Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cGaCufT8HtU6NsX4_7RhMSs3wPk.roa
File: cGaCufT8HtU6NsX4_7RhMSs3wPk.roa (raw, json)
Hash identifier: lYTKt3FRW9VYs6BshW3j7uxx1h63m1S3V8EBKCrG+bY=
Subject key identifier: 70:66:82:B9:F4:FC:1E:D5:3A:36:C5:F8:FF:B4:61:31:2B:37:C0:F9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDE757655D6A38A2CC637F7C3AA6298F0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cGaCufT8HtU6NsX4_7RhMSs3wPk.roa
Signing time: Fri 17 Nov 2023 18:05:21 +0000
ROA not before: Fri 17 Nov 2023 18:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:de75:38f1/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:de:75:76:55:d6:a3:8a:2c:c6:37:f7:c3:aa:62:98:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 18:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=706682b9f4fc1ed53a36c5f8ffb461312b37c0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:a2:e3:eb:92:12:f7:14:87:5d:dc:47:fe:
19:6d:ff:eb:67:90:68:27:03:ce:3a:e5:ac:f7:dd:
29:4d:b5:9f:02:e7:69:e9:a1:cc:3e:bf:8f:9d:61:
e1:f0:50:60:f3:d2:56:b5:c3:5a:27:0a:86:d6:5b:
11:ec:38:e1:5e:44:03:95:3f:0e:da:fc:a1:66:53:
e2:36:3f:36:40:1e:9e:09:6e:37:51:50:1b:d6:07:
a6:e1:66:a8:ea:6b:dc:e4:d7:e5:21:74:07:2a:76:
74:6d:23:9e:81:b7:b0:05:27:ae:82:ff:90:c1:40:
5d:c0:65:d1:af:85:cd:b7:4e:3f:d2:54:0a:f3:c7:
b8:22:57:b6:30:9c:05:15:f9:6b:42:77:f6:e5:8e:
de:4e:ae:b4:04:03:5c:ec:9d:99:e0:b6:28:83:21:
07:25:a0:20:8b:23:fd:8c:50:bc:d5:40:2d:60:86:
fa:1b:8a:97:c9:3d:94:4f:2f:a9:00:f7:dc:ff:0d:
21:f3:02:3e:0a:4e:51:45:be:a1:b6:72:0f:8d:6f:
9f:4f:f9:f3:31:11:7c:0f:af:2e:85:66:78:3e:3f:
19:f5:e0:f3:11:cb:6a:a1:13:06:90:b2:66:01:0a:
ec:6e:c5:34:42:fe:17:78:30:cb:fc:55:ea:da:9a:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:66:82:B9:F4:FC:1E:D5:3A:36:C5:F8:FF:B4:61:31:2B:37:C0:F9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cGaCufT8HtU6NsX4_7RhMSs3wPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b6:95:e6:32:d5:8e:24:89:ec:1e:a7:69:ef:1a:8a:ee:bc:eb:
02:ff:12:e0:8c:9f:31:fc:2a:f6:d6:58:ea:9a:90:df:a6:3a:
60:0c:0a:20:c9:1f:ae:7a:6e:55:1d:d5:33:2c:4d:04:42:3a:
07:83:e8:75:61:95:7d:90:e2:24:32:d1:8d:46:6f:4c:9d:92:
aa:1a:6f:aa:46:6a:b1:38:01:fa:90:43:1a:c7:9d:37:22:4a:
ae:c4:f4:ae:45:c1:84:d2:13:10:d3:62:72:1b:e6:83:70:3f:
93:aa:d2:2e:18:8f:d0:6d:e2:9f:72:b1:05:7a:d3:a5:e8:92:
57:cb:ec:be:ac:c3:fe:86:62:d3:83:1f:88:fe:e4:57:d7:8a:
34:9f:b4:36:66:01:8b:91:07:6a:66:f3:e9:fd:93:26:32:69:
a3:1c:fd:6a:02:e9:d1:d5:b9:d2:5d:9c:81:1c:89:6a:9a:02:
84:39:67:b8:57:17:e3:af:1a:fe:b4:00:e7:d8:14:d5:d3:a8:
35:e1:ff:75:d0:46:9f:3c:57:29:22:8f:4d:2f:73:12:4a:fd:
27:0a:5b:07:53:21:c8:35:41:3f:a5:00:44:3c:af:78:8d:d9:
b0:a5:9c:41:ba:89:7d:98:44:b1:15:c4:f2:d2:1a:6f:cb:b5:
66:f5:44:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:11:28 2025 by rpki-client