Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6BPP_BQJmWxqAEZqKQ2c9m8XeSs.roa
File: 6BPP_BQJmWxqAEZqKQ2c9m8XeSs.roa (raw, json)
Hash identifier: x42D47qYtlI6aVLM3kJBO/UO/MkhtBMa0jVND2k8p00=
Subject key identifier: E8:13:CF:FC:14:09:99:6C:6A:00:46:6A:29:0D:9C:F6:6F:17:79:2B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6423A3112CF86DF9C5257CEED0712CCA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6BPP_BQJmWxqAEZqKQ2c9m8XeSs.roa
Signing time: Wed 13 Dec 2023 17:05:06 +0000
ROA not before: Wed 13 Dec 2023 17:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:6422:d507/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:64:23:a3:11:2c:f8:6d:f9:c5:25:7c:ee:d0:71:2c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 17:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e813cffc1409996c6a00466a290d9cf66f17792b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:17:0d:d6:91:d2:25:78:0d:e0:8a:d0:76:
1d:10:92:1b:ea:5c:78:df:a6:db:74:28:06:95:7f:
2d:51:fc:ea:97:d3:ec:9b:0e:7f:56:bc:2d:a7:18:
5a:03:79:5d:2e:5b:5d:34:eb:7f:26:87:31:1c:7a:
39:e5:83:32:24:a3:82:54:eb:4b:2d:a6:17:2e:0c:
93:7d:5a:a6:99:7c:e2:e7:22:93:43:1e:2f:80:59:
b7:6a:e9:4c:68:02:4b:3f:67:0f:62:4d:6f:04:ad:
89:60:32:97:0a:ee:70:58:5f:50:cd:5e:e0:49:b7:
4b:2d:5c:e8:0d:1d:99:f1:f7:aa:9b:05:30:4b:a2:
21:d9:cb:9b:fe:4e:e4:69:3f:fc:ab:cc:d0:dc:44:
bb:7e:e9:77:a3:69:26:50:a7:64:e7:5e:cd:13:c7:
c1:7e:05:5d:2c:bb:87:f5:a6:0e:fe:2a:79:f2:2a:
ba:33:0f:2e:6f:98:3f:13:62:cc:1e:13:8b:91:e2:
7c:9e:df:f2:79:ca:b5:93:41:64:64:bb:9c:4e:f4:
5e:2b:8e:48:78:7a:06:a8:92:61:d5:76:23:69:8c:
f1:05:08:38:3c:1b:da:7c:a5:b0:6c:0b:3a:57:c9:
9f:87:a5:1e:ad:da:ec:39:0e:95:9e:3f:0a:3d:ff:
e8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:13:CF:FC:14:09:99:6C:6A:00:46:6A:29:0D:9C:F6:6F:17:79:2B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6BPP_BQJmWxqAEZqKQ2c9m8XeSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:71:50:e5:cb:e7:82:ae:dd:84:7b:ec:40:b1:88:7e:a7:a3:
11:d6:2f:73:6f:9e:8a:91:6b:cc:96:eb:45:57:c7:12:e0:b7:
59:be:f8:a0:4b:f2:53:ca:d7:22:16:69:86:5f:c9:ce:f0:49:
c4:81:34:22:db:d0:4e:9e:6b:08:18:df:8c:63:45:db:33:64:
cc:4e:1c:08:ad:3f:c8:a2:2c:34:7f:ba:6a:8b:21:c7:da:60:
de:29:bc:52:30:da:f7:d0:6e:00:68:d3:67:f7:48:48:4a:40:
ec:fa:1a:da:fc:e0:46:cb:49:93:d8:d5:20:39:a0:9a:a1:a7:
c3:cc:19:8f:e7:b3:bd:f5:c5:aa:a9:25:ef:f1:ff:f1:ac:78:
99:21:76:4d:0a:d7:97:66:37:ad:fb:b2:0d:f5:5b:ba:24:60:
a9:61:12:99:d6:c8:66:52:94:8b:d9:40:6a:ae:f2:c8:0e:b6:
ce:bc:91:c5:a7:f0:42:da:94:1d:7e:0e:0e:0e:48:fe:94:d1:
9a:47:db:af:7e:bd:03:39:42:aa:f8:78:58:46:41:b0:51:3a:
45:30:a0:7d:e0:7a:14:d8:65:f5:2b:ee:85:a5:53:e1:4e:dd:
95:4f:d4:8d:e2:a8:1b:ce:93:b0:fe:4a:77:cf:0e:34:34:9d:
54:ed:1c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:42:29 2025 by rpki-client