Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m6I87kIpb6Ok-8tYfIA74B0Cfu8.roa
File: m6I87kIpb6Ok-8tYfIA74B0Cfu8.roa (raw, json)
Hash identifier: uH2OkWwPEFf0V0z6LZkheLvAR3hfYQxv39Xj6q/i9a8=
Subject key identifier: 9B:A2:3C:EE:42:29:6F:A3:A4:FB:CB:58:7C:80:3B:E0:1D:02:7E:EF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C42B1F42E942EEF81AE44856732B9D816
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m6I87kIpb6Ok-8tYfIA74B0Cfu8.roa
Signing time: Thu 07 Dec 2023 05:13:27 +0000
ROA not before: Thu 07 Dec 2023 05:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:42:b1:f4:2e:94:2e:ef:81:ae:44:85:67:32:b9:d8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 05:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ba23cee42296fa3a4fbcb587c803be01d027eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:1b:dd:c6:db:2a:e3:bc:1c:e5:2d:bd:ef:
aa:c4:cb:68:c2:04:d4:55:8d:e5:3f:5c:bb:4d:05:
3b:06:1d:cf:28:39:e2:45:dc:0c:5f:7b:93:04:95:
23:38:b9:61:8b:3e:84:5e:16:29:60:bf:8f:70:93:
6e:08:00:ca:f7:c8:33:4d:30:42:18:b6:b9:0b:f8:
92:df:48:eb:7b:4a:7e:88:01:19:53:f0:d0:dd:48:
90:86:df:95:a4:c3:b4:d5:7e:1a:a9:e4:a9:df:ba:
7d:35:f4:9b:06:0f:51:9f:bc:64:f5:45:0f:41:73:
63:2e:eb:ef:d0:3d:33:bd:b9:10:65:f2:42:29:dd:
24:17:43:40:5a:d2:59:e9:70:97:37:da:e4:46:3a:
c4:a5:ed:e5:4d:12:c9:75:85:45:d3:71:31:1c:72:
9b:c2:0f:44:83:cd:8d:8e:ad:8c:14:ad:6a:f4:48:
9e:50:b4:31:8e:dd:12:18:89:dd:6d:5c:f6:a9:22:
a1:e5:00:8b:9f:86:7e:b9:24:32:11:2d:c9:b2:d5:
10:42:0c:ac:db:f3:61:b6:e2:b0:52:39:6a:6f:c5:
ac:bf:fb:09:0c:83:23:ee:72:fc:bb:7c:e8:ce:56:
57:45:f0:d0:41:04:f9:1b:9f:11:aa:f2:6f:39:c4:
11:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A2:3C:EE:42:29:6F:A3:A4:FB:CB:58:7C:80:3B:E0:1D:02:7E:EF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m6I87kIpb6Ok-8tYfIA74B0Cfu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b9:99:79:2c:ba:dd:b2:51:62:09:fe:d9:3f:01:57:4e:ae:64:
d3:b1:2e:21:d4:a7:23:20:48:2f:3f:c8:d4:7e:31:26:ad:06:
1c:7b:1f:dd:15:66:a2:f3:a9:77:e5:a0:11:c1:7e:2b:a0:62:
c3:d6:06:e5:dc:4a:ad:7b:2b:8e:2f:17:b1:86:59:68:c6:2a:
aa:9f:82:44:c0:96:f8:5f:b5:e7:22:e9:f4:a9:4d:63:ed:12:
3e:ae:44:46:9c:1e:e5:62:db:6a:2b:e0:e7:57:be:13:50:f1:
37:a7:6a:7e:69:c3:5d:70:68:cb:e3:2b:05:de:81:b5:7e:60:
5e:9e:3d:02:c5:45:4d:e3:19:14:92:2c:36:bc:cc:47:8a:a0:
a6:cb:81:f7:0d:81:ca:d4:59:cb:71:a6:68:86:9a:63:41:6e:
d5:20:4f:75:e5:89:8b:aa:ee:2d:d0:c4:dd:d3:df:82:6b:29:
55:59:fd:d8:b1:27:bc:00:29:d5:1e:56:2f:31:63:c7:ed:75:
bc:2e:4d:1c:4a:7a:94:a2:a3:f0:b9:07:f7:44:61:5c:7c:20:
60:63:b3:b0:f9:7f:7e:3e:ca:1e:bc:b4:b1:26:9c:95:9f:5c:
b0:4e:ca:7e:46:6d:41:a0:87:86:ee:73:f0:33:88:12:c1:fb:
18:bd:9a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:55:55 2025 by rpki-client