Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6v8eJWU9VbG8ftmcVky6rd-LWt4.roa
File: 6v8eJWU9VbG8ftmcVky6rd-LWt4.roa (raw, json)
Hash identifier: X+iutq0n+vT+M+HKtQEPjDhLVvavbb78PsLlGoPZ7R4=
Subject key identifier: EA:FF:1E:25:65:3D:55:B1:BC:7E:D9:9C:56:4C:BA:AD:DF:8B:5A:DE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ABD3EE02B18121F91AAD9EA8B8A6EB512
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6v8eJWU9VbG8ftmcVky6rd-LWt4.roa
Signing time: Fri 22 Sep 2023 14:15:28 +0000
ROA not before: Fri 22 Sep 2023 14:15:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bd:3e:e0:2b:18:12:1f:91:aa:d9:ea:8b:8a:6e:b5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 22 14:15:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaff1e25653d55b1bc7ed99c564cbaaddf8b5ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:28:eb:1e:08:29:dc:78:8d:43:d6:3a:0e:
73:bd:5e:29:e1:22:9f:b3:57:20:de:d4:79:f9:82:
8a:ce:1f:a6:d5:64:cc:c5:88:af:46:94:1d:cc:2f:
9b:41:08:a9:15:d7:32:6b:f0:26:a6:81:71:1c:53:
13:98:6f:00:92:ac:89:6d:b8:90:8a:6d:bb:c3:14:
e3:21:41:33:76:95:17:7a:91:2d:10:28:14:0f:dd:
ad:04:66:c0:73:95:d6:b7:e7:f1:ef:1b:d8:fd:1d:
96:ef:9f:be:bd:d8:af:9c:82:3e:e3:e6:cb:c7:74:
bb:99:97:09:e1:4a:5a:8b:65:e1:8b:b9:9e:ce:e9:
4f:30:f4:a0:1b:af:f7:6b:50:55:26:9e:e8:62:16:
7e:ad:42:21:11:ca:a4:c6:63:35:a3:64:bf:b8:75:
a1:ba:56:c2:0c:dd:78:fe:9e:2a:1f:c2:c7:b6:50:
90:31:1f:cf:35:1d:db:02:b7:ad:c4:89:1b:20:19:
7a:40:0f:86:a3:2e:7e:b4:f5:9c:a0:73:68:a3:4b:
de:c5:91:ac:ae:df:68:1b:a0:bc:7b:83:03:70:2b:
cd:90:75:a9:ec:89:03:b5:2f:78:73:87:9f:87:cd:
0f:4e:c6:5a:d9:05:6b:23:19:52:49:b4:11:60:10:
6d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FF:1E:25:65:3D:55:B1:BC:7E:D9:9C:56:4C:BA:AD:DF:8B:5A:DE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6v8eJWU9VbG8ftmcVky6rd-LWt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c3:9f:10:b4:ba:cd:18:37:a9:93:61:0b:ad:99:b4:4b:1f:56:
67:81:16:8a:5f:47:95:9c:8e:2b:b1:71:74:03:85:94:49:a9:
f3:a5:41:fa:3a:6f:39:5a:4d:80:12:11:3c:78:3d:59:1c:6f:
94:e3:13:be:c7:51:c5:43:c5:20:d1:c9:a8:d5:13:e5:e4:ec:
75:1c:b2:92:97:f1:21:83:05:43:5e:53:db:2b:45:2e:4a:15:
a0:7d:5d:52:fd:ea:a4:32:83:6a:3b:fe:9d:30:90:65:bc:a2:
1d:7b:36:e7:92:d0:b2:19:23:14:cd:2b:9b:7b:75:23:a3:67:
ad:c1:3c:07:6d:3e:ab:8e:08:81:05:db:5b:06:f3:8e:dc:6d:
64:6b:35:be:56:6f:32:11:ea:91:20:be:b6:cd:5e:89:c5:4f:
e7:2b:95:29:58:1a:85:1d:f0:b9:9b:00:cf:af:16:92:f2:51:
ab:95:c1:cd:4b:e0:a6:9c:ea:9a:30:a4:25:4e:ab:6a:b7:50:
46:cc:b5:7d:fa:16:dd:58:26:81:0c:cd:57:a7:85:e6:da:5d:
2f:34:19:ef:97:86:e3:f2:b8:26:c8:39:ec:ec:c2:cd:bb:e4:
98:23:0a:58:5f:05:b2:14:44:ff:f9:bd:ed:28:10:c9:eb:ac:
2e:b2:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:35:33 2025 by rpki-client