Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6F-Zd2vNEtrCKjhD3b7vKdGsH94.roa
File: 6F-Zd2vNEtrCKjhD3b7vKdGsH94.roa (raw, json)
Hash identifier: YMjTd9eairOnsbEIF44oZnh/ieIYqYNhfr7DItgNe7I=
Subject key identifier: E8:5F:99:77:6B:CD:12:DA:C2:2A:38:43:DD:BE:EF:29:D1:AC:1F:DE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5CDF3D2346CA65EBC7D5E60A669FC31A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6F-Zd2vNEtrCKjhD3b7vKdGsH94.roa
Signing time: Mon 23 Oct 2023 14:10:15 +0000
ROA not before: Mon 23 Oct 2023 14:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:df:3d:23:46:ca:65:eb:c7:d5:e6:0a:66:9f:c3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 14:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e85f99776bcd12dac22a3843ddbeef29d1ac1fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:9f:6a:17:64:35:24:6c:a2:7f:b1:7a:11:
33:fe:3b:27:7c:23:2e:14:ad:a4:d7:16:9f:3c:4c:
e5:8f:b0:6f:c2:b9:2d:a0:9b:d2:b5:15:ad:50:22:
df:02:c3:38:aa:d3:a2:1c:22:54:9c:67:dd:d1:9a:
38:26:d6:3b:8e:41:a3:03:37:11:8c:64:79:90:d6:
7c:95:f4:f7:f4:85:5a:c6:bf:ec:33:f6:54:10:56:
dd:18:82:9d:ba:79:17:63:f8:62:56:2d:0d:c8:c1:
5b:4a:f6:a5:6d:3e:8c:2e:83:a1:09:6d:23:03:08:
38:45:bb:af:92:18:c7:87:07:e1:27:22:72:9a:af:
bf:74:4f:39:63:49:2c:82:49:bd:10:f5:06:e3:31:
4d:ce:49:74:72:2a:2a:e4:40:aa:bc:f8:43:74:15:
f3:86:cb:73:80:85:5a:7b:80:0a:ec:79:99:70:8b:
c8:86:9e:d0:d8:2b:f3:e5:c1:ca:26:94:e3:c2:86:
4d:31:83:ac:41:78:25:d7:40:82:22:2d:21:39:43:
a2:13:e1:80:90:6d:b1:ee:b0:e4:32:0f:7b:da:48:
3e:96:4e:fb:67:45:c6:33:98:f5:c6:36:a4:3d:36:
d6:cf:14:fe:5d:cd:7e:71:58:b0:2d:13:39:67:94:
36:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5F:99:77:6B:CD:12:DA:C2:2A:38:43:DD:BE:EF:29:D1:AC:1F:DE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6F-Zd2vNEtrCKjhD3b7vKdGsH94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:19:9d:80:3a:75:57:02:72:8f:0d:80:79:6c:b1:80:e5:ce:
ba:a9:96:ac:b6:4c:37:b4:78:fc:99:b4:bd:61:52:6c:cc:08:
3e:0a:70:23:61:ec:3a:61:c5:fb:b5:27:1f:ea:9b:7d:f8:41:
80:6c:3a:2e:c0:d6:88:ef:bc:58:64:7e:b3:6b:5c:a5:f5:5f:
54:5f:d1:37:a5:c1:80:78:00:f5:de:6a:d9:8c:6d:4f:0a:82:
7f:79:b2:36:00:da:c9:92:7c:2a:8c:c9:17:52:43:7e:c2:bf:
00:d6:48:76:27:94:2d:6e:89:64:a2:69:8b:af:df:45:d2:65:
57:66:80:c5:2f:34:85:e1:ea:76:b5:b3:67:82:62:06:bc:ea:
43:82:30:be:d2:65:c6:f4:6e:b2:24:d2:1f:4d:3d:e1:bd:66:
84:fa:df:18:a5:b8:fe:f3:fd:2f:4a:e9:7b:77:47:ff:1e:99:
d4:38:10:95:71:93:be:af:a7:50:67:3f:dd:5d:91:f1:81:a2:
fd:0a:8a:95:70:c9:5f:45:37:27:15:4a:ce:a3:05:3e:be:8d:
c7:f8:36:eb:45:18:b4:87:f8:f8:85:f9:0c:35:81:37:2b:93:
22:82:1d:9e:c6:73:d8:64:68:af:ae:0f:e2:c2:14:15:69:4c:
85:d9:c8:33
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtc3z0jRspl68fV5gpmn8MaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDIzMTQxMDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODVmOTk3NzZiY2QxMmRhYzIyYTM4NDNkZGJlZWYyOWQxYWMxZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTOfahdkNSRson+xehEz/jsnfCMu
FK2k1xafPEzlj7BvwrktoJvStRWtUCLfAsM4qtOiHCJUnGfd0Zo4JtY7jkGjAzcR
jGR5kNZ8lfT39IVaxr/sM/ZUEFbdGIKdunkXY/hiVi0NyMFbSvalbT6MLoOhCW0j
Awg4RbuvkhjHhwfhJyJymq+/dE85Y0ksgkm9EPUG4zFNzkl0cioq5ECqvPhDdBXz
hstzgIVae4AK7HmZcIvIhp7Q2Cvz5cHKJpTjwoZNMYOsQXgl10CCIi0hOUOiE+GA
kG2x7rDkMg972kg+lk77Z0XGM5j1xjakPTbWzxT+Xc1+cViwLRM5Z5Q2KQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOhfmXdrzRLawio4Q92+7ynRrB/eMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNkYtWmQydk5FdHJDS2poRDNiN3ZLZEdzSDk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIAZnYA6dVcCco8NgHls
sYDlzrqplqy2TDe0ePyZtL1hUmzMCD4KcCNh7Dphxfu1Jx/qm334QYBsOi7A1ojv
vFhkfrNrXKX1X1Rf0TelwYB4APXeatmMbU8Kgn95sjYA2smSfCqMyRdSQ37CvwDW
SHYnlC1uiWSiaYuv30XSZVdmgMUvNIXh6na1s2eCYga86kOCML7SZcb0brIk0h9N
PeG9ZoT63xiluP7z/S9K6Xt3R/8emdQ4EJVxk76vp1BnP91dkfGBov0KipVwyV9F
NycVSs6jBT6+jcf4NutFGLSH+PiF+Qw1gTcrkyKCHZ7Gc9hkaK+uD+LCFBVpTIXZ
yDM=
-----END CERTIFICATE-----
Generated at Sun May 11 15:33:36 2025 by rpki-client