Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/G8k_YFaXJV9ahglg2Yy7dMpdIX0.roa
File: G8k_YFaXJV9ahglg2Yy7dMpdIX0.roa (raw, json)
Hash identifier: GBVjqrkWv65Qio6DzlMB7GU9FXJDH9kZavX4yZMZH60=
Subject key identifier: 1B:C9:3F:60:56:97:25:5F:5A:86:09:60:D9:8C:BB:74:CA:5D:21:7D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B940566CD6B531BEB58CF919F761E4262
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/G8k_YFaXJV9ahglg2Yy7dMpdIX0.roa
Signing time: Fri 03 Nov 2023 07:11:03 +0000
ROA not before: Fri 03 Nov 2023 07:11:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:93ff:6776/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:05:66:cd:6b:53:1b:eb:58:cf:91:9f:76:1e:42:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 07:11:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bc93f605697255f5a860960d98cbb74ca5d217d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:87:50:d2:09:41:11:ff:53:7d:16:86:d5:df:
d4:ca:df:9b:ce:12:e8:37:b1:33:e7:5b:d6:b1:4e:
e3:74:44:b0:e2:b8:0f:04:b7:79:cf:b8:5e:8e:d9:
1b:11:5d:9e:f5:4a:57:b4:59:15:81:38:e1:b4:35:
59:97:29:26:3b:d6:a8:34:5d:22:07:74:36:83:d9:
f5:6a:17:13:47:9d:90:15:b2:5c:d0:f7:ce:e6:d7:
46:a7:d2:b9:71:ee:a9:37:3a:68:43:3f:3d:a4:72:
b9:08:51:04:c5:0c:42:6b:e0:8a:92:b3:4e:10:c2:
14:4b:c0:92:3c:72:f2:e2:26:b1:ad:fa:ec:de:55:
df:93:b1:1b:12:73:b8:ce:af:c0:67:2d:e8:e4:6e:
db:c7:c1:76:b5:69:6c:cf:85:00:b5:6a:20:d8:2e:
1d:0f:01:55:e6:68:ec:e0:c2:06:e0:81:8e:a4:8c:
ba:fa:35:ce:7f:c6:54:b7:9a:49:0a:6d:38:9d:3f:
91:fd:55:4b:95:7e:45:fb:56:1a:ca:84:69:a9:31:
60:55:3f:ad:b3:21:21:da:71:86:0b:13:ca:f2:bc:
0e:d4:37:7d:a4:b6:d1:00:b1:13:30:61:66:de:f2:
61:60:16:17:84:d8:9f:5c:53:70:7b:0f:cb:db:b3:
90:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C9:3F:60:56:97:25:5F:5A:86:09:60:D9:8C:BB:74:CA:5D:21:7D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/G8k_YFaXJV9ahglg2Yy7dMpdIX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:34:62:ab:50:fb:5f:b1:f4:af:34:c3:02:9f:24:ed:3d:6b:
7a:4a:e6:a2:ca:fa:c5:30:14:0b:a8:f3:2a:17:ad:0b:f8:ec:
0f:5c:68:67:24:63:24:0a:8c:4c:09:eb:91:c3:cb:4d:ea:8e:
51:58:eb:3b:7d:e1:d4:c7:d1:2f:ef:8a:c6:c3:41:35:6f:fe:
bb:8b:b5:dc:a8:0b:f5:c7:6b:4c:7c:8f:cf:8b:a3:e0:7a:91:
2f:49:6c:ee:00:a5:96:7f:d6:c0:9f:5c:27:35:2f:03:84:61:
36:c8:87:12:1e:94:40:f8:d2:33:5c:a0:7b:fa:a0:e1:75:8f:
e9:be:a1:88:a1:60:e1:80:34:74:a6:63:26:30:cb:d9:f4:42:
a7:27:5e:c8:39:9d:d8:94:82:52:3a:82:f2:68:ac:b9:f1:4e:
e2:95:12:72:4e:6e:47:4f:d7:28:7f:30:6a:9d:a8:1e:94:06:
69:37:fa:12:6b:0b:43:13:e6:e9:a4:35:23:e1:fe:5a:f7:a3:
96:36:f6:a5:8a:58:cb:74:36:7f:fe:ad:53:3d:a9:fe:5e:9f:
20:ae:37:0c:0a:02:47:36:99:30:83:e4:17:63:8b:44:75:20:
e7:a9:1d:14:b6:25:2c:99:f9:c6:01:f4:d8:cd:1f:d7:5a:71:
b2:96:44:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:10:40 2025 by rpki-client