Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gXhAlsHMMZ8Y8YV6l9qZS1q2S4c.roa
File: gXhAlsHMMZ8Y8YV6l9qZS1q2S4c.roa (raw, json)
Hash identifier: zns0bIHiFZzn0h1IcYXk6RbS1NmXleHaUaEyPFMxBLw=
Subject key identifier: 81:78:40:96:C1:CC:31:9F:18:F1:85:7A:97:DA:99:4B:5A:B6:4B:87
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B45B44F80E9ED3E49073F2C26A320F018
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gXhAlsHMMZ8Y8YV6l9qZS1q2S4c.roa
Signing time: Thu 19 Oct 2023 02:12:06 +0000
ROA not before: Thu 19 Oct 2023 02:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:45:b4:4f:80:e9:ed:3e:49:07:3f:2c:26:a3:20:f0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 02:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81784096c1cc319f18f1857a97da994b5ab64b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:d5:10:b2:6e:4e:0c:fa:ef:3e:da:48:22:
c5:3f:66:7e:ed:13:0d:cc:58:5b:24:d6:0a:72:0e:
9b:8a:b2:f6:54:c6:f3:72:6f:04:18:1d:f8:f5:2b:
8e:77:2a:e1:85:72:4e:5f:6f:63:da:a0:f8:75:07:
50:d9:97:23:f6:5e:7f:de:3c:36:d3:cf:ff:16:c6:
32:15:e4:7f:14:93:51:c5:85:f8:2b:a3:b4:d1:07:
41:50:f7:7d:1b:87:93:93:82:04:64:fb:57:6a:71:
da:bd:77:22:07:e5:56:60:24:bb:22:3f:34:8c:33:
18:4a:24:1a:a6:9b:e6:d8:cc:d5:f2:b8:e0:b0:b7:
6d:9d:e2:2d:17:49:2a:91:8d:e0:cc:e7:79:44:51:
8d:26:50:29:7e:1c:6d:61:b9:80:51:c4:8f:c7:87:
52:4e:4c:68:f8:52:4f:d4:03:3b:9e:56:0a:b9:27:
65:0e:4a:6f:df:f6:0d:55:fc:21:c7:5f:55:3c:21:
88:d1:fe:94:0f:88:b7:9a:de:bf:93:04:ba:ea:5a:
c3:ea:d3:5a:4b:a7:30:11:c6:b5:5f:79:de:1f:d9:
ce:2b:1f:29:ba:ad:56:ba:2a:ea:e9:55:b8:bc:81:
77:d1:69:77:e8:ef:7a:61:19:fd:41:f0:da:c3:37:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:78:40:96:C1:CC:31:9F:18:F1:85:7A:97:DA:99:4B:5A:B6:4B:87
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gXhAlsHMMZ8Y8YV6l9qZS1q2S4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:fd:e8:a1:99:8b:1f:8a:18:55:7f:05:9f:23:bf:b2:57:13:
11:4f:c6:34:98:6d:0e:61:e2:86:ab:68:53:cf:fd:b2:48:b1:
26:e7:96:28:32:af:8b:b0:9c:b7:24:2c:bc:2f:f8:43:ad:30:
30:33:0d:e1:03:80:4e:c3:3e:a1:d0:9c:76:2b:d0:bf:b6:83:
5c:04:97:60:33:31:c5:c3:dc:2e:7f:c0:5f:33:45:cd:5b:ec:
f7:cc:fd:82:15:37:5b:3b:cc:f9:8a:b3:15:ab:b7:0d:5a:a4:
71:ed:77:0a:21:82:73:08:5a:7e:28:c8:4d:b8:1c:fc:84:ae:
10:d0:0f:ad:72:44:ac:b1:a5:89:74:aa:fa:70:33:f9:25:27:
64:c9:46:aa:ba:49:a7:f0:e0:e0:88:c3:79:d1:b7:df:27:d9:
96:a2:88:07:dd:82:9b:d3:69:48:c7:20:b8:d6:24:14:06:b4:
ae:ed:48:44:ca:7f:ef:e6:4c:b7:7a:8a:46:53:bb:30:24:e0:
28:1a:da:91:a6:14:14:0c:1d:21:b4:5b:a9:1e:df:15:b0:7e:
95:55:5f:b7:96:8a:26:e4:12:58:25:55:2b:3b:11:68:f1:94:
20:c0:1e:c8:25:d5:92:2f:b8:47:fc:39:bf:bc:d1:45:1e:29:
c4:73:66:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:35:53 2025 by rpki-client