Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gx6NGVE3ttE16Uv60Jia5iosLQo.roa
File: gx6NGVE3ttE16Uv60Jia5iosLQo.roa (raw, json)
Hash identifier: 7elhEFDj2nanKmvF6N7OZsyRxw+rHdc8CHcBC/MnmZ4=
Subject key identifier: 83:1E:8D:19:51:37:B6:D1:35:E9:4B:FA:D0:98:9A:E6:2A:2C:2D:0A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE7F0E9788752EC6A467EF9FEB77BC983
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gx6NGVE3ttE16Uv60Jia5iosLQo.roa
Signing time: Sat 30 Sep 2023 21:13:59 +0000
ROA not before: Sat 30 Sep 2023 21:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e7:f0:e9:78:87:52:ec:6a:46:7e:f9:fe:b7:7b:c9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 21:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=831e8d195137b6d135e94bfad0989ae62a2c2d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1d:43:62:c7:d4:79:65:9a:9e:fa:de:3e:5c:
5f:4a:6a:35:fc:99:11:35:c7:a0:00:a5:7a:ee:e7:
ec:ec:7d:1f:31:a7:d4:19:48:ef:f4:c3:f8:46:15:
85:0f:23:ed:e8:22:7c:ac:70:b2:9d:96:7a:01:b6:
43:fb:df:8b:73:97:fe:b3:27:3d:3c:59:f2:b8:f6:
da:82:ee:d8:13:69:64:bf:f5:b3:6d:c3:50:98:b9:
45:71:2d:2d:69:ac:d7:cb:ad:a9:2d:ea:9a:21:bc:
ad:fa:db:49:36:c4:74:06:35:d6:8d:d0:2a:a4:14:
1b:2f:55:e2:45:f3:70:11:94:eb:03:61:a5:61:62:
1a:fb:1b:fc:ba:61:7a:63:dd:b5:fd:90:cf:3f:a5:
f1:30:1d:2c:7b:f4:23:64:de:79:32:d1:0e:1f:4f:
61:bb:c5:a7:16:c6:2c:d2:f4:96:f3:e1:54:01:5c:
1d:ab:58:51:8b:37:de:b1:78:b1:41:c3:08:6c:6f:
e6:a9:19:4e:61:1a:1d:ff:02:25:c3:f1:45:d1:93:
0c:0b:b7:7b:28:99:3d:c8:a8:7f:01:8d:8f:04:6f:
7b:fb:b9:db:2d:9a:fe:c3:51:80:de:35:6a:87:f9:
6c:d9:64:3b:4e:48:29:f5:95:b4:ee:6a:d9:3e:7b:
67:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1E:8D:19:51:37:B6:D1:35:E9:4B:FA:D0:98:9A:E6:2A:2C:2D:0A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gx6NGVE3ttE16Uv60Jia5iosLQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:b1:31:81:e8:5e:fa:89:97:af:54:23:a5:0c:44:b8:e2:a8:
e0:20:e1:f2:bf:a7:59:b2:37:cd:e5:7c:fe:8b:d9:21:46:d7:
8f:4c:a5:d0:60:a4:a8:b4:dd:3b:f8:c7:86:55:a2:56:be:6e:
70:a1:4e:11:39:e7:ff:68:18:86:96:6a:13:da:95:71:2b:34:
0b:7d:91:a2:15:51:7a:03:8a:47:16:6c:cc:aa:56:fa:39:28:
e8:7c:ee:79:4f:8a:cb:59:54:03:70:3a:93:de:8e:b8:86:ab:
2e:15:1f:37:ae:40:20:a2:f2:95:c5:a1:12:3a:cd:37:74:6c:
ae:54:4a:8d:56:c4:92:99:a3:c1:72:42:ca:86:4b:31:63:28:
ff:c0:1e:f5:ff:dc:1c:98:2e:97:d7:8a:96:3a:5e:6b:0f:63:
aa:36:22:ad:5b:4c:9d:10:bf:15:d6:02:6d:5c:e5:a8:27:47:
9a:80:b4:4b:d9:b6:b6:e8:51:a0:7e:22:a6:bd:3c:d0:06:9f:
61:6c:09:de:5d:8d:22:2f:a4:5c:de:4a:52:a3:c0:aa:56:6c:
a5:8a:08:6f:01:5a:68:c8:00:c1:e7:b1:7c:48:cc:ed:68:79:
5d:a9:78:6f:09:94:ea:68:e9:7e:41:e2:07:40:48:f1:39:d4:
02:fc:38:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:58 2025 by rpki-client