Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Gox2lk_78Rk7Q7_Lz5ZuRb3qbmU.roa
File: Gox2lk_78Rk7Q7_Lz5ZuRb3qbmU.roa (raw, json)
Hash identifier: /LRenKVKqv6bbdVrFXP+nirB6fNJlDnxySY7cHpvcGk=
Subject key identifier: 1A:8C:76:96:4F:FB:F1:19:3B:43:BF:CB:CF:96:6E:45:BD:EA:6E:65
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C393922921AFDE48D38C2B9624725E30E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Gox2lk_78Rk7Q7_Lz5ZuRb3qbmU.roa
Signing time: Tue 05 Dec 2023 09:04:54 +0000
ROA not before: Tue 05 Dec 2023 09:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:3938:80cf/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:39:22:92:1a:fd:e4:8d:38:c2:b9:62:47:25:e3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 09:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a8c76964ffbf1193b43bfcbcf966e45bdea6e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:65:47:65:b8:9d:7c:ca:33:05:9e:da:3a:2c:
5a:65:66:69:e7:4f:fc:9f:36:d3:77:6f:d0:43:75:
2d:6e:f3:3b:42:16:cc:ba:18:aa:53:9a:1a:53:19:
a1:36:bf:7a:12:74:ca:ef:56:87:f5:3c:0e:ea:aa:
c2:7e:22:d5:be:50:99:ee:d9:10:6b:32:d6:a7:cc:
63:96:58:9d:ac:f7:50:7e:0b:4a:df:35:23:3b:59:
a2:3b:e5:b3:dc:5f:ff:84:5c:1a:cd:60:33:25:81:
92:e6:ac:11:e1:74:a1:38:87:c8:ff:0a:ea:9a:a5:
7e:12:2c:55:2e:02:73:5c:84:4d:a8:c3:b8:08:45:
f8:90:d4:73:93:0e:73:ac:66:1d:70:a8:49:67:ba:
fe:53:f1:b8:6d:0c:92:ef:34:88:ae:79:6e:38:e1:
f1:a1:d7:63:c2:d5:d7:fb:b8:82:1a:48:8c:2d:a3:
a2:9e:7e:c3:6b:39:7a:74:03:c2:45:19:ce:a9:02:
61:c4:db:9c:1a:e9:ac:c6:f3:fe:cd:8a:16:8b:61:
27:a0:e5:d9:c8:b9:bd:66:24:c2:d2:46:de:f0:18:
f3:06:61:00:4a:58:b7:e9:52:e7:13:87:ad:45:9f:
fe:f8:25:59:86:a1:01:c0:6f:27:c3:04:08:1c:c3:
8c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8C:76:96:4F:FB:F1:19:3B:43:BF:CB:CF:96:6E:45:BD:EA:6E:65
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Gox2lk_78Rk7Q7_Lz5ZuRb3qbmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:f9:87:5a:24:27:76:b2:64:7f:79:4e:90:34:13:18:fb:29:
d9:b5:b5:89:e7:f2:c1:ba:a0:17:b1:62:45:1e:ca:3f:66:9f:
7b:fc:04:a7:2d:e9:15:62:a3:0d:9a:df:e6:34:93:a3:47:49:
3b:a3:17:d0:e0:41:cf:c8:08:93:6a:f0:c1:68:8b:36:39:25:
2b:f2:f2:98:92:37:de:89:1b:7c:dc:b7:5f:c0:8e:6a:a0:65:
56:91:4f:73:0b:83:5c:3e:8d:d2:c2:36:86:ae:ba:15:e0:a2:
b0:60:b7:cf:d5:8b:f5:14:23:bb:88:84:09:24:74:3d:e7:dc:
6e:c8:c7:fb:e9:29:3c:65:cf:16:78:8f:b2:14:a7:ca:b3:ac:
e3:a7:d1:f4:10:1c:8a:21:e8:41:8c:58:2f:e0:31:f9:f0:4b:
73:c8:cd:b9:bf:da:30:2a:41:a8:5d:da:d1:82:bc:83:59:3f:
12:e5:c6:df:39:ca:de:38:a7:b3:4d:91:a8:94:68:23:85:70:
c6:0c:03:d9:e9:b8:b6:69:b5:c7:1f:cf:d3:e7:b4:27:72:5c:
67:98:dd:f1:48:f4:18:96:3c:1c:77:15:dc:14:37:09:cb:db:
2a:a8:82:5c:57:d5:f7:e4:50:22:d0:4e:bf:c4:ad:9b:94:d8:
cc:48:1e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 04:39:24 2025 by rpki-client