Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P6-NhAHV2ckcZtSYbss4C_GYCEY.roa
File: P6-NhAHV2ckcZtSYbss4C_GYCEY.roa (raw, json)
Hash identifier: pDwHqCXDN+CtVu+gBI/KymMYYfRKsyGZOd5zrSCIymo=
Subject key identifier: 3F:AF:8D:84:01:D5:D9:C9:1C:66:D4:98:6E:CB:38:0B:F1:98:08:46
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1F81120CAA26A9E4391809D54ECE9828
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P6-NhAHV2ckcZtSYbss4C_GYCEY.roa
Signing time: Thu 30 Nov 2023 09:13:21 +0000
ROA not before: Thu 30 Nov 2023 09:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:81:12:0c:aa:26:a9:e4:39:18:09:d5:4e:ce:98:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 09:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3faf8d8401d5d9c91c66d4986ecb380bf1980846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:8c:79:f1:b4:ad:9f:34:3f:71:75:49:48:
fc:8d:43:b0:52:7f:02:d3:e0:fa:0c:be:ee:60:5e:
36:9b:f2:43:37:08:8b:55:38:b1:4c:f7:7a:b4:d6:
c0:6e:51:68:cf:0e:29:84:de:66:77:09:0f:bf:d6:
e5:cb:b2:61:62:e7:a1:20:1b:53:67:9a:ad:8b:66:
95:d9:eb:5a:fa:2b:e6:39:5e:53:60:cd:8d:2c:d9:
10:ce:66:15:0f:02:be:43:1a:da:d0:d2:ab:25:a0:
b1:7c:dd:f6:e1:ec:e8:cd:9e:fb:77:44:60:9b:5e:
8f:b0:c7:c3:c3:0e:bf:bf:32:99:9e:2b:98:88:38:
68:a5:e8:24:aa:e8:ff:bd:a8:94:f4:80:6a:b9:94:
01:35:d4:45:6d:3a:d0:d4:5e:97:ee:00:e3:bc:65:
59:95:7a:08:c4:62:b0:9d:0b:d7:c9:b8:f5:e8:ce:
f1:9d:cf:e7:fd:98:72:ff:3f:88:ea:4c:50:24:68:
aa:6d:41:9b:02:dd:5c:f8:26:48:0a:d4:1a:e0:78:
4f:69:44:a2:5a:a6:1f:5a:4f:62:57:d1:5d:fe:8c:
64:47:0c:a3:df:bb:32:8e:28:a7:6f:e7:50:d7:d9:
87:ee:0d:50:ee:27:97:77:6d:32:e2:9b:fe:42:34:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AF:8D:84:01:D5:D9:C9:1C:66:D4:98:6E:CB:38:0B:F1:98:08:46
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P6-NhAHV2ckcZtSYbss4C_GYCEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:5e:6a:df:ae:b2:ae:e6:e9:b3:4e:0c:04:44:bc:ca:44:5b:
1b:44:cd:77:f6:f7:48:0e:dd:08:33:7a:a1:36:d7:88:f4:b1:
04:5f:bf:67:da:d1:47:91:1e:f9:1b:03:64:15:f5:3b:aa:18:
2f:ff:b0:43:74:cb:35:f6:ad:d0:30:42:10:6d:72:a9:13:86:
79:da:37:82:80:af:f4:d2:71:fb:c9:77:98:d9:c5:9b:23:ed:
1d:e2:38:bd:ec:35:59:38:0b:ad:f6:ad:c8:fb:e1:4f:6b:34:
c6:11:cc:96:02:36:cd:f9:ec:b5:02:ff:73:15:46:85:d5:c7:
04:5d:94:96:0f:1b:80:26:56:c5:46:3b:8a:bc:e3:0e:6f:ec:
86:cf:bf:f8:af:33:21:1e:ea:dd:07:03:41:82:13:41:3f:c3:
6a:2d:4d:38:77:a2:c0:96:a3:12:f5:30:01:60:25:bd:48:31:
e2:7c:fe:bf:3d:a7:ef:e5:7a:a3:ef:ee:8c:05:b4:ea:57:e9:
f1:d9:d4:f7:13:22:98:03:62:34:ee:6a:d7:97:24:08:d4:5c:
df:f0:81:34:12:0e:24:8d:06:58:ae:30:ac:4e:13:15:1b:a0:
4e:6a:c0:71:f3:55:9f:6f:95:5a:94:e1:6a:16:5b:df:73:48:
cf:84:f2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:21:20 2025 by rpki-client