Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6DpukiHDx0WoA74ml_9vDn0I9vA.roa
File: 6DpukiHDx0WoA74ml_9vDn0I9vA.roa (raw, json)
Hash identifier: H+xtuqeriX75VChoSCnjd1kizevrmF9AMkXlgGRd0vg=
Subject key identifier: E8:3A:6E:92:21:C3:C7:45:A8:03:BE:26:97:FF:6F:0E:7D:08:F6:F0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3528001A55E2DB9FECB278D64873B89F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6DpukiHDx0WoA74ml_9vDn0I9vA.roa
Signing time: Sun 15 Oct 2023 21:04:55 +0000
ROA not before: Sun 15 Oct 2023 21:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:3527:457a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:35:28:00:1a:55:e2:db:9f:ec:b2:78:d6:48:73:b8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 15 21:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e83a6e9221c3c745a803be2697ff6f0e7d08f6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ae:14:4e:d5:45:e9:91:1a:9a:25:72:8a:a6:
46:b1:99:7b:16:ad:c5:46:79:f4:a3:d7:dc:64:6f:
a5:80:16:49:1e:3d:0f:62:aa:94:39:67:83:3a:9b:
35:7a:fe:26:b1:98:c1:83:68:3f:da:31:60:4a:32:
a3:e7:ce:7f:5d:f4:4f:3d:c3:d3:c0:78:9f:10:3f:
ab:82:24:c5:b9:74:50:f9:f3:3c:0e:6e:e9:09:52:
f1:1f:32:a5:29:0c:30:b0:f9:cb:ee:6a:c4:ec:0e:
6e:4a:a9:d7:e7:0a:cc:d8:64:9a:e1:39:ed:62:d8:
db:bf:86:d9:43:89:32:39:83:39:fa:15:75:bf:6b:
a4:eb:db:c1:77:1b:14:84:ef:1b:c1:00:b4:ad:81:
31:45:2d:fb:dc:42:c5:dc:12:20:9e:26:53:7f:58:
ff:c5:18:5e:01:24:ce:92:1e:4a:4f:f0:66:ba:45:
d0:5a:dc:81:32:d9:3d:e7:b6:60:d3:5e:3a:c1:a1:
56:1a:c2:56:45:9a:54:88:8f:47:0e:6c:0e:4a:ea:
cb:87:ce:6e:18:cf:58:f7:b2:0d:49:8e:7a:79:cd:
42:c6:79:2c:74:0d:22:97:29:27:47:a6:f7:15:41:
1d:b4:49:e7:9a:70:8c:8a:9e:71:60:81:e9:68:dd:
ed:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3A:6E:92:21:C3:C7:45:A8:03:BE:26:97:FF:6F:0E:7D:08:F6:F0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6DpukiHDx0WoA74ml_9vDn0I9vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b7:54:dc:ca:c4:a9:ae:a4:5f:4d:55:0b:2c:0a:6d:8b:57:47:
ea:12:7e:f7:f9:f2:37:e9:ee:bd:7f:f7:cb:45:4b:40:9f:22:
fd:7d:4e:4d:7f:c4:bb:ca:f4:0e:d0:14:34:64:15:2f:ee:4e:
f1:06:bd:23:ab:ca:9b:99:57:3a:84:48:ad:03:7f:a7:c2:97:
4f:4d:73:62:f7:f0:22:d0:7a:48:3e:82:93:ca:26:9e:b4:a3:
bb:08:1e:d2:ac:73:74:61:96:d9:14:9f:5b:07:2c:e5:11:a4:
5a:d9:60:d9:94:aa:88:f0:6c:31:91:a2:07:09:6f:9c:07:14:
99:0f:21:f5:50:c2:7a:e6:7c:a1:44:92:aa:c1:7c:e9:98:cb:
0a:f5:e4:8c:0d:7d:d9:5f:39:31:47:d3:6b:d3:95:56:88:33:
b3:65:11:bb:38:aa:e1:3b:27:59:08:0d:22:92:ca:f5:6a:31:
d2:da:55:0d:ee:c3:a7:00:f2:32:66:ac:b0:3e:bd:d4:2c:9f:
da:8f:39:16:1a:54:1d:d6:80:fe:a9:e8:50:cf:b3:5b:f7:fe:
21:d8:be:0c:28:03:46:a7:4b:3f:da:a4:40:9e:7b:1a:25:e2:
ad:c2:96:ee:5f:b0:97:65:c4:18:9c:cd:f1:aa:07:e3:73:11:
07:2b:b6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:52:08 2025 by rpki-client