Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6TBc4nL90MGs1h2o-xBG2dNg5jA.roa
File: 6TBc4nL90MGs1h2o-xBG2dNg5jA.roa (raw, json)
Hash identifier: wM/USgsKJqPAOscr6Cbphz5qeqGhLpPY2I+hknAw6p8=
Subject key identifier: E9:30:5C:E2:72:FD:D0:C1:AC:D6:1D:A8:FB:10:46:D9:D3:60:E6:30
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2EB80D490C50C967E35722D288D4BB96
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6TBc4nL90MGs1h2o-xBG2dNg5jA.roa
Signing time: Sat 14 Oct 2023 15:04:55 +0000
ROA not before: Sat 14 Oct 2023 15:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:2eb7:5348/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2e:b8:0d:49:0c:50:c9:67:e3:57:22:d2:88:d4:bb:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 15:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9305ce272fdd0c1acd61da8fb1046d9d360e630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2b:e7:16:e2:5c:2d:be:a1:9b:46:0b:06:71:
dc:d9:89:61:94:14:b2:1e:69:e8:0d:49:50:07:b5:
66:c8:a9:0b:b4:1a:a2:14:b4:f2:28:b6:14:2f:55:
44:70:41:f3:d5:c6:f5:5d:5b:9a:b4:96:eb:38:27:
fb:73:93:32:43:f4:52:5c:7a:be:0f:eb:f7:e6:21:
9d:a7:04:42:5b:16:77:57:26:e8:93:8c:9f:fa:82:
78:01:8f:a4:a4:86:31:f5:22:68:a8:4d:be:68:90:
28:48:6d:c7:71:1d:d7:0d:cb:36:02:40:bf:13:a4:
66:00:4c:1d:15:e8:c5:20:7d:7b:1a:74:ed:db:1a:
51:c6:41:c1:3e:19:60:63:01:d7:10:5c:81:03:ae:
27:5c:f0:9f:13:97:39:af:0e:08:90:34:c8:8a:6c:
b1:4b:44:da:54:b7:4d:23:1f:d5:3c:b0:5a:2b:10:
cf:31:7f:0d:a2:e0:a1:0a:94:22:e2:07:3c:8c:91:
90:63:75:58:c3:44:f0:92:db:9d:5d:6f:4d:84:38:
34:fc:db:c1:d9:49:f6:5f:7b:2f:82:f3:66:0a:de:
b0:ce:5e:02:47:56:0a:ee:94:17:31:28:28:61:ec:
9b:14:c1:99:82:c3:5d:30:c0:88:ce:45:09:74:20:
e6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:30:5C:E2:72:FD:D0:C1:AC:D6:1D:A8:FB:10:46:D9:D3:60:E6:30
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6TBc4nL90MGs1h2o-xBG2dNg5jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:44:40:bd:c6:16:33:a6:9c:7d:35:73:44:1c:54:38:b0:e2:
f2:64:6c:47:42:41:42:f9:3c:2a:cd:6c:0c:63:81:09:1d:23:
cc:19:e0:41:1b:5b:fb:a9:41:46:27:fc:b2:9e:fa:43:bf:9f:
5d:44:eb:90:31:de:ff:44:58:e6:5c:4a:c5:1b:37:16:ee:c5:
89:05:7d:cd:39:ed:1c:6e:0f:56:3c:54:f1:d1:d3:01:2d:fc:
0d:f8:69:04:fe:49:00:ed:da:96:6f:01:8d:8c:c4:e8:04:92:
bd:19:c9:fc:82:8d:f0:f8:67:83:29:03:e6:71:d7:fe:0b:bd:
71:1d:63:a7:8e:4b:ee:a9:bd:f3:ed:07:c2:d7:88:15:45:b2:
e8:70:ab:bc:4a:93:b2:80:79:df:22:03:ac:53:46:5e:cb:ec:
af:42:0c:ef:c8:fd:7e:06:2c:3a:06:2e:dc:17:df:01:fb:b8:
2a:f0:37:5a:a7:ae:c5:97:53:f9:35:bc:18:78:45:2f:e1:23:
ce:71:56:72:9c:9a:cb:1a:5d:37:53:e5:e2:11:7c:92:70:3e:
58:cf:fa:37:c0:e5:4f:10:73:cd:48:92:f4:81:3b:68:5c:bd:
0e:f9:b0:49:84:58:23:56:a3:3c:b5:30:bc:5c:ad:c0:7f:57:
5d:1d:21:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:54:27 2025 by rpki-client