Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6AEgqw0nGbH9NSWr_qGE6EzkP2g.roa
File: 6AEgqw0nGbH9NSWr_qGE6EzkP2g.roa (raw, json)
Hash identifier: OodmI/vE3k0ulczVj1sOmWUWAtwQFVa/e20eISBVO9Q=
Subject key identifier: E8:01:20:AB:0D:27:19:B1:FD:35:25:AB:FE:A1:84:E8:4C:E4:3F:68
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C404DE17A64E3BB79B36206E80F8C4FA6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6AEgqw0nGbH9NSWr_qGE6EzkP2g.roa
Signing time: Wed 06 Dec 2023 18:04:54 +0000
ROA not before: Wed 06 Dec 2023 18:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:404d:62f4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:40:4d:e1:7a:64:e3:bb:79:b3:62:06:e8:0f:8c:4f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 18:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e80120ab0d2719b1fd3525abfea184e84ce43f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:2a:02:ce:e1:4c:2a:aa:db:cb:e2:34:70:
d8:31:16:77:4c:be:39:64:b3:f8:7d:b9:f8:de:f0:
65:ac:89:c2:2c:40:5a:28:22:85:bf:4a:40:ad:13:
38:25:52:41:56:2e:30:18:70:6c:73:d4:2e:7a:eb:
ff:5c:70:f5:79:c7:57:09:f9:4e:d2:21:8d:b9:07:
1d:16:ed:c3:6e:11:26:5a:5f:ef:ec:33:a0:22:d1:
bb:e4:fc:3c:87:f5:a3:5f:3e:2a:d8:f1:f6:d5:54:
ea:34:a8:ef:32:de:2c:55:87:35:02:75:cd:c4:58:
ad:a6:8b:1b:be:d8:ba:a5:22:80:b1:9b:21:5e:53:
f0:08:d6:3b:37:2b:b4:82:2e:1a:73:9f:33:eb:7a:
8e:6e:f0:d5:fa:3e:5c:89:20:33:93:1c:61:00:80:
a6:9a:86:96:fb:5e:71:5c:85:d5:dc:5a:22:81:7b:
a3:6d:73:cf:c9:d8:23:f9:fb:b5:c8:f8:03:d5:a0:
25:48:f7:7d:72:47:89:a4:3a:84:ca:7e:b2:2a:27:
fe:54:c1:10:e5:a3:59:2e:0f:66:0b:d1:89:97:f2:
67:40:f5:37:f3:5d:b1:58:c2:9f:50:e4:4a:51:4b:
3e:08:9d:e9:5b:dc:22:11:03:65:cb:be:6a:bd:d3:
b4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:01:20:AB:0D:27:19:B1:FD:35:25:AB:FE:A1:84:E8:4C:E4:3F:68
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6AEgqw0nGbH9NSWr_qGE6EzkP2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:a4:76:3e:48:3a:0b:6f:fc:0d:fa:4c:bc:82:69:f5:ad:b3:
43:83:46:d0:e1:ed:e5:60:1b:3e:1e:14:42:6a:5f:ea:1c:a1:
77:84:96:31:0a:2c:91:dd:30:c9:b9:63:26:40:88:87:1f:a1:
e4:bd:be:2b:2e:26:97:5c:fe:47:78:a7:6f:68:72:c3:4b:67:
b6:05:2c:bc:90:47:6a:5f:33:9b:f2:5c:6e:c5:4f:cd:93:4a:
55:83:c9:66:11:9f:2f:56:fe:8e:0c:9f:8b:fe:68:29:13:70:
96:45:aa:90:51:e3:6e:16:ab:08:cc:72:77:71:30:d1:0a:8b:
23:25:22:00:c1:de:11:ee:37:53:db:cf:17:7d:f0:7e:f1:79:
0a:3f:d3:4d:21:2b:45:3b:96:b6:d2:fa:70:10:13:38:f0:4a:
54:d6:c9:a3:04:22:b8:73:9b:e9:52:49:b7:fa:8c:ad:af:1a:
87:c6:a2:04:3b:4a:d7:4d:06:f3:cd:14:dc:00:4f:14:85:a2:
91:81:33:09:42:e1:57:87:c5:fe:5f:72:5d:b2:52:51:60:7f:
45:bf:bc:17:f3:be:ad:62:98:3d:4b:28:ef:25:35:f3:c1:a7:
70:df:b7:db:96:a7:45:00:b5:7e:6a:53:f1:ce:b5:91:0a:34:
f2:3f:81:df
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxATeF6ZOO7ebNiBugPjE+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA2MTgwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODAxMjBhYjBkMjcxOWIxZmQzNTI1YWJmZWExODRlODRjZTQzZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7oqAs7hTCqq28viNHDYMRZ3TL45
ZLP4fbn43vBlrInCLEBaKCKFv0pArRM4JVJBVi4wGHBsc9Queuv/XHD1ecdXCflO
0iGNuQcdFu3DbhEmWl/v7DOgItG75Pw8h/WjXz4q2PH21VTqNKjvMt4sVYc1AnXN
xFitposbvti6pSKAsZshXlPwCNY7Nyu0gi4ac58z63qObvDV+j5ciSAzkxxhAICm
moaW+15xXIXV3FoigXujbXPPydgj+fu1yPgD1aAlSPd9ckeJpDqEyn6yKif+VMEQ
5aNZLg9mC9GJl/JnQPU3812xWMKfUORKUUs+CJ3pW9wiEQNly75qvdO0BwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOgBIKsNJxmx/TUlq/6hhOhM5D9oMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNkFFZ3F3MG5HYkg5TlNXcl9xR0U2RXprUDJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALWkdj5IOgtv/A36TLyC
afWts0ODRtDh7eVgGz4eFEJqX+ocoXeEljEKLJHdMMm5YyZAiIcfoeS9visuJpdc
/kd4p29ocsNLZ7YFLLyQR2pfM5vyXG7FT82TSlWDyWYRny9W/o4Mn4v+aCkTcJZF
qpBR424WqwjMcndxMNEKiyMlIgDB3hHuN1Pbzxd98H7xeQo/000hK0U7lrbS+nAQ
EzjwSlTWyaMEIrhzm+lSSbf6jK2vGofGogQ7StdNBvPNFNwATxSFopGBMwlC4VeH
xf5fcl2yUlFgf0W/vBfzvq1imD1LKO8lNfPBp3Dft9uWp0UAtX5qU/HOtZEKNPI/
gd8=
-----END CERTIFICATE-----
Generated at Sat May 10 12:26:20 2025 by rpki-client