Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gp9d_c0NM3XuRFuH-1xPyZgZBD8.roa
File: gp9d_c0NM3XuRFuH-1xPyZgZBD8.roa (raw, json)
Hash identifier: GG1ei+WwmLAPDze6/6pC28zX2Twbfwe9pbgtWaeklrY=
Subject key identifier: 82:9F:5D:FD:CD:0D:33:75:EE:44:5B:87:FB:5C:4F:C9:98:19:04:3F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0C5FE9DA2DFCAAADFC607F82231E5779
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gp9d_c0NM3XuRFuH-1xPyZgZBD8.roa
Signing time: Sun 26 Nov 2023 16:04:21 +0000
ROA not before: Sun 26 Nov 2023 16:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:c5f:bf77/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0c:5f:e9:da:2d:fc:aa:ad:fc:60:7f:82:23:1e:57:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 16:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=829f5dfdcd0d3375ee445b87fb5c4fc99819043f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6e:16:95:80:bc:e7:d2:a4:44:47:9c:67:fb:
99:64:52:e5:6e:93:20:50:6d:fa:36:ac:fe:1c:ad:
b3:bd:29:a0:c8:a5:ac:1a:15:87:36:b5:f5:84:e0:
9f:30:f2:ea:19:cf:6a:2e:71:de:06:1f:67:3a:14:
c8:e9:ad:82:0c:2a:61:e7:86:86:18:c4:e1:7e:b9:
d1:f6:c2:d5:77:15:71:4f:a0:66:4d:28:51:83:7e:
56:d4:75:05:34:c0:37:c7:c4:89:af:65:d8:23:ed:
2c:5c:e4:42:df:12:5a:dc:c9:ec:e0:d6:5d:a0:e0:
43:dc:f0:76:17:63:7f:c3:70:1b:56:57:14:f3:2f:
a3:44:20:46:a0:88:02:27:1c:d9:95:53:78:c1:38:
9d:44:c9:6a:a8:0f:18:76:83:93:12:8d:a8:88:d2:
41:b6:93:fa:ed:f0:00:53:a8:bd:92:af:c5:c5:a1:
f2:61:37:2d:6e:2f:d8:f1:af:4f:e8:b7:43:0d:46:
01:37:2c:4c:e4:3d:a8:d4:1b:3e:43:9c:0d:85:e7:
37:7f:09:05:70:7c:6d:d7:5e:4b:06:2a:ef:0d:f2:
9f:88:de:59:75:f9:80:7e:86:3e:c8:0e:00:08:08:
15:a6:38:3a:46:f8:5f:d3:fb:2e:83:fe:ef:7c:d6:
61:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9F:5D:FD:CD:0D:33:75:EE:44:5B:87:FB:5C:4F:C9:98:19:04:3F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gp9d_c0NM3XuRFuH-1xPyZgZBD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:d3:ea:bb:00:42:f6:5b:62:86:e1:2a:59:65:d2:9a:27:4b:
9d:af:95:a9:81:70:ad:7e:d3:9d:1a:86:72:d1:97:12:27:3d:
29:ee:f1:bb:29:4b:3b:a2:07:7f:93:65:10:5b:f2:01:29:6d:
38:2f:10:cb:83:01:00:cd:95:20:01:69:3f:34:65:aa:99:73:
5e:ed:63:6f:89:7e:2a:10:bf:1d:e7:b0:b2:11:0d:18:af:0d:
c2:f0:0d:f3:15:a1:b5:79:8e:a8:24:ae:f8:9e:d1:05:d9:30:
c5:05:52:a4:31:1f:c2:58:6a:09:47:65:2c:35:4b:25:99:a1:
23:20:2c:fe:bc:d9:1d:ee:62:88:f1:fc:ab:88:b5:bd:e8:be:
e5:78:bf:66:63:41:6e:06:be:bf:30:be:29:5d:0f:1d:73:b0:
6a:09:34:a4:7d:2a:12:de:1f:53:e6:ab:af:ca:ab:c4:af:d8:
36:25:84:ab:56:5d:9f:48:94:36:74:9b:f4:f7:a3:78:10:8b:
23:4d:79:1d:fb:10:fb:5a:00:87:59:1c:b2:4d:7d:7e:e5:26:
4e:57:27:4b:ec:7c:d3:f2:74:57:71:96:c8:c5:96:f1:52:d2:
aa:07:2f:e7:db:8e:d2:8c:9b:26:a1:2e:97:1b:98:1a:18:6f:
f3:91:cc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:05:53 2025 by rpki-client