a:ea:96:08:a1:f9:
43:c0:c8:4c:07:d0:99:e2:e1:16:71:8e:31:ff:2c:
94:6a:5e:d1:24:0a:c0:cc:bb:31:d2:6e:47:79:ee:
05:8e:97:78:9e:c1:cc:06:7a:ac:6f:b3:e2:d0:b3:
20:fd:13:e7:ab:2d:3b:a3:50:1f:af:0d:48:72:c9:
57:07:44:d3:aa:df:ad:fa:7d:ac:26:53:c8:3f:58:
92:40:3c:4a:0a:ca:d9:af:39:16:75:e6:e2:e5:d9:
6a:93:b1:e4:f5:6d:ba:fc:61:98:62:a8:76:fb:5d:
05:cb:ce:f0:8f:1d:00:c7:a8:11:4f:68:8b:6b:b4:
2d:35:ba:07:0c:04:bf:a8:80:a2:4d:7f:58:af:c3:
bc:ab:3b:69:78:44:ad:e9:c5:91:3e:e8:30:92:6c:
b8:9b:55:c5:7c:af:9b:47:72:8f:f7:2a:23:e4:b6:
2d:f7:36:a7:8b:0f:77:72:95:d5:da:db:62:a2:30:
5d:45:c5:71:4a:fb:e8:fe:4b:99:68:5d:e9:44:68:
f0:d1:0b:f3:36:c0:64:a5:7c:cd:9f:ec:48:f0:cd:
2a:9a:ed:a4:e6:6a:56:7c:14:41:7e:9a:ea:24:95:
5a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F4:88:9F:48:A4:DD:EA:54:C6:27:29:0D:48:BC:39:17:A6:3B:33
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gPSIn0ik3epUxicpDUi8ORemOzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:e8:fe:bd:6e:72:ca:4c:b7:01:d5:e4:c4:5a:c9:16:50:ba:
c5:e3:0e:d1:6b:79:e1:49:e4:a3:42:9d:1d:cd:d8:4f:69:c9:
57:a2:75:d1:b8:52:48:2a:5a:15:5a:6d:ae:e9:e4:af:d4:a4:
a6:1b:09:5b:ad:81:b4:e9:77:64:47:06:a5:fe:50:06:d3:b8:
1e:c7:13:d6:00:f1:d2:03:49:55:e8:2a:c5:ff:19:3d:ef:c0:
e8:89:f0:8f:87:77:91:02:39:82:4c:61:66:2c:89:0f:75:13:
e3:48:6b:0d:a5:ac:f0:ba:a3:21:20:8d:f9:5e:47:27:95:26:
36:9a:eb:b3:52:63:af:19:6e:40:5d:66:d5:a4:a3:8e:11:7d:
10:6a:69:97:a7:da:2d:c4:79:24:c3:1f:65:74:d9:33:52:17:
ea:9f:2c:07:d6:94:3f:61:58:ea:d9:e9:f0:68:13:30:67:0e:
16:52:c0:01:ca:8a:7a:3b:22:d4:f5:84:00:47:ea:68:0d:f4:
d0:7d:d1:fd:69:ac:0b:97:d2:91:ed:5e:28:14:1d:85:7b:7c:
b1:c3:b6:5f:dd:66:e1:3c:ff:8c:d6:54:a3:10:27:cb:20:a1:
24:46:55:78:ac:bf:ea:a8:bb:8c:9a:0b:55:b6:b3:c1:4a:ef:
97:e8:7b:00
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYw6ws/Dx9OyVzg1mC3qDMPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA1MTYxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGY0ODg5ZjQ4YTRkZGVhNTRjNjI3MjkwZDQ4YmMzOTE3YTYzYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvXbtYdtpG1LFRxSNHcoei3n/qf5
9X8a6pYIoflDwMhMB9CZ4uEWcY4x/yyUal7RJArAzLsx0m5Hee4Fjpd4nsHMBnqs
b7Pi0LMg/RPnqy07o1Afrw1IcslXB0TTqt+t+n2sJlPIP1iSQDxKCsrZrzkWdebi
5dlqk7Hk9W26/GGYYqh2+10Fy87wjx0Ax6gRT2iLa7QtNboHDAS/qICiTX9Yr8O8
qztpeESt6cWRPugwkmy4m1XFfK+bR3KP9yoj5LYt9zaniw93cpXV2ttiojBdRcVx
Svvo/kuZaF3pRGjw0QvzNsBkpXzNn+xI8M0qmu2k5mpWfBRBfprqJJVaOwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFID0iJ9IpN3qVMYnKQ1IvDkXpjszMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZ1BTSW4waWszZXBVeGljcERVaThPUmVtT3pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABTo/r1ucspMtwHV5MRa
yRZQusXjDtFreeFJ5KNCnR3N2E9pyVeiddG4UkgqWhVaba7p5K/UpKYbCVutgbTp
d2RHBqX+UAbTuB7HE9YA8dIDSVXoKsX/GT3vwOiJ8I+Hd5ECOYJMYWYsiQ91E+NI
aw2lrPC6oyEgjfleRyeVJjaa67NSY68ZbkBdZtWko44RfRBqaZen2i3EeSTDH2V0
2TNSF+qfLAfWlD9hWOrZ6fBoEzBnDhZSwAHKino7ItT1hABH6mgN9NB90f1prAuX
0pHtXigUHYV7fLHDtl/dZuE8/4zWVKMQJ8sgoSRGVXisv+qou4yaC1W2s8FK75fo
ewA=
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:48 2025 by rpki-client