Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/grAt04JJf4HX9RwN9VIHt8LEbfU.roa
File: grAt04JJf4HX9RwN9VIHt8LEbfU.roa (raw, json)
Hash identifier: t76C+2lLrmE7QINCF3zNgC3IG2e1fgvTqPDCLSTChCQ=
Subject key identifier: 82:B0:2D:D3:82:49:7F:81:D7:F5:1C:0D:F5:52:07:B7:C2:C4:6D:F5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4A34C1712EA1000A0DDBF9399F9EC53C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/grAt04JJf4HX9RwN9VIHt8LEbfU.roa
Signing time: Fri 08 Dec 2023 16:13:40 +0000
ROA not before: Fri 08 Dec 2023 16:13:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4a:34:c1:71:2e:a1:00:0a:0d:db:f9:39:9f:9e:c5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 16:13:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82b02dd382497f81d7f51c0df55207b7c2c46df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:96:a3:f8:ab:fc:1f:b5:9f:7f:5e:da:ef:71:
5a:89:3e:5d:b4:3f:8f:c1:07:83:79:2c:3c:92:5d:
1b:16:ef:c9:b9:96:01:43:d4:10:6f:b9:4b:6d:16:
48:4e:df:97:a5:43:3a:0a:08:15:ce:a9:03:ad:c7:
e5:dc:97:ec:7d:a8:72:40:c0:66:71:d2:25:b8:55:
94:14:e6:84:53:f2:be:2c:07:82:5b:92:d3:85:14:
0b:47:f5:f1:85:c6:03:e8:01:c1:10:af:ea:3c:1d:
f9:78:85:ce:37:ae:32:6e:87:03:6b:57:a6:b0:f0:
e2:6c:08:5f:94:c6:56:48:d6:d8:8f:8b:79:56:0f:
84:3d:1d:4e:9d:51:46:e1:12:a8:59:17:19:e8:37:
85:80:17:37:6a:68:2f:0c:3e:d9:23:22:c8:35:7e:
35:43:a1:6d:e9:76:35:c1:a1:20:85:ee:a9:70:1a:
5f:d7:5a:73:48:a0:44:94:3a:2e:0d:8f:c9:ba:62:
43:16:dd:09:46:18:65:3b:85:7c:15:f4:af:b4:cf:
c5:a1:a5:1b:29:45:4d:cb:3b:9e:8f:e8:5b:fb:1c:
a6:36:d7:c5:2b:86:b2:c3:18:ce:a9:44:73:71:be:
c7:0e:28:60:37:dc:23:e4:a1:88:00:24:9c:f6:58:
cd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B0:2D:D3:82:49:7F:81:D7:F5:1C:0D:F5:52:07:B7:C2:C4:6D:F5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/grAt04JJf4HX9RwN9VIHt8LEbfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:5f:ee:32:ea:72:c9:5c:6b:d1:3c:1a:9f:f5:fa:5c:17:16:
15:5e:90:2e:c7:bf:6f:03:ec:0c:e9:01:98:58:9b:9c:d9:bb:
0d:ce:02:9d:81:0e:cf:65:c1:0a:25:9f:34:24:46:76:71:31:
09:e6:ae:a8:51:a8:1d:31:43:c4:e5:71:ab:70:c2:04:d1:32:
1f:2f:f9:bc:f8:61:3c:08:bf:77:ad:4d:ea:44:59:db:20:1f:
67:93:0a:25:bd:ef:62:91:49:64:b7:ad:13:a4:0a:f4:b3:2c:
3f:9e:41:c4:90:60:af:02:ba:ae:44:c1:bf:1e:c4:15:7d:5e:
bd:b8:e0:54:1d:d9:c1:bd:64:9b:98:36:2e:0e:d9:33:83:44:
51:ee:b5:68:87:d9:d1:76:bc:47:b1:26:bc:96:b5:6d:62:7b:
5b:e7:45:cd:0e:fc:33:24:a6:03:77:43:2d:20:cd:53:3a:dd:
ac:dc:b6:7e:56:32:36:18:a2:8d:38:6c:3f:f6:19:04:4b:e6:
3a:68:ff:e9:5a:61:51:d7:5e:fb:7e:6e:2a:3e:a6:1a:ac:4f:
ca:5f:1c:d6:ca:e3:1b:6b:a9:fb:46:08:b1:bd:98:92:ed:58:
fa:97:f5:51:ec:04:04:ab:78:84:46:1f:9d:3f:63:20:49:84:
f3:8f:fc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:42:02 2025 by rpki-client