Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/i6dGJ34L0mcRvUZvphlIzv5sAfE.roa
File: i6dGJ34L0mcRvUZvphlIzv5sAfE.roa (raw, json)
Hash identifier: YWzeNGkbBjnKeMJj+eZEuW+Q8EsDaTvcT/iSwKNCnsU=
Subject key identifier: 8B:A7:46:27:7E:0B:D2:67:11:BD:46:6F:A6:19:48:CE:FE:6C:01:F1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B129BD29DD40240E0FAEF7FC63728BE92
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/i6dGJ34L0mcRvUZvphlIzv5sAfE.roa
Signing time: Mon 09 Oct 2023 04:04:43 +0000
ROA not before: Mon 09 Oct 2023 04:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:129b:5ffb/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:12:9b:d2:9d:d4:02:40:e0:fa:ef:7f:c6:37:28:be:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 9 04:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ba746277e0bd26711bd466fa61948cefe6c01f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2f:6f:2b:c7:b9:f4:12:3a:da:07:1c:2a:e8:
55:9f:96:74:87:58:d7:4a:25:f6:c0:49:94:63:9e:
ce:d5:bc:de:a3:72:27:34:dc:4c:f4:b3:49:35:48:
56:50:71:d4:fe:6a:ad:6f:fa:aa:38:76:6e:18:9d:
7b:b0:55:61:43:15:22:1f:3c:a6:85:35:3a:20:55:
b8:5b:c2:de:01:a3:bf:36:3d:cb:83:9a:78:8b:71:
5d:1b:f0:20:16:46:7c:94:1c:af:4c:ce:9e:9f:31:
ef:3e:45:ee:4b:a0:e3:be:b5:33:6f:d1:08:f7:20:
5d:91:c1:92:6f:45:0a:94:ed:22:f8:81:db:6b:26:
c7:0b:16:c7:a5:10:72:2d:48:95:86:5c:87:9b:0c:
22:97:dc:ed:ff:77:9a:fb:c8:fb:78:d0:fd:5c:51:
9c:cd:c5:4e:ae:40:c1:e0:81:fd:bf:dd:31:62:55:
74:1b:c6:1c:52:76:65:06:ba:e4:f6:2d:74:75:c5:
0d:e2:4e:d7:6c:1d:1d:ca:07:f6:51:a9:5d:cf:9c:
3c:6d:5c:d2:6f:1e:fe:00:18:c8:a5:0d:7d:42:d3:
10:cb:1c:4a:38:71:b2:c1:11:50:d6:d8:80:1f:55:
2b:86:b4:b3:58:45:29:10:07:e1:56:3c:6e:be:99:
e8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A7:46:27:7E:0B:D2:67:11:BD:46:6F:A6:19:48:CE:FE:6C:01:F1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/i6dGJ34L0mcRvUZvphlIzv5sAfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b8:0d:cb:62:25:fa:86:e5:ce:46:b7:de:eb:34:4d:c6:e3:0b:
b6:ea:13:4a:dc:84:f5:4e:37:d2:61:d1:65:57:00:3f:c2:94:
83:6e:cb:1d:77:61:aa:b7:37:44:0e:11:23:a1:0d:33:a0:96:
17:03:5b:7c:c0:96:5d:c4:91:e9:fd:e2:26:76:fe:4a:de:5b:
90:e1:53:1e:31:9c:6e:9b:49:cb:39:2c:d8:b8:96:b7:d8:b7:
0d:78:3a:fc:78:89:c2:cd:2f:c5:99:e4:f7:51:8e:15:a2:94:
e5:89:66:21:0e:5b:20:6b:93:19:96:51:ec:8b:d2:bd:11:a1:
c5:04:e7:fd:29:7a:a4:bb:84:09:37:5b:f9:67:a7:fb:80:e2:
bf:05:61:60:c7:31:13:ba:ed:e6:0d:f0:cd:46:4c:24:5e:50:
62:b4:f3:5c:2c:0e:5d:7f:ff:6d:59:b1:73:42:1a:23:83:81:
83:6e:69:7c:dd:df:24:d3:fe:cc:38:fa:c5:10:8e:bf:32:33:
de:22:bc:c4:b6:1b:59:ee:1f:29:ad:0a:c4:f5:0f:62:52:c8:
85:fd:ed:cc:5f:a7:02:54:29:96:f3:7d:a2:f7:f4:51:97:61:
08:b7:61:b1:95:e1:da:62:5e:e5:de:43:6d:aa:ce:71:b1:6f:
08:bf:9b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:19:45 2025 by rpki-client