Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gltLwi9piiX0MM0Vys6CUDhtpNU.roa
File: gltLwi9piiX0MM0Vys6CUDhtpNU.roa (raw, json)
Hash identifier: bGnjtJ1pOqKLit7nZOD1dlmR8MsWe7IFxNIN11bV66o=
Subject key identifier: 82:5B:4B:C2:2F:69:8A:25:F4:30:CD:15:CA:CE:82:50:38:6D:A4:D5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5CADCD77C401CA90ECE327C7C2EA7F8B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gltLwi9piiX0MM0Vys6CUDhtpNU.roa
Signing time: Mon 23 Oct 2023 13:16:16 +0000
ROA not before: Mon 23 Oct 2023 13:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:ad:cd:77:c4:01:ca:90:ec:e3:27:c7:c2:ea:7f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 13:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=825b4bc22f698a25f430cd15cace8250386da4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5c:97:47:b9:b1:14:00:23:6b:9c:fc:49:d2:
4a:92:a5:71:e3:7a:f6:f3:ac:c8:6b:42:ef:75:28:
94:c0:17:30:e1:6e:fc:a5:fb:56:6a:fe:37:c3:36:
67:49:ac:e4:14:ab:00:20:28:39:b3:de:e3:0e:23:
2f:0c:b5:69:ad:4b:3b:95:f8:c2:8c:30:8c:c3:b2:
78:16:65:2e:22:cc:3c:41:a9:62:05:e8:92:e4:20:
78:ad:95:61:44:13:fa:7d:e0:66:90:6b:01:0b:39:
c8:b2:64:b1:71:ee:b2:06:19:ff:f4:21:e7:e2:e9:
0d:9f:43:6b:20:0b:b2:95:d2:22:d6:88:07:85:fb:
5b:87:3d:dd:06:d6:9c:62:55:8b:da:20:3a:42:a6:
d9:df:4b:45:de:c9:2f:a6:2b:19:eb:21:43:2e:92:
4d:91:50:13:1e:d2:f1:9a:bc:f0:15:36:8a:3a:dd:
4d:0a:3c:07:cb:fc:76:b8:58:4d:94:c9:a7:30:de:
b1:46:f1:6b:75:fd:ff:2d:e0:ad:6b:aa:f0:8e:28:
ec:12:a6:de:4f:c7:f6:b3:36:4d:6e:fc:c7:5d:a4:
81:16:4f:30:cd:4b:45:8c:cc:59:70:73:96:e1:5e:
11:35:af:ff:74:a6:76:f7:5e:f3:0c:3f:0e:4c:3e:
a5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5B:4B:C2:2F:69:8A:25:F4:30:CD:15:CA:CE:82:50:38:6D:A4:D5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gltLwi9piiX0MM0Vys6CUDhtpNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:45:94:fb:ab:40:0f:8a:12:b9:34:6a:41:7b:26:3e:04:7d:
3d:96:2a:41:04:63:dd:94:c2:ba:76:0a:48:8f:c5:f8:ff:f2:
78:5c:56:3a:46:89:32:63:e2:1c:e4:35:6c:b4:91:5b:75:7b:
90:ef:7b:d5:b0:40:90:09:33:b0:f7:26:21:d5:71:03:b9:1e:
d5:31:2e:59:1a:31:9f:55:6c:98:f2:e5:61:f2:09:80:6a:72:
67:72:0d:3e:92:4f:dd:19:09:a0:04:54:ff:85:2f:6c:3f:78:
59:a4:3f:18:be:8f:78:ad:53:9f:f9:eb:a1:a5:fd:04:af:55:
b3:1f:ce:03:dc:f8:37:b0:62:ec:51:34:ef:9c:17:eb:06:13:
84:0b:ef:b6:0d:6d:e9:47:b0:92:8b:a4:82:2b:c4:e7:b5:07:
1c:69:3e:c5:be:91:77:54:6e:cc:56:fb:53:15:6f:df:fa:da:
6e:26:6d:a9:34:4c:c0:8f:d3:31:6c:d3:35:b0:ff:89:e9:c2:
62:97:43:9f:0d:a6:0a:fb:2d:c1:94:e4:60:d4:10:58:89:fc:
1c:c2:e9:a7:d7:f8:bb:b7:3e:46:a5:21:d1:4e:77:95:66:14:
e0:f4:cf:6d:07:26:38:e0:ca:e9:72:fb:eb:44:c3:a6:23:b1:
47:e0:04:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:56:18 2025 by rpki-client