Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6v2FMnZeqn7IaYZEq0POYkPuQ3A.roa
File: 6v2FMnZeqn7IaYZEq0POYkPuQ3A.roa (raw, json)
Hash identifier: Fl+C1iCTxdTkzSbbDrtXXxWUC+3xUiwlY9Xc8Yw3OAE=
Subject key identifier: EA:FD:85:32:76:5E:AA:7E:C8:69:86:44:AB:43:CE:62:43:EE:43:70
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1D5ED384CA684D87EA15541AA651229F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6v2FMnZeqn7IaYZEq0POYkPuQ3A.roa
Signing time: Wed 11 Oct 2023 06:13:55 +0000
ROA not before: Wed 11 Oct 2023 06:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:5e:d3:84:ca:68:4d:87:ea:15:54:1a:a6:51:22:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 06:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eafd8532765eaa7ec8698644ab43ce6243ee4370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:b5:5d:ac:78:f5:ae:73:9a:3d:64:ff:c6:
ff:36:58:60:72:60:ca:82:fb:64:42:d1:8c:0f:d8:
2a:ae:e6:7a:58:a6:e3:06:aa:0b:79:69:6f:c6:fd:
eb:43:9a:28:b9:10:32:40:e1:62:11:bb:a6:1b:8d:
13:a1:ac:84:9b:58:f8:8e:9f:26:fb:33:8c:84:2b:
47:80:3e:10:22:63:12:0e:53:e8:e6:6d:1a:b2:74:
cf:91:44:b9:c2:19:85:98:e4:36:c6:7e:0d:0e:38:
ee:4d:ad:53:be:31:b2:82:5b:86:27:d2:17:e7:8a:
e4:75:55:13:73:e0:99:9c:3c:57:7c:92:c2:c1:92:
92:94:7d:14:10:dd:4a:e9:2f:27:d4:b7:53:56:51:
7b:68:62:bc:47:c2:ef:45:fb:2b:d0:6f:34:bf:85:
f3:8b:6b:e8:dc:e9:e5:3d:97:8a:fb:50:c5:77:77:
c4:08:c5:d4:ff:64:33:cc:f8:76:c5:0f:3e:9b:b6:
bd:22:f4:94:5d:f2:6b:e8:ec:b8:c1:48:8c:5f:90:
3a:7f:6e:fd:02:80:c3:ae:29:3f:6b:0a:55:57:ba:
85:ac:ae:7e:47:7c:c1:2e:18:6e:b8:c1:d9:8b:0d:
6c:2e:a6:ab:d0:54:a9:b1:c5:2c:b2:00:bd:e9:48:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FD:85:32:76:5E:AA:7E:C8:69:86:44:AB:43:CE:62:43:EE:43:70
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6v2FMnZeqn7IaYZEq0POYkPuQ3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:4a:3a:d3:0a:6f:5a:55:13:c7:20:44:2d:48:ff:e3:1b:25:
a2:bd:df:4c:39:dd:1d:3f:8e:81:46:fb:64:20:1e:5e:60:6b:
d2:7f:5d:6f:6c:ab:2c:f5:65:45:92:d7:6b:d7:1f:74:61:2e:
3f:78:30:6b:23:21:e7:fc:ee:a3:50:b4:7e:5d:6b:fd:59:5a:
b5:83:01:bf:b2:35:30:06:c9:e7:04:bf:58:61:c8:ed:4c:0d:
df:de:bf:66:1e:fd:22:43:7e:47:c0:d8:ef:e0:c8:c6:9b:4a:
93:32:cd:cf:39:5e:41:27:5a:b2:25:db:60:a5:bc:d1:00:49:
9a:2e:bc:a3:92:d4:66:cc:b5:fb:eb:6a:1f:df:47:de:7d:12:
ac:8f:76:e6:80:fb:dd:cc:90:d0:2d:1d:d6:e9:e2:b9:99:71:
84:1f:f1:87:16:d3:3b:3c:b4:51:f4:82:7b:20:ac:ef:f1:26:
d4:80:71:52:43:7f:9f:37:4a:56:73:6a:0e:29:d0:d1:b0:71:
f4:a0:bf:ce:da:74:68:df:c0:26:96:8f:0c:c0:63:04:85:b3:
7c:45:c0:be:2e:60:7a:f8:b3:aa:c9:53:75:ac:4f:f3:8c:32:
7f:bf:54:35:72:00:d4:3f:bf:d5:e3:8e:90:d1:0c:74:35:d3:
a3:ea:4d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:07:11 2025 by rpki-client