Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6UfvAuQVeZIxrUvwvk1g4Irnxb0.roa
File: 6UfvAuQVeZIxrUvwvk1g4Irnxb0.roa (raw, json)
Hash identifier: bJsT0M1dXrHH8GiiSrDgvCk3aM3OzJAIxgc/njESFW0=
Subject key identifier: E9:47:EF:02:E4:15:79:92:31:AD:4B:F0:BE:4D:60:E0:8A:E7:C5:BD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C371B8D139F7824F39601D473D81B6F83
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6UfvAuQVeZIxrUvwvk1g4Irnxb0.roa
Signing time: Mon 04 Dec 2023 23:13:21 +0000
ROA not before: Mon 04 Dec 2023 23:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:37:1b:8d:13:9f:78:24:f3:96:01:d4:73:d8:1b:6f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 23:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e947ef02e415799231ad4bf0be4d60e08ae7c5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:a2:ca:b9:23:a6:85:6f:0a:3b:d5:31:96:
8f:04:8c:0b:22:67:0d:79:0b:53:20:4a:e8:cc:cc:
50:28:98:fa:fb:1f:62:c2:c3:26:53:1f:d2:67:ba:
24:b8:59:7a:f0:13:bc:73:5b:4e:03:3c:12:03:74:
ca:b0:07:e0:88:98:2d:3c:23:22:60:db:a1:df:86:
a5:c5:8a:c9:83:39:69:bb:af:32:8e:a7:fa:bc:bf:
50:d0:40:35:0f:bf:73:80:dc:52:36:c1:9f:19:77:
9f:ff:e9:6b:91:8b:c2:26:e2:e4:d1:b9:30:83:9f:
80:e0:24:75:81:b7:1d:a5:25:ea:37:0f:7d:8b:f7:
b8:4c:11:d2:91:40:aa:aa:80:5b:d9:62:b7:72:af:
d7:8e:8d:62:2e:bf:39:d2:68:a0:67:3b:36:a6:40:
c0:42:89:5b:a1:be:dd:75:4a:0b:29:cf:19:cc:f4:
41:d9:53:21:92:41:a1:40:70:3d:d9:58:0a:1f:90:
3d:f0:bc:fe:7a:65:03:43:0f:fe:b8:1b:bc:df:74:
22:7b:a4:06:a6:fa:71:7f:dd:9b:c1:b8:3f:2d:35:
f8:f9:6d:51:02:6e:5f:00:d5:60:2b:ab:69:14:fb:
c6:01:8d:37:ce:8e:3e:b4:d4:6e:a5:4f:f4:91:e4:
b2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:47:EF:02:E4:15:79:92:31:AD:4B:F0:BE:4D:60:E0:8A:E7:C5:BD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6UfvAuQVeZIxrUvwvk1g4Irnxb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:dc:bc:7e:cf:ef:48:19:dd:58:b6:47:22:c2:9e:a0:35:0a:
60:95:7a:67:a8:96:21:1a:e2:51:12:6f:ec:fa:fa:58:6f:51:
a5:cf:43:9b:06:89:9b:f3:1e:79:3b:5f:d0:cf:7b:14:35:0b:
93:0b:6c:09:b5:10:3d:62:18:a0:a6:2c:ac:e9:1f:07:d1:a9:
87:bc:55:4e:4e:da:2c:7a:4f:93:ec:70:8c:e2:40:25:97:46:
38:92:56:4b:47:05:f9:44:23:7c:e8:88:b3:81:7b:19:9a:bb:
4e:48:cc:ff:89:96:bf:cc:95:bd:7b:79:cc:de:1d:ba:a5:85:
3e:a3:8c:d4:5b:1a:db:eb:8e:e9:3b:72:13:56:8f:47:6c:34:
5e:c4:dc:da:b6:2c:b0:2f:f7:69:90:a6:ba:d4:3f:05:8d:f4:
6e:30:00:c9:5f:bd:87:bf:2e:9f:22:ed:aa:00:a8:9e:dd:66:
3e:33:de:01:96:22:de:b5:8f:54:73:60:26:f7:2e:16:c5:86:
f7:20:d4:49:a4:39:35:87:1d:16:ab:8d:56:f2:b2:38:58:72:
2e:58:32:6a:72:16:ae:32:c9:c6:83:16:7b:96:d6:69:a6:c8:
1f:31:f9:52:c1:99:7b:9b:6c:9b:bf:41:92:97:01:46:b6:b9:
4b:69:af:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:07:23 2025 by rpki-client