Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gNC_Edls_qyXyALS2QUzE7d317I.roa
File: gNC_Edls_qyXyALS2QUzE7d317I.roa (raw, json)
Hash identifier: aIL0P2pXHTZ1McA7Yq032WbJNcnbyPFmaXwA4sN9Lss=
Subject key identifier: 80:D0:BF:11:D9:6C:FE:AC:97:C8:02:D2:D9:05:33:13:B7:77:D7:B2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC9A5A18C32A7CC5ABD8283B94C35FD0F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gNC_Edls_qyXyALS2QUzE7d317I.roa
Signing time: Mon 13 Nov 2023 17:05:57 +0000
ROA not before: Mon 13 Nov 2023 17:05:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:c9a5:393e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:a5:a1:8c:32:a7:cc:5a:bd:82:83:b9:4c:35:fd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 13 17:05:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80d0bf11d96cfeac97c802d2d9053313b777d7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:de:41:55:ef:1c:ce:87:0b:c6:c6:47:8e:
4b:a3:34:41:51:eb:5b:a8:43:3d:c1:f1:fd:23:6f:
27:44:51:93:b7:e3:b2:46:71:8b:33:5f:6a:c8:40:
29:6d:c3:c6:57:10:c4:a3:93:be:93:ef:4d:6e:34:
18:61:74:f8:52:42:36:ee:29:5c:9f:30:2f:1d:a0:
50:e6:ce:85:4d:76:99:c3:d5:0d:56:db:53:de:e1:
0d:b3:20:23:e9:9e:29:3c:02:08:bc:1e:6a:fe:71:
4c:65:fd:01:4f:a4:f2:bc:a5:9c:6e:63:63:0d:46:
2d:82:08:62:a2:95:e7:10:83:34:2d:d4:3d:8f:8c:
18:92:9f:0a:d9:c1:1c:23:17:02:47:11:e2:62:60:
30:5d:85:3e:a5:32:a3:27:35:cd:07:a6:7e:61:89:
50:97:f5:3f:19:bb:c7:a9:23:2a:39:d4:dd:c9:c2:
dd:15:46:33:23:a1:2f:9c:0d:5e:31:62:7f:96:5c:
b7:5e:af:d8:e4:9d:8d:f0:25:11:a0:a8:6d:da:9c:
f8:6d:49:36:28:3e:a2:45:5a:81:c2:56:07:53:db:
15:6f:6e:6d:f0:78:d3:4b:dd:2c:02:3e:92:54:7c:
a3:93:2c:52:f5:4f:da:f7:81:6a:ad:1a:3d:b0:0d:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D0:BF:11:D9:6C:FE:AC:97:C8:02:D2:D9:05:33:13:B7:77:D7:B2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gNC_Edls_qyXyALS2QUzE7d317I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:76:ff:4f:44:73:d1:80:19:e4:ec:65:14:a2:a2:5f:40:a4:
a9:4c:ac:9c:fb:b1:59:19:fe:74:16:2f:01:4c:b3:cf:c7:05:
f1:ab:b0:7e:44:bd:6d:07:a2:e3:9f:a4:f3:3f:ac:8f:58:78:
90:a9:6a:1f:84:01:b0:96:19:11:8f:d6:0f:09:3d:67:aa:90:
f3:03:11:80:d7:12:5e:62:76:ff:a7:9b:8c:90:4f:56:a3:16:
90:33:65:59:e1:3a:b9:ee:fb:ee:be:2c:da:63:af:7e:de:b5:
7a:84:f5:0d:4a:05:ba:91:bd:e9:98:35:b4:70:38:e8:e9:d5:
3e:83:c9:fc:53:65:54:fa:2d:8a:d3:fd:f2:fd:88:e9:4a:7b:
7c:e5:6f:ac:f8:d5:d3:fe:df:0b:92:1d:03:18:92:5b:42:c6:
25:6c:23:21:2f:a9:ca:ee:5d:27:90:d9:5d:63:60:83:82:d2:
8e:e3:4b:7e:70:77:db:33:84:7f:32:e6:aa:7e:c0:4b:e8:c3:
2d:b2:4f:5e:5a:20:7d:f3:3c:1a:36:56:2c:a1:10:7f:f0:bf:
2f:97:ab:80:08:4b:52:84:84:ca:0b:d2:e9:48:6f:14:f1:4e:
41:94:ff:38:f1:ea:1a:29:11:46:e5:a7:c6:a7:f3:a7:ef:45:
9d:b3:04:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:55:36 2025 by rpki-client