Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6YNdXlcQhrUmMHj89uiasUDvWcU.roa
File: 6YNdXlcQhrUmMHj89uiasUDvWcU.roa (raw, json)
Hash identifier: J2GL0QIXRUxWcaCnQDkx1nkTvig8Ibna1rhgwLby7sA=
Subject key identifier: E9:83:5D:5E:57:10:86:B5:26:30:78:FC:F6:E8:9A:B1:40:EF:59:C5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE3D4F844863587DD8224B3D0194FFF33
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6YNdXlcQhrUmMHj89uiasUDvWcU.roa
Signing time: Sat 30 Sep 2023 02:04:59 +0000
ROA not before: Sat 30 Sep 2023 02:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:e3d4:35a8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e3:d4:f8:44:86:35:87:dd:82:24:b3:d0:19:4f:ff:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 02:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9835d5e571086b5263078fcf6e89ab140ef59c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:f8:a0:fa:34:49:11:73:78:d5:e2:16:48:
ea:d4:96:3a:6c:7f:36:de:cf:2e:25:d1:d9:47:e8:
7f:55:b4:ae:d6:dc:da:53:c4:66:79:b4:78:26:fe:
7d:13:b2:48:c8:23:ab:00:c6:4b:6c:8f:71:2e:3d:
69:1e:8a:15:67:21:e7:70:23:c1:c5:0e:3b:05:0c:
0d:0e:5d:42:fd:da:56:56:36:fd:5c:7a:57:c8:88:
05:2c:d0:31:56:21:19:13:59:05:06:86:12:b7:62:
50:9f:12:17:cc:df:af:63:6d:20:f4:8d:e9:8a:54:
55:3d:76:01:4b:d2:5c:43:7f:6e:d9:37:0e:ac:67:
5a:97:ff:d0:9a:87:c2:00:b8:45:ba:98:18:b3:5f:
35:e0:28:e1:0f:42:e3:27:9f:d0:89:ca:15:d5:d6:
ad:ca:10:ed:3e:a7:b3:fe:e8:dc:1f:a9:dc:1e:48:
ac:2e:02:5d:e3:5b:42:85:03:77:a3:ab:eb:3b:16:
26:dc:c2:d3:26:35:f6:37:8a:0e:b5:8e:4e:b7:8b:
cb:18:0b:2a:63:8d:24:70:e9:59:ad:b4:4f:73:80:
cf:89:60:7d:7d:12:02:83:43:a5:36:81:a0:66:f4:
ab:e3:58:f1:09:7e:54:05:52:4b:5f:de:a4:76:d5:
db:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:83:5D:5E:57:10:86:B5:26:30:78:FC:F6:E8:9A:B1:40:EF:59:C5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6YNdXlcQhrUmMHj89uiasUDvWcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ca:4c:f9:6a:ac:f8:4d:8b:67:44:03:5d:4f:ed:3c:30:96:51:
ac:00:2b:34:17:79:f6:5f:9b:9b:b0:0c:52:0f:d7:28:1f:99:
2d:47:86:7c:73:e3:5d:1e:36:b4:4a:cd:6b:b5:45:23:77:83:
18:13:4a:7a:ad:69:ae:a3:eb:1f:8f:4f:0e:19:50:40:1e:32:
e3:19:85:04:02:75:43:7f:0b:db:ba:ab:d1:19:a3:0f:9a:70:
21:75:d1:8d:a9:0d:c8:33:a3:a8:f7:94:b1:eb:c2:60:4d:e5:
40:60:d7:06:33:e9:67:1b:63:13:ce:d4:19:11:37:95:5f:9d:
35:87:e8:32:e3:17:c1:c4:d8:01:f5:d4:47:bd:40:80:b9:d7:
58:a6:bf:85:a6:81:55:47:fb:94:37:e9:4e:42:26:f4:99:bf:
da:23:b4:61:5d:00:61:68:54:bb:6d:92:2f:b7:27:85:76:29:
d4:2c:04:a8:e1:a2:b2:70:b0:3f:81:a8:32:99:78:7e:7f:de:
ee:84:b1:01:bd:82:cc:f4:da:bd:aa:13:87:61:25:d0:c2:e8:
34:65:58:59:2d:a4:3b:eb:54:e1:1c:9e:b2:74:c4:26:77:6a:
60:eb:38:e2:73:e1:49:39:37:88:1a:1e:17:69:02:c5:ed:b0:
e7:4e:2c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:35:26 2025 by rpki-client