Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K6m47MA784YMY67HF-NDlG_Z4g4.roa
File: K6m47MA784YMY67HF-NDlG_Z4g4.roa (raw, json)
Hash identifier: fKCskY+mxDGkcKOmZkig+o234h3ZxAfI5uOJKzP8j7Y=
Subject key identifier: 2B:A9:B8:EC:C0:3B:F3:86:0C:63:AE:C7:17:E3:43:94:6F:D9:E2:0E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C724D1FEF0DD60064E273399A24947360
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K6m47MA784YMY67HF-NDlG_Z4g4.roa
Signing time: Sat 16 Dec 2023 11:05:06 +0000
ROA not before: Sat 16 Dec 2023 11:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:724c:7a75/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:72:4d:1f:ef:0d:d6:00:64:e2:73:39:9a:24:94:73:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 11:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ba9b8ecc03bf3860c63aec717e343946fd9e20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:d9:4d:e7:b7:2f:9d:2c:32:b0:5b:f7:98:
d2:c7:4c:ca:78:5b:b0:4d:2d:2d:d7:a2:1a:6a:8b:
44:e8:d3:62:0c:3b:03:95:0a:6e:c2:28:19:e1:a7:
79:d1:c9:c6:01:68:b6:1c:b1:1d:83:9c:27:79:16:
23:15:7e:fe:92:cb:79:77:6a:21:5a:bc:bc:c2:54:
6e:93:2d:79:f5:0d:75:6a:20:57:ba:0b:8c:6c:96:
36:7c:91:bf:ce:d2:53:7c:49:9d:12:f1:55:64:96:
63:34:c3:4b:d7:97:d5:2f:e0:f6:18:a4:0b:6d:1a:
12:61:40:c0:58:38:1b:ad:d7:ce:7b:00:a8:48:d9:
20:6b:b1:be:00:85:7d:db:59:5a:78:dd:84:fd:0c:
4e:8d:8e:98:69:28:6b:ac:6d:36:eb:00:db:fc:d8:
1a:5e:2d:22:4e:24:c3:a1:7e:d9:b8:47:c1:5f:a0:
c4:fa:8f:6b:b7:52:13:05:af:68:b9:7b:76:ea:d6:
d3:ba:64:36:03:bf:9a:47:61:52:de:cf:1d:96:21:
91:90:81:fe:bf:3f:ba:45:f0:c3:7e:0e:82:80:7c:
5a:61:5a:11:c7:ec:17:82:a4:cd:bf:51:97:a2:d0:
ae:e1:b4:75:7e:47:ec:db:a9:4c:6f:2c:66:0d:17:
37:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A9:B8:EC:C0:3B:F3:86:0C:63:AE:C7:17:E3:43:94:6F:D9:E2:0E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K6m47MA784YMY67HF-NDlG_Z4g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:34:f7:76:59:f9:45:6c:4e:a8:5c:74:af:2b:cf:a2:ca:23:
dc:d0:10:12:77:8c:19:78:c3:6c:29:ae:d3:94:f6:64:0a:23:
36:42:f8:75:05:be:76:e6:6f:da:1f:4f:3a:98:85:af:85:ab:
dc:d2:05:ef:dd:ab:a7:ed:cf:9c:66:e9:45:12:2a:5d:d1:54:
02:96:86:41:26:f4:5f:71:c3:fe:04:e8:f9:2f:f3:22:ba:9e:
50:6c:73:a4:e2:10:8c:7b:53:d6:2d:e0:4a:61:92:d1:6b:01:
4a:7a:79:e0:f1:65:a9:9d:b9:f9:57:af:ac:ca:6d:08:02:e6:
0a:80:9c:a1:41:01:30:50:c0:9c:35:a5:0c:0d:9c:64:a0:40:
6a:38:32:04:ae:53:99:f7:b0:24:b8:28:2c:0e:15:03:3a:4f:
8f:0d:ee:ec:31:4a:4d:40:6a:8a:90:85:5c:25:8c:17:51:21:
37:87:46:c5:ca:0a:ba:ea:a5:fe:23:6e:9d:89:b0:f8:de:93:
15:40:9f:bd:22:d8:51:28:89:96:d9:21:b0:0b:d0:9a:02:44:
05:2a:12:2e:87:bd:b1:54:d2:60:30:5b:9a:65:0c:4e:50:05:
67:0a:54:cf:b4:ab:67:5f:9c:45:20:83:91:4d:81:26:85:de:
59:8c:3c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:54:00 2025 by rpki-client