Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6KW15QhjszNMwZQOr6kmBtxfoEg.roa
File: 6KW15QhjszNMwZQOr6kmBtxfoEg.roa (raw, json)
Hash identifier: i4q7wpQaV9StSjeHNI/42O9VQZLzCCRURIyo9m7yUrA=
Subject key identifier: E8:A5:B5:E5:08:63:B3:33:4C:C1:94:0E:AF:A9:26:06:DC:5F:A0:48
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF60F05E0E94EA0FDD592B975C84433E2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6KW15QhjszNMwZQOr6kmBtxfoEg.roa
Signing time: Wed 22 Nov 2023 08:04:21 +0000
ROA not before: Wed 22 Nov 2023 08:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:f60f:1db/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:0f:05:e0:e9:4e:a0:fd:d5:92:b9:75:c8:44:33:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 08:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8a5b5e50863b3334cc1940eafa92606dc5fa048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:20:6f:fa:f4:8e:35:6b:f8:9c:c4:46:cd:f0:
b5:9d:d9:d8:47:8b:95:5b:9f:f2:39:15:3f:85:80:
e6:99:3e:b8:9b:53:3f:95:5f:34:b8:0d:cc:a0:8b:
9d:c3:39:76:5c:c7:07:8c:b1:49:0a:93:78:72:fb:
57:db:ef:f4:30:d6:94:44:b7:b9:83:7b:ad:aa:2d:
20:94:25:4e:84:0e:e6:48:f6:ac:9e:90:a8:7b:c5:
43:51:7e:73:da:df:d2:75:c6:48:c6:87:b2:d4:a9:
32:8b:b7:16:d8:06:35:20:63:df:b2:18:43:d0:9f:
e7:69:c1:11:f1:be:81:9e:e3:f5:f4:d2:6a:7e:9d:
f3:db:6a:9b:71:38:1c:67:1a:90:18:8e:b1:79:89:
b8:89:c4:60:8f:5a:72:9c:a8:f7:68:9f:30:f9:43:
98:87:ea:e3:3a:ee:f4:2b:8d:71:6a:75:02:88:05:
60:fc:8c:6a:21:40:c1:7c:96:1a:ac:01:98:fb:6c:
23:be:05:7d:13:af:e7:51:4e:a4:a7:eb:49:9c:59:
a3:53:25:5f:b2:65:53:11:d6:4b:57:0e:01:56:2a:
e1:db:2b:74:df:89:06:6e:81:90:10:88:82:2b:f9:
cd:c1:b4:e9:2f:0c:00:d7:98:d1:f6:32:f5:0a:57:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A5:B5:E5:08:63:B3:33:4C:C1:94:0E:AF:A9:26:06:DC:5F:A0:48
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6KW15QhjszNMwZQOr6kmBtxfoEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:fa:66:72:4c:5a:39:63:64:de:f0:7b:2c:f5:78:9d:96:fb:
cc:f2:66:02:b0:c8:68:6d:41:07:1b:24:6f:94:a1:6a:1d:f2:
fd:5d:53:c0:74:ef:5b:c5:9d:47:2d:d9:8f:40:e0:b7:b0:f9:
6d:96:9d:e2:eb:72:bc:c7:d2:65:ad:6b:07:88:6c:6a:a5:bd:
d8:32:9a:73:0d:95:e7:12:29:b0:94:69:04:26:1d:15:45:fe:
ea:cc:4d:5d:c1:fc:7e:3b:49:dc:03:76:3f:2b:69:a4:10:4a:
2b:25:05:c1:6c:8b:17:2d:0c:c9:f5:99:bc:6e:28:c1:2b:3e:
1b:3a:36:7b:6c:e7:a0:57:8f:e0:80:51:28:c7:d5:4e:89:96:
a5:41:81:1d:52:1c:ea:4a:db:ae:b8:dc:9f:c3:cf:13:3e:37:
6d:10:d9:75:c6:29:70:da:f1:f1:54:e2:09:20:32:96:10:8d:
f5:bc:af:d6:c8:7a:ac:d5:43:35:e5:dc:a8:d8:b0:8e:71:e8:
59:19:54:8f:6d:3c:b1:be:49:d1:1e:8f:c1:87:53:b1:16:ec:
84:5f:78:fa:7c:1b:24:ac:f4:71:3d:0e:82:58:ff:14:0d:6e:
6e:00:2d:63:3d:03:1e:2d:b3:37:9b:51:29:dd:d8:cc:39:4d:
d3:30:f6:93
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYv2DwXg6U6g/dWSuXXIRDPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTIyMDgwNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGE1YjVlNTA4NjNiMzMzNGNjMTk0MGVhZmE5MjYwNmRjNWZhMDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSBv+vSONWv4nMRGzfC1ndnYR4uV
W5/yORU/hYDmmT64m1M/lV80uA3MoIudwzl2XMcHjLFJCpN4cvtX2+/0MNaURLe5
g3utqi0glCVOhA7mSPasnpCoe8VDUX5z2t/SdcZIxoey1Kkyi7cW2AY1IGPfshhD
0J/nacER8b6BnuP19NJqfp3z22qbcTgcZxqQGI6xeYm4icRgj1pynKj3aJ8w+UOY
h+rjOu70K41xanUCiAVg/IxqIUDBfJYarAGY+2wjvgV9E6/nUU6kp+tJnFmjUyVf
smVTEdZLVw4BVirh2yt034kGboGQEIiCK/nNwbTpLwwA15jR9jL1ClcC/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOilteUIY7MzTMGUDq+pJgbcX6BIMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNktXMTVRaGpzek5Nd1pRT3I2a21CdHhmb0VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADf6ZnJMWjljZN7weyz1
eJ2W+8zyZgKwyGhtQQcbJG+UoWod8v1dU8B071vFnUct2Y9A4Lew+W2WneLrcrzH
0mWtaweIbGqlvdgymnMNlecSKbCUaQQmHRVF/urMTV3B/H47SdwDdj8raaQQSisl
BcFsixctDMn1mbxuKMErPhs6Nnts56BXj+CAUSjH1U6JlqVBgR1SHOpK26643J/D
zxM+N20Q2XXGKXDa8fFU4gkgMpYQjfW8r9bIeqzVQzXl3KjYsI5x6FkZVI9tPLG+
SdEej8GHU7EW7IRfePp8GySs9HE9DoJY/xQNbm4ALWM9Ax4tszebUSnd2Mw5TdMw
9pM=
-----END CERTIFICATE-----
Generated at Thu May 15 15:20:56 2025 by rpki-client