Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GgZfihWghMEgECDsvbbJsbjEChk.roa
File: GgZfihWghMEgECDsvbbJsbjEChk.roa (raw, json)
Hash identifier: I/C0P5S6RdoQjOvtJcNSMFRasmjCVVKaoSidHNuGhfI=
Subject key identifier: 1A:06:5F:8A:15:A0:84:C1:20:10:20:EC:BD:B6:C9:B1:B8:C4:0A:19
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF30DFB97D22E0A208BA9DAA33B0D9AEA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GgZfihWghMEgECDsvbbJsbjEChk.roa
Signing time: Tue 21 Nov 2023 18:04:21 +0000
ROA not before: Tue 21 Nov 2023 18:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:f30d:dac9/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f3:0d:fb:97:d2:2e:0a:20:8b:a9:da:a3:3b:0d:9a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 18:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a065f8a15a084c1201020ecbdb6c9b1b8c40a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5c:72:57:ab:6b:49:33:5f:f9:44:65:14:65:
e2:8f:e0:fe:ed:eb:e8:93:2d:7d:e0:a1:5d:7d:39:
75:89:27:cd:5b:f4:92:93:5a:fe:2d:6d:34:d4:1c:
d4:8f:3b:88:fd:71:4d:52:bf:e0:02:36:a7:3b:19:
9a:8e:bc:84:93:fc:6f:44:23:7e:a4:20:2d:85:d3:
f9:f7:f8:e0:81:d0:e4:1f:76:55:f8:a2:37:95:35:
2a:4c:fd:ed:30:27:92:6b:a6:cd:5a:84:c7:63:38:
d7:4a:ac:05:ac:43:a8:43:1d:14:76:e0:a3:d0:94:
8b:1e:02:35:48:69:77:3f:f7:d3:99:77:bd:3f:a4:
4d:6f:7e:fd:20:a8:2c:ce:c4:f9:f4:9a:1b:7c:b4:
64:e4:f6:35:b4:40:78:1a:8b:6c:0b:b8:e5:eb:40:
21:ae:88:98:eb:79:74:b0:fa:d5:c2:0e:95:ff:3e:
bb:51:7b:f1:72:0c:be:d6:a6:7c:91:ce:67:77:3d:
53:c6:09:62:b1:65:e4:84:79:2a:64:63:36:69:5d:
92:25:b6:04:bf:ff:5e:fb:bf:3e:79:80:c3:12:84:
73:cd:66:3b:ce:30:86:0a:c1:01:65:89:73:92:0f:
11:f8:4c:6c:fa:08:8e:1a:09:ba:ab:09:b1:f4:90:
b5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:06:5F:8A:15:A0:84:C1:20:10:20:EC:BD:B6:C9:B1:B8:C4:0A:19
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GgZfihWghMEgECDsvbbJsbjEChk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:e9:a9:35:d3:c5:4e:d8:4f:da:46:05:03:c0:86:e2:4a:b7:
50:9c:fa:5c:f6:43:49:ae:05:59:b2:e3:f4:fd:73:7a:99:04:
d6:c9:ba:9b:d0:68:c0:86:33:e7:83:26:62:ba:1f:ed:57:9c:
9f:bb:61:08:1f:03:c0:6c:ca:80:26:7e:4c:05:21:5a:d7:70:
7c:f8:c9:07:14:f1:8b:ee:e0:14:25:f8:7c:9c:d9:af:d6:d2:
b9:b0:9e:70:f3:9b:ae:65:9b:aa:0d:49:cc:64:83:12:d6:59:
48:b7:9c:97:8b:7c:9b:16:69:7a:da:f4:60:c2:7d:5b:26:86:
e5:d6:e4:c5:cb:62:da:4d:ab:9b:e0:69:1e:4d:d5:b3:c7:0c:
25:31:d2:34:79:fc:07:96:67:53:e0:a8:f3:2c:e4:51:d8:63:
f6:e8:46:a4:30:98:51:56:e9:f9:bc:44:b0:44:d0:51:52:b5:
a1:84:69:61:6f:80:78:49:d5:53:fc:bc:14:a0:92:6c:20:aa:
b3:e7:84:57:68:df:65:31:8d:45:3e:b7:94:0e:f3:80:60:dd:
40:63:40:01:63:6f:4b:73:40:a2:a6:98:21:6c:92:74:9a:f4:
d4:03:3c:63:81:d4:f0:8b:4d:dc:ee:12:aa:ac:97:6b:3d:8b:
82:dc:84:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:38:56 2025 by rpki-client