Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gkmKdsarTF7WfMATLRzD-lObuoc.roa
File: gkmKdsarTF7WfMATLRzD-lObuoc.roa (raw, json)
Hash identifier: ZQC+Lgo0t/xZstMeqsvpnYwt3TG4i2A2LK4mVYTGMgY=
Subject key identifier: 82:49:8A:76:C6:AB:4C:5E:D6:7C:C0:13:2D:1C:C3:FA:53:9B:BA:87
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4658214AF9F0C3C05584BF5D4D37F82E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gkmKdsarTF7WfMATLRzD-lObuoc.roa
Signing time: Thu 07 Dec 2023 22:13:49 +0000
ROA not before: Thu 07 Dec 2023 22:13:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:46:58:21:4a:f9:f0:c3:c0:55:84:bf:5d:4d:37:f8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 22:13:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82498a76c6ab4c5ed67cc0132d1cc3fa539bba87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:24:17:fe:9d:a7:a3:55:5e:bf:bb:6d:1b:
3a:31:15:71:7e:25:4f:73:7a:31:e1:4a:d2:2b:dc:
df:ad:67:3b:44:46:3c:52:7e:ea:c5:43:63:b5:ba:
b1:aa:0e:bd:79:6e:7a:4b:82:06:7c:2d:59:7b:c5:
a3:e0:c7:3d:12:91:7e:59:7f:4f:d7:5e:ec:67:8b:
75:58:dc:f0:90:60:12:bd:93:d6:cc:36:aa:f8:ec:
34:83:d9:f8:c2:d3:8e:7f:13:6f:00:0a:f8:35:ec:
29:42:a2:35:8f:03:a5:2a:c3:a0:1e:04:61:c4:54:
3e:cb:70:13:c3:9d:49:fe:0c:f1:cd:10:c6:e2:15:
d4:49:64:ad:f6:b7:a0:ec:7d:d1:4f:ca:6d:d0:56:
1a:90:53:84:63:9a:e7:a2:b0:c1:13:1e:e7:eb:61:
28:18:2e:c7:be:47:87:16:f4:d3:57:43:ff:ca:8f:
b8:d3:f5:6d:0c:78:c6:8b:33:0e:37:d9:92:0f:dd:
71:5e:a3:5a:12:9e:ae:7d:0f:84:a0:1f:88:3b:54:
fe:31:bc:8a:40:12:23:de:df:ef:a4:12:44:fd:40:
08:d9:b0:0a:c5:e6:e1:0b:50:a8:55:eb:2b:07:af:
d8:68:0e:5d:3f:66:fd:17:11:c0:a8:4e:47:f6:ab:
75:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:49:8A:76:C6:AB:4C:5E:D6:7C:C0:13:2D:1C:C3:FA:53:9B:BA:87
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gkmKdsarTF7WfMATLRzD-lObuoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:ff:a0:59:e6:70:ef:e0:29:86:fd:2e:bd:0c:a8:d6:ba:93:
4e:fa:dc:b5:d8:a5:8a:e0:d4:d2:96:3c:54:bc:01:32:81:5f:
5a:67:91:b5:84:94:b8:1b:ec:eb:5d:9c:cc:0a:81:35:f2:f5:
09:40:6c:3c:97:f3:27:9b:16:dd:b4:4f:2e:9d:df:e5:05:37:
b6:d1:e3:1e:e2:43:d6:58:b5:e7:9e:1d:28:1f:65:19:dc:ca:
81:44:0c:e1:3e:b9:a5:52:45:99:b1:f0:af:c2:ed:3a:1d:45:
e6:64:e8:fc:48:20:e9:40:68:fc:4e:58:0d:e1:1f:da:93:b3:
78:28:94:cc:7e:cf:3a:a7:d3:2f:a3:3a:d5:01:6d:23:ba:c0:
56:2b:18:3c:71:af:cf:93:c3:4c:ad:6b:58:bb:8d:8b:17:1c:
46:69:a5:16:84:01:41:ae:3e:a9:6c:4a:ef:65:3f:5f:18:9e:
1f:a7:74:ac:f3:9e:0e:4b:2e:2e:1e:97:50:45:7e:1a:a1:ca:
b2:03:a5:bf:5e:42:e2:3c:9c:95:50:4b:0c:fc:1a:7b:f5:12:
3a:31:76:d0:7b:9d:c2:cd:cf:eb:fd:b8:b8:80:08:7f:1d:fd:
aa:5e:76:22:f7:5a:35:7e:cf:63:8a:64:b3:3e:6d:37:8a:1b:
e0:5f:15:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:38 2025 by rpki-client