Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gYYpN_gkahyrGn1ELZl0MsYjjcQ.roa
File: gYYpN_gkahyrGn1ELZl0MsYjjcQ.roa (raw, json)
Hash identifier: Zc1MKIGx3DtxlyEKZLFo9L7ROAzPCHxDbCOIolBxczA=
Subject key identifier: 81:86:29:37:F8:24:6A:1C:AB:1A:7D:44:2D:99:74:32:C6:23:8D:C4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9EF19C66100645AAB2449F21D7BCF7D7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gYYpN_gkahyrGn1ELZl0MsYjjcQ.roa
Signing time: Sun 05 Nov 2023 10:05:15 +0000
ROA not before: Sun 05 Nov 2023 10:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:9ef1:32a/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9e:f1:9c:66:10:06:45:aa:b2:44:9f:21:d7:bc:f7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 10:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81862937f8246a1cab1a7d442d997432c6238dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:e1:01:fe:43:16:02:07:74:cf:d5:9c:e5:
d7:01:a3:64:9c:11:d1:10:0a:a7:d5:03:e7:0a:a6:
d7:8e:58:69:18:91:79:89:a1:9d:a5:9e:b1:11:2f:
71:fa:ff:2c:97:2a:f0:f4:80:15:fb:0c:17:30:6c:
35:fb:e3:7e:11:a5:5c:b0:e0:a5:e3:2d:85:df:f8:
25:08:6d:fb:f1:0e:3b:76:04:96:d2:5b:5a:5e:2f:
6c:24:f3:01:13:93:a1:4e:f6:b9:ff:eb:6d:96:da:
56:37:64:ff:12:6e:75:1a:54:59:56:e0:ab:2c:be:
7b:a7:3b:e1:fc:95:1a:c9:a0:c1:c7:ba:f5:f8:46:
d5:be:5e:25:60:2f:29:94:ad:c9:a5:4c:ab:32:30:
89:db:3a:62:49:46:7c:6c:3a:18:04:35:1f:49:00:
f0:3d:d3:46:ee:5e:b3:08:aa:f7:21:85:5c:c4:b8:
f9:40:07:98:1e:3e:5c:06:8a:1b:96:bc:b6:01:e7:
bb:d1:67:08:89:1e:15:20:e3:b3:c1:57:d9:d3:6f:
c9:cb:1b:5a:eb:82:5b:41:cc:80:65:96:06:c8:16:
c8:70:a3:4d:6b:a5:2b:56:d2:d4:83:2f:6a:f9:c5:
c4:9a:8a:8d:d3:36:31:6d:ec:9c:d4:95:35:21:c0:
fc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:86:29:37:F8:24:6A:1C:AB:1A:7D:44:2D:99:74:32:C6:23:8D:C4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gYYpN_gkahyrGn1ELZl0MsYjjcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b6:47:e7:2f:44:8a:ef:24:5f:6f:db:83:88:95:47:85:c2:ab:
4c:49:17:66:f9:32:58:17:42:ab:9c:e1:c0:8f:75:bc:6e:6f:
b9:f9:59:fa:5a:59:49:5e:db:77:c5:94:7d:67:b4:e5:78:3d:
09:d7:8f:16:8b:9b:10:70:7b:50:9f:d3:14:c1:51:03:ba:5d:
71:6f:85:10:0b:97:2d:8b:2c:d1:55:b7:a4:12:bf:73:9b:78:
57:37:b4:b5:45:3b:b6:49:d0:b6:ba:a2:a0:1a:ce:e0:78:7d:
cf:52:c1:7e:28:27:b3:1d:47:b2:d3:af:2a:fa:2d:c7:52:00:
b3:93:97:41:80:b7:ce:1b:72:1c:8e:bc:51:30:d7:fa:30:9c:
f5:c5:aa:0e:b9:30:bf:9c:91:7e:4a:68:38:92:61:d0:77:53:
2f:89:74:69:e6:dd:98:45:ed:63:7f:06:09:38:f9:4a:0e:42:
aa:e7:b0:f1:b5:50:0f:60:0f:00:17:73:e8:c4:e5:fa:71:ef:
1a:aa:89:69:f7:9c:33:8c:07:58:ab:5e:98:d0:67:ee:a8:e7:
cf:e1:0c:57:dc:05:3c:bf:1e:33:31:d6:01:bd:48:c2:a3:80:
c7:58:6a:09:45:3d:54:58:65:88:e7:0e:08:d6:b1:af:8c:5a:
b8:aa:b1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:33:56 2025 by rpki-client