Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gxFQlEVrBbUEHL0AG5CeMDmZe6o.roa
File: gxFQlEVrBbUEHL0AG5CeMDmZe6o.roa (raw, json)
Hash identifier: hd5kStavlecwecRaiU8VwC80+ahuFhjD7/qH8gCcC24=
Subject key identifier: 83:11:50:94:45:6B:05:B5:04:1C:BD:00:1B:90:9E:30:39:99:7B:AA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA71D97C058E5E8264CA7DE6190F88FB6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gxFQlEVrBbUEHL0AG5CeMDmZe6o.roa
Signing time: Tue 07 Nov 2023 00:10:16 +0000
ROA not before: Tue 07 Nov 2023 00:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a7:1d:97:c0:58:e5:e8:26:4c:a7:de:61:90:f8:8f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 7 00:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83115094456b05b5041cbd001b909e3039997baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:c9:8d:3c:c4:fa:bc:94:e6:ed:20:43:70:
7f:14:79:32:70:2d:09:b3:28:01:d0:99:9b:cc:e6:
ae:dd:09:30:75:f9:a7:22:57:8e:40:74:ab:f8:33:
1c:28:aa:88:9d:c1:08:df:d8:42:50:d9:f9:11:5e:
e9:e4:e5:b0:93:ff:9b:ce:79:c8:16:60:2b:b0:b9:
38:41:27:d0:0b:ec:82:34:46:41:92:08:7a:39:dd:
99:4f:72:eb:db:57:4d:ae:d0:0c:0c:03:13:6e:5d:
30:50:65:3a:cc:00:2e:48:1a:6d:0f:89:eb:e4:5e:
43:1b:36:ba:40:38:9b:37:9f:b0:0c:87:20:23:20:
e2:5e:d0:63:64:2e:2d:27:e6:f4:94:c7:1f:a4:ae:
d7:70:f2:2f:15:da:d8:82:d8:6f:27:86:71:8b:25:
0d:f0:b7:e1:de:5f:92:26:be:76:7f:dc:9b:71:55:
76:fc:37:49:9f:5c:e6:92:00:a3:bb:87:83:17:37:
d0:c7:23:2f:2b:95:99:af:c6:04:27:a0:f4:cb:25:
0e:13:76:5d:21:c0:eb:dd:f2:76:11:f2:de:1b:f7:
8d:a9:bb:5f:71:19:a5:6a:63:48:b8:cf:80:fd:20:
ff:a3:bc:07:08:7e:7c:a6:3c:73:1f:f1:5f:76:9e:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:11:50:94:45:6B:05:B5:04:1C:BD:00:1B:90:9E:30:39:99:7B:AA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gxFQlEVrBbUEHL0AG5CeMDmZe6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:80:2e:b6:be:ca:85:ab:b2:bc:a1:85:6e:97:6c:6e:8b:91:
f3:ae:ce:e4:56:19:34:31:7e:0b:58:c0:2c:7f:fe:6e:09:60:
b4:f1:e3:c7:6b:54:99:87:47:aa:9b:c3:36:8a:54:a5:fc:58:
e4:85:ee:21:87:8b:b5:6d:52:9d:0e:bd:62:33:1b:90:b6:48:
1a:7a:fd:ac:de:1b:85:c1:38:56:7d:26:81:81:c6:e9:17:ed:
17:67:75:2a:16:9e:48:d1:35:82:c1:eb:89:02:b0:8f:18:da:
6d:96:91:79:fb:22:bd:81:a5:7d:6c:74:fa:74:57:df:54:49:
f2:31:9f:58:e3:cc:0c:7a:2e:79:51:8f:9d:6b:80:1d:9c:d9:
89:07:25:e0:1c:ac:06:40:88:1a:08:78:2a:6c:a4:a5:e0:02:
a3:f0:98:0b:dd:94:01:92:0c:c5:8b:13:c3:83:2b:1e:12:54:
41:58:8d:1e:6a:6d:9b:09:87:0b:73:ab:92:5d:6a:f6:ac:7e:
63:1b:df:35:43:e7:05:2e:84:41:35:00:7a:e2:30:86:f3:fc:
76:df:98:4f:ae:42:1e:64:00:cb:c4:b9:02:16:3d:d4:49:f5:
6b:54:32:dc:f9:ee:49:03:ce:ff:28:80:e1:3f:48:8d:70:80:
ba:48:7a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:03:46 2025 by rpki-client