Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/geSvC-WWpvxY7zO8gXKS5Lair7I.roa
File: geSvC-WWpvxY7zO8gXKS5Lair7I.roa (raw, json)
Hash identifier: 2NlO2c9lI41ncSIxhS8Kc0DlsRoYbnZwvrWcZjuS8GM=
Subject key identifier: 81:E4:AF:0B:E5:96:A6:FC:58:EF:33:BC:81:72:92:E4:B6:A2:AF:B2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5303B36EC943CCB8A08246DEA0AA891C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/geSvC-WWpvxY7zO8gXKS5Lair7I.roa
Signing time: Sun 10 Dec 2023 09:16:40 +0000
ROA not before: Sun 10 Dec 2023 09:16:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:53:03:b3:6e:c9:43:cc:b8:a0:82:46:de:a0:aa:89:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 09:16:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81e4af0be596a6fc58ef33bc817292e4b6a2afb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:b2:de:16:25:65:b6:29:e7:1d:2a:f3:4f:
e6:2c:9d:b4:87:77:e1:60:b6:4d:9d:3d:22:58:84:
74:a9:a0:5b:3f:00:2f:16:26:9f:41:1c:fe:46:4b:
55:5a:60:ff:7a:1e:66:94:59:22:29:c6:69:e3:43:
db:a7:80:dc:3e:ea:b8:fc:ad:00:8c:3b:ad:37:02:
41:9d:63:84:6f:e5:d2:03:7c:0e:83:f3:9f:68:61:
45:4f:f2:33:99:74:6e:5a:5e:40:3e:86:21:c9:84:
e4:d5:63:75:7e:68:55:fb:f9:c8:fb:c3:e4:6d:1c:
b6:1d:6c:17:34:da:c2:98:c1:b5:b8:01:9b:da:33:
84:5c:5c:a0:f2:92:dd:f0:3f:f0:41:b9:dd:ad:0b:
70:92:2f:18:4e:db:03:c8:e9:0c:93:27:d6:be:6e:
6d:d4:b0:47:32:0d:03:c9:be:6d:d0:54:5b:98:f1:
3a:57:3b:87:4c:d7:9d:84:21:68:43:c9:b9:95:ce:
b6:79:f7:d7:57:14:f4:c7:88:8a:d0:bf:22:02:48:
7b:b4:c3:d5:bf:c2:b4:00:01:62:12:79:76:a7:ca:
34:55:93:0e:5e:24:d6:cc:c2:78:61:e9:52:d6:2e:
19:93:42:d8:99:66:ae:9f:ae:7b:a1:e3:67:3b:9c:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E4:AF:0B:E5:96:A6:FC:58:EF:33:BC:81:72:92:E4:B6:A2:AF:B2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/geSvC-WWpvxY7zO8gXKS5Lair7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:a8:a0:76:a2:38:9e:eb:a9:bf:35:8f:cb:7b:16:7e:9d:42:
b1:76:4c:19:2e:d8:2f:96:59:51:b5:e7:ee:a8:73:55:02:71:
ca:77:4e:7a:f8:4c:cf:30:db:af:d6:d3:0b:08:5f:0d:20:20:
57:48:aa:20:4e:91:ed:0a:1c:3f:0d:d4:40:6f:a9:f3:61:97:
73:7e:b1:eb:81:50:0d:a3:d8:10:3a:47:a7:73:05:5c:fb:d0:
93:7f:15:0e:5c:0a:b1:80:6f:77:0c:1a:3d:41:07:4f:ee:e6:
65:b8:dc:83:93:8b:ac:fc:70:b3:50:00:5f:66:c2:54:da:f0:
31:7c:53:6d:ad:7b:81:32:a4:54:97:74:34:ca:79:5d:02:45:
c3:19:81:27:c4:6e:27:5a:8e:b6:34:3c:db:f6:11:46:ac:d8:
d3:43:e1:03:0f:e5:27:c2:1b:38:f5:86:46:a9:1f:27:c5:ec:
ae:d0:03:21:1b:e7:9d:1a:48:bb:38:d6:cc:7c:30:60:b1:ab:
8b:b5:77:82:c4:23:c1:4a:72:73:08:93:98:22:ab:f3:a5:e3:
06:27:69:a8:ff:e2:93:6d:e1:b1:58:e3:5c:19:82:a4:0e:ee:
68:78:8b:9a:22:11:74:23:65:0c:02:e2:e0:19:b1:73:b4:64:
89:e5:56:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:43:26 2025 by rpki-client