Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R6IFl1EP_Dhl78yOScqwthS0go8.roa
File: R6IFl1EP_Dhl78yOScqwthS0go8.roa (raw, json)
Hash identifier: m/mA/61V2Db2tT80N5P77zEpxtjff9xswV2kJV/PgAI=
Subject key identifier: 47:A2:05:97:51:0F:FC:38:65:EF:CC:8E:49:CA:B0:B6:14:B4:82:8F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADE13E34E0AA03995326E7D1A26D376EF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R6IFl1EP_Dhl78yOScqwthS0go8.roa
Signing time: Thu 28 Sep 2023 23:15:59 +0000
ROA not before: Thu 28 Sep 2023 23:15:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:de:13:e3:4e:0a:a0:39:95:32:6e:7d:1a:26:d3:76:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 23:15:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47a20597510ffc3865efcc8e49cab0b614b4828f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:57:a3:8f:50:b5:dd:9a:9a:ef:ae:5b:50:
f6:ef:50:ed:63:ee:e5:b0:48:16:5e:06:dd:76:36:
72:54:cd:8a:1b:45:6d:a5:79:76:82:69:ef:38:67:
05:5b:bf:dd:6a:e2:33:27:5e:1e:91:67:e7:f6:a1:
45:d0:ee:43:54:9f:e3:46:90:f2:f7:b9:d0:19:0d:
ab:e2:d9:4f:fa:8f:a6:d6:fd:95:e4:d5:07:00:69:
96:17:28:52:7c:f1:02:35:bf:e7:53:8c:8d:1f:e9:
f2:fe:ee:94:d5:4f:f5:f1:a9:5c:d7:cb:98:e8:a9:
77:b3:38:6f:b4:ba:4d:21:1d:8f:a3:5c:7a:e3:45:
8d:63:b9:a3:53:b0:d0:9e:22:b9:72:ca:6b:d1:43:
7b:f5:16:91:f3:dd:cb:51:80:4b:2d:67:77:0b:a6:
e5:51:24:6e:fc:fd:90:56:8c:ae:de:dd:d1:b5:bd:
90:6d:7d:40:bf:46:98:ec:1e:93:b3:4c:43:07:80:
38:07:74:12:54:92:9f:97:d0:38:16:18:48:10:fa:
76:8c:8d:65:de:0b:96:20:8a:73:fe:94:5b:a1:a7:
f5:0e:f3:16:93:31:ee:0f:fc:52:1f:97:f4:9b:e0:
a4:50:79:34:96:67:60:40:6c:aa:10:80:15:fd:34:
b7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A2:05:97:51:0F:FC:38:65:EF:CC:8E:49:CA:B0:B6:14:B4:82:8F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R6IFl1EP_Dhl78yOScqwthS0go8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:0f:24:c2:67:6a:69:3e:d6:6a:ff:cc:6f:d7:b2:b2:36:70:
09:6a:7b:45:89:56:99:6f:e0:ef:59:27:85:e2:a4:8c:40:82:
0b:b8:ca:b4:bc:e3:25:fc:d0:c8:66:05:09:47:27:d3:f3:d7:
56:5b:5b:ab:62:ba:d3:5d:3b:9f:3b:dc:3d:bc:ad:7f:b2:14:
90:68:74:4f:57:cd:bc:2c:a8:c8:98:fc:d1:20:f8:5a:77:47:
fd:e9:0a:b1:38:9e:ae:42:86:6f:a8:0f:ac:13:9e:16:70:6a:
b9:8a:c1:30:bf:30:90:30:fa:28:24:3e:1a:02:8e:55:f9:f9:
75:88:92:02:1f:42:a5:5a:11:c7:33:39:fb:c7:e3:ad:50:d6:
0b:86:f5:fd:56:0a:cb:17:07:a4:d8:62:06:4f:21:8e:4f:89:
b2:02:04:f7:14:4b:71:57:b2:0e:56:ca:d9:a1:5b:95:b9:be:
25:27:5d:3c:47:6b:44:e6:93:e1:15:4b:b1:85:25:48:b2:e4:
06:27:4f:5a:8b:29:e2:f8:77:b6:a9:98:fd:1f:16:47:af:52:
1e:82:7e:dd:0d:07:8f:44:5f:2e:33:13:c7:2a:50:15:44:2f:
f1:1b:92:73:96:4e:06:48:5c:83:0d:5b:ee:c1:7d:a9:65:5d:
aa:32:ec:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:57:40 2025 by rpki-client