Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6hmqSYpROPHNnBSjztplML5Ulk8.roa
File: 6hmqSYpROPHNnBSjztplML5Ulk8.roa (raw, json)
Hash identifier: WecMqJ4JHBpDBHQyKwT2jn3FEA3RhVpFUzOI1dq8OWU=
Subject key identifier: EA:19:AA:49:8A:51:38:F1:CD:9C:14:A3:CE:DA:65:30:BE:54:96:4F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1A558B10D4C468C97ED3F6CDE630B742
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6hmqSYpROPHNnBSjztplML5Ulk8.roa
Signing time: Tue 10 Oct 2023 16:04:55 +0000
ROA not before: Tue 10 Oct 2023 16:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:1a55:3233/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1a:55:8b:10:d4:c4:68:c9:7e:d3:f6:cd:e6:30:b7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 16:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea19aa498a5138f1cd9c14a3ceda6530be54964f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:7b:a0:c5:31:dc:6c:31:29:d0:11:82:3b:
68:34:56:98:96:59:67:cf:ee:5f:15:df:62:60:11:
81:74:63:a9:77:b1:da:72:3b:b6:75:64:d2:75:fe:
01:34:2e:21:20:40:13:fb:13:3e:64:37:a5:6b:60:
de:98:d5:70:6b:f7:9a:9c:3f:15:6a:c4:0b:7a:0b:
3e:a7:24:0b:11:7d:f1:6f:59:2e:6e:86:43:e3:7f:
b8:33:fc:ff:44:bb:95:2b:b1:d3:bf:d3:2e:32:fd:
4f:43:41:96:53:10:ff:e1:3d:87:01:61:2b:d4:c2:
a8:3e:04:99:35:30:de:fa:f2:4d:5b:ca:5d:d6:1a:
92:34:ab:7b:d1:98:6d:2a:9c:80:bb:d3:a2:46:42:
f5:dc:e4:91:eb:9d:0c:44:95:aa:2d:cd:29:5f:25:
28:ae:59:4e:33:81:59:e7:73:4a:96:e4:d1:69:92:
78:a7:f7:10:fb:e0:d6:5f:cf:d9:5d:cb:b5:8f:4c:
8b:93:eb:00:64:73:50:37:10:7b:58:01:4a:4c:68:
14:c6:eb:eb:77:e5:2e:b7:2c:48:bf:43:54:cc:b2:
03:1d:17:b1:17:0f:97:2b:6d:53:b5:29:8b:ff:08:
9d:7d:89:7d:7d:2b:70:87:1a:36:c9:24:f6:9d:00:
a5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:19:AA:49:8A:51:38:F1:CD:9C:14:A3:CE:DA:65:30:BE:54:96:4F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6hmqSYpROPHNnBSjztplML5Ulk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:cd:37:c5:b5:13:42:02:3e:b4:b0:24:1d:fb:04:e0:0c:b2:
7d:2a:62:cc:2c:39:1c:45:b6:48:86:03:3d:8a:15:d8:42:51:
b2:52:68:ce:50:2d:64:3d:02:5c:02:91:d9:13:3b:db:a1:ae:
fb:1e:02:36:53:24:a5:d1:ad:7f:ad:59:9f:87:71:63:a8:3d:
21:98:c2:9b:ce:8c:9e:c2:ea:8b:0d:bc:f8:21:e7:07:34:9d:
e8:c7:ba:61:0c:49:89:02:98:48:d1:f0:96:19:dd:ff:cc:d7:
9b:94:41:2a:0f:16:93:9a:a9:d2:eb:26:bd:ca:0f:c9:2d:ca:
7c:36:76:1b:11:c4:24:6e:fc:d0:ce:43:9c:2a:58:62:54:99:
c7:57:fd:54:24:83:91:23:66:a3:03:54:5b:79:12:a0:7a:95:
38:d3:b6:d1:83:9f:2b:81:b8:4b:3a:24:5e:49:d0:ea:7c:03:
df:38:eb:d7:d9:11:87:c4:0f:1e:b9:c5:d9:06:6f:9f:bf:da:
5b:f8:5d:c0:2a:9f:bb:c1:c4:92:37:78:3b:42:4c:31:d8:48:
d1:21:f4:37:10:21:e4:1e:ed:03:ad:24:54:29:39:e7:53:3e:
cf:b5:75:58:a6:f2:0d:d3:f5:46:d3:03:27:88:4a:96:bb:9b:
a0:ef:7a:eb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsaVYsQ1MRoyX7T9s3mMLdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDEwMTYwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTE5YWE0OThhNTEzOGYxY2Q5YzE0YTNjZWRhNjUzMGJlNTQ5NjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoB7oMUx3GwxKdARgjtoNFaYllln
z+5fFd9iYBGBdGOpd7Hacju2dWTSdf4BNC4hIEAT+xM+ZDela2DemNVwa/eanD8V
asQLegs+pyQLEX3xb1kuboZD43+4M/z/RLuVK7HTv9MuMv1PQ0GWUxD/4T2HAWEr
1MKoPgSZNTDe+vJNW8pd1hqSNKt70ZhtKpyAu9OiRkL13OSR650MRJWqLc0pXyUo
rllOM4FZ53NKluTRaZJ4p/cQ++DWX8/ZXcu1j0yLk+sAZHNQNxB7WAFKTGgUxuvr
d+UutyxIv0NUzLIDHRexFw+XK21TtSmL/widfYl9fStwhxo2yST2nQClUQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOoZqkmKUTjxzZwUo87aZTC+VJZPMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNmhtcVNZcFJPUEhObkJTanp0cGxNTDVVbGs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ7NN8W1E0ICPrSwJB37
BOAMsn0qYswsORxFtkiGAz2KFdhCUbJSaM5QLWQ9AlwCkdkTO9uhrvseAjZTJKXR
rX+tWZ+HcWOoPSGYwpvOjJ7C6osNvPgh5wc0nejHumEMSYkCmEjR8JYZ3f/M15uU
QSoPFpOaqdLrJr3KD8ktynw2dhsRxCRu/NDOQ5wqWGJUmcdX/VQkg5EjZqMDVFt5
EqB6lTjTttGDnyuBuEs6JF5J0Op8A98469fZEYfEDx65xdkGb5+/2lv4XcAqn7vB
xJI3eDtCTDHYSNEh9DcQIeQe7QOtJFQpOedTPs+1dVim8g3T9UbTAyeISpa7m6Dv
eus=
-----END CERTIFICATE-----
Generated at Mon May 12 19:20:56 2025 by rpki-client