Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6luMMvsho87EZUjK3853fxvpIdo.roa
File: 6luMMvsho87EZUjK3853fxvpIdo.roa (raw, json)
Hash identifier: HRy1M/zOcekGC8djx2uZ6Ez4n9Ci/93VeryoBq6z0Ho=
Subject key identifier: EA:5B:8C:32:FB:21:A3:CE:C4:65:48:CA:DF:CE:77:7F:1B:E9:21:DA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C8080AEC1759322BA10972983E6AF96E8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6luMMvsho87EZUjK3853fxvpIdo.roa
Signing time: Tue 19 Dec 2023 05:16:06 +0000
ROA not before: Tue 19 Dec 2023 05:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:80:80:ae:c1:75:93:22:ba:10:97:29:83:e6:af:96:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 19 05:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea5b8c32fb21a3cec46548cadfce777f1be921da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:58:1c:e6:82:37:24:f9:f9:9e:3f:28:56:ff:
00:4f:b0:77:19:a8:6c:66:1c:b5:d9:4d:ed:22:8d:
16:2a:74:86:05:02:41:16:e2:99:d7:48:5c:a5:91:
de:85:a1:6b:26:e3:83:27:89:a9:6e:5c:4e:a3:6e:
26:26:f8:6e:2c:1e:1e:65:97:e7:11:0d:97:db:db:
dd:c3:89:33:de:36:ee:a4:df:5d:c9:6f:07:83:63:
b2:47:d2:11:d3:ea:02:56:f8:27:b8:f7:fe:d7:44:
fe:d1:e9:50:95:74:47:47:56:10:fa:c7:05:54:cc:
28:cb:85:a1:49:1c:15:62:dd:e4:fd:04:bc:f3:7a:
77:be:cb:13:7f:ad:0e:6a:dd:78:2c:79:96:01:d9:
f3:5f:14:04:d3:53:18:0b:91:cb:12:f9:c5:4f:ec:
18:4b:6e:e1:19:c7:d8:d3:d9:11:58:07:0e:e6:9c:
0c:61:67:e5:e4:97:d4:87:0b:a9:f9:67:41:78:81:
f2:48:1b:6d:9d:49:47:ed:01:b2:69:bd:56:0f:78:
45:0b:45:f1:1c:0d:af:73:0a:64:60:17:ac:64:6d:
2c:14:d4:7d:29:54:98:7d:f6:60:bc:e3:68:ef:2c:
b3:1f:34:ee:36:dc:4c:28:4e:18:9a:a8:f6:06:49:
43:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5B:8C:32:FB:21:A3:CE:C4:65:48:CA:DF:CE:77:7F:1B:E9:21:DA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6luMMvsho87EZUjK3853fxvpIdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:9e:f1:26:78:9d:e1:ba:ff:56:1a:1b:da:65:4e:14:92:c0:
3c:fd:60:ab:0e:ea:35:5c:2b:79:e5:dd:cf:58:5e:7d:42:c7:
44:14:96:4f:ec:3c:69:22:37:80:96:31:4c:cd:22:45:fc:0e:
43:9c:70:52:f1:cd:92:e9:77:51:5c:df:2e:9d:3b:cf:e4:b8:
a2:f0:d1:05:0e:a6:8e:54:21:55:8c:b5:83:08:f1:4e:0e:86:
7a:13:79:91:5f:f9:77:75:40:1c:e2:76:b9:8d:a6:c6:9e:4c:
60:21:69:83:da:5f:7c:e3:f7:52:c5:b2:ed:70:58:72:af:5e:
61:b1:7b:ee:40:88:2f:a2:39:dd:2c:d1:01:48:80:38:2e:de:
37:59:df:50:f7:22:f3:98:d7:0b:15:78:8b:e0:1f:fd:4c:de:
5d:b3:ad:82:4c:1b:7f:8a:24:a4:10:4e:36:0b:a6:7e:67:f4:
27:24:d2:d4:cf:8e:2e:1e:35:c8:1d:5a:61:d1:a2:3f:26:19:
41:e4:93:fe:15:61:26:0d:fe:d2:d0:53:b9:a7:d5:a7:bf:2e:
36:d0:43:60:a6:f4:42:26:75:fc:5b:f2:23:91:3f:15:74:27:
de:b3:c0:b0:23:2a:6a:07:d6:6b:43:cb:c8:bf:5c:0f:4c:96:
3d:70:e1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:08:53 2025 by rpki-client