Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6ED2MEJ6y3i5QpqgUJ5dbPBZmpI.roa
File: 6ED2MEJ6y3i5QpqgUJ5dbPBZmpI.roa (raw, json)
Hash identifier: vcoKGYZAU5l8QIB9RzeSt7JjP9Qu0LXTfVZG5ciIoiU=
Subject key identifier: E8:40:F6:30:42:7A:CB:78:B9:42:9A:A0:50:9E:5D:6C:F0:59:9A:92
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C298E9DAB85FBC2D386F1628FDAF2D46A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6ED2MEJ6y3i5QpqgUJ5dbPBZmpI.roa
Signing time: Sat 02 Dec 2023 08:04:21 +0000
ROA not before: Sat 02 Dec 2023 08:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:298e:6fe0/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:29:8e:9d:ab:85:fb:c2:d3:86:f1:62:8f:da:f2:d4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 08:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e840f630427acb78b9429aa0509e5d6cf0599a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:67:aa:a6:d4:3f:56:b2:09:95:c1:8e:ff:6d:
79:28:5b:bf:4d:3d:9f:d5:e1:9c:e7:0f:21:a6:0e:
f6:35:b5:19:03:e6:4a:00:b4:d4:d9:b4:14:b2:66:
79:19:4c:cc:d1:c0:47:a7:d2:b8:b7:68:32:cd:0f:
87:fc:7b:83:c4:06:44:56:ce:52:e6:e7:6c:c6:83:
3e:57:28:7c:1b:20:f3:ee:70:86:ab:6c:50:34:ef:
f2:6b:c0:7b:00:7b:7e:2e:a9:7a:2e:9e:57:88:05:
d8:e3:c2:b7:5a:49:7c:a7:10:56:ed:1c:0f:8b:1f:
72:a5:6a:36:60:22:29:49:ad:52:df:ad:63:7d:12:
90:fc:51:86:f5:fd:83:eb:78:0b:38:33:30:5d:75:
6d:da:8c:63:47:63:a4:ae:14:e3:db:45:a8:76:5f:
7e:49:9e:95:06:62:dc:07:63:a0:95:31:d0:24:75:
1a:33:22:9a:c4:a9:97:4a:7a:49:c3:ee:30:67:c3:
56:45:c3:bb:e6:69:b0:3a:b2:07:d6:ff:ba:f3:6c:
8c:42:cc:dc:64:43:f6:b4:9f:98:7f:84:4b:b6:2d:
c7:01:3a:94:b0:7e:86:d7:a2:62:64:62:e9:61:d8:
11:36:8c:c9:7f:16:1d:64:fa:61:0c:5f:33:6e:67:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:40:F6:30:42:7A:CB:78:B9:42:9A:A0:50:9E:5D:6C:F0:59:9A:92
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6ED2MEJ6y3i5QpqgUJ5dbPBZmpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:70:ed:42:6f:d9:5f:80:3f:31:0f:44:73:9b:e7:b3:36:10:
62:54:0e:ee:7b:11:b7:d3:b2:9d:0d:c8:3c:eb:ba:43:59:88:
f5:11:3d:2f:8b:cd:a9:34:37:9e:9f:2b:24:1a:04:b7:61:20:
30:a0:b1:bf:bd:cf:62:69:f9:b1:75:af:6d:2f:d6:5a:59:bd:
81:11:17:e8:91:7c:05:47:cb:e9:50:40:a0:94:bc:63:27:70:
49:50:c4:38:12:47:a3:fd:01:c8:05:28:75:9b:9c:47:cf:9f:
d0:2d:5b:bf:8b:46:17:c1:54:44:a6:80:ae:49:55:96:a9:5d:
9c:90:3a:a8:06:d2:66:c1:8c:e7:47:74:76:d1:4e:8b:f2:74:
53:72:48:06:35:7a:5d:51:31:f8:19:66:60:3d:c8:c0:45:44:
6d:3f:36:a0:72:9b:fc:34:bd:3e:b5:45:9b:3b:46:72:3e:55:
68:e2:d6:54:c4:60:85:e8:18:6d:5a:19:02:aa:99:dd:ef:8d:
03:b7:b9:c3:aa:86:18:e8:f9:b3:a3:8b:47:88:a2:2a:0e:05:
40:f6:27:0e:71:30:28:0e:2f:9e:73:42:1b:ed:df:f1:bb:88:
8d:50:9e:c0:3f:3d:f2:dd:9f:a5:90:9f:aa:a6:b4:bd:f7:64:
01:85:9d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:50:17 2025 by rpki-client