Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6mSx1Fd4NFsxYZgvXrfp_PZRdiI.roa
File: 6mSx1Fd4NFsxYZgvXrfp_PZRdiI.roa (raw, json)
Hash identifier: Ect7hhiJhbOCKWoeD1hira7tX3c/oJlvo6Rwrw6b6yA=
Subject key identifier: EA:64:B1:D4:57:78:34:5B:31:61:98:2F:5E:B7:E9:FC:F6:51:76:22
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFC82148EE7578556B125E69D677727E7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6mSx1Fd4NFsxYZgvXrfp_PZRdiI.roa
Signing time: Wed 04 Oct 2023 21:04:57 +0000
ROA not before: Wed 04 Oct 2023 21:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:fc81:6749/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fc:82:14:8e:e7:57:85:56:b1:25:e6:9d:67:77:27:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 21:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea64b1d45778345b3161982f5eb7e9fcf6517622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:aa:42:bb:fd:8b:50:d5:fb:f3:98:40:3a:a1:
82:93:96:ad:31:26:2b:17:7d:10:a4:c9:d0:10:e8:
19:03:0f:94:44:af:f4:47:a6:aa:d2:7a:f9:41:61:
e1:02:34:47:21:00:0e:7c:34:ed:32:89:5b:9d:38:
01:87:96:f4:c7:a9:01:8c:38:0a:a6:8a:8e:98:4b:
5f:c7:e6:21:db:9c:23:99:ed:77:5c:73:ff:0e:95:
7b:ee:c1:63:10:f9:7e:b3:35:b9:44:c0:02:05:8f:
2f:65:e9:ad:d4:08:4c:b4:04:e5:53:b3:c5:11:ef:
41:96:f1:93:a7:b0:c4:d9:14:5e:0e:96:be:4e:0a:
c7:1b:e7:ae:84:12:0d:bf:18:90:b6:cd:e4:16:c8:
78:8d:52:ac:07:08:9a:24:d2:be:51:a6:e1:e4:71:
14:20:ac:5c:c7:81:58:b0:ff:2b:2b:5a:29:ad:eb:
cb:72:37:06:d0:c2:80:d5:c7:2d:a4:c6:d4:97:c3:
0c:57:b3:96:ad:83:55:3c:82:90:8e:8a:ef:54:c6:
ce:ff:92:e4:86:9d:43:ab:e1:d3:0d:16:b5:08:10:
0c:67:29:91:64:14:9c:af:68:c0:9a:58:24:16:ac:
5d:79:10:ab:b3:93:66:80:73:0b:3f:ba:6a:86:2e:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:64:B1:D4:57:78:34:5B:31:61:98:2F:5E:B7:E9:FC:F6:51:76:22
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6mSx1Fd4NFsxYZgvXrfp_PZRdiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c9:83:d8:19:8b:c8:9b:f6:8b:86:c0:9d:6b:44:7e:fe:f9:c3:
1b:6e:80:e2:c9:6b:78:95:09:74:13:96:76:d1:57:60:dd:c0:
91:9e:57:6f:0f:ff:0e:70:87:99:c9:9d:96:d2:16:53:aa:82:
01:a5:cf:d1:eb:ce:64:16:10:7f:fe:cb:a4:dc:f0:de:4b:0b:
87:02:c2:72:94:a0:6e:41:db:00:6d:9c:f7:44:b5:4e:7b:20:
87:f8:86:2f:1a:52:ca:7f:70:22:d6:1b:05:43:c7:c2:0d:c2:
5a:b4:b1:90:58:99:76:53:9f:a0:68:ee:37:65:92:51:ea:26:
70:aa:1d:65:f9:e4:73:f8:7c:d5:e6:7f:de:95:7d:69:2c:31:
57:6b:f3:91:e8:a0:3c:cc:cf:af:9e:5f:b1:a4:9c:11:c9:ba:
23:e1:3f:cf:ba:36:aa:f5:16:ce:30:0d:86:04:4d:50:19:e0:
c4:28:a2:ef:63:9f:3e:ba:a3:5e:6c:db:9c:8f:46:c9:af:91:
1d:a4:cf:3f:3e:7f:be:df:48:3d:1a:11:c4:f1:8c:6b:aa:6a:
f7:20:96:51:92:b7:b1:96:3a:68:8f:ee:2e:db:c6:8e:76:20:
64:43:9c:95:49:ec:94:a8:6d:37:b2:ed:ee:1a:80:7e:82:91:
74:c7:49:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:12:39 2025 by rpki-client