Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6d6eDF41nnJHaXbFPgSUpD3aCx8.roa
File: 6d6eDF41nnJHaXbFPgSUpD3aCx8.roa (raw, json)
Hash identifier: JWke91EQ44m+DBDrAZKGOUE90vufYo5yO0nv2tPFeRA=
Subject key identifier: E9:DE:9E:0C:5E:35:9E:72:47:69:76:C5:3E:04:94:A4:3D:DA:0B:1F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B91A3D97939C6465D665F2BF874BE70CE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6d6eDF41nnJHaXbFPgSUpD3aCx8.roa
Signing time: Thu 02 Nov 2023 20:05:16 +0000
ROA not before: Thu 02 Nov 2023 20:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:91a3:389/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:91:a3:d9:79:39:c6:46:5d:66:5f:2b:f8:74:be:70:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 20:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9de9e0c5e359e72476976c53e0494a43dda0b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c5:5b:bb:ac:74:39:87:42:a1:00:ce:9d:ad:
2b:05:76:b4:d0:54:08:11:aa:17:fb:84:8e:c2:75:
1f:7a:75:ca:69:4b:d2:d1:53:79:ab:db:ee:dd:75:
1b:44:af:46:a4:13:22:0a:7c:b7:be:c5:0c:c2:be:
7f:24:35:ab:c9:a8:1b:ed:d6:ec:28:8e:ee:9c:c3:
65:98:4e:f2:71:bf:e4:5d:f7:15:0b:f2:7b:e2:d5:
7c:0b:8d:ff:74:53:76:56:1e:94:89:7d:cb:7e:2f:
2e:f4:0d:8c:b8:cd:2f:4b:0b:6a:d3:b2:99:66:4f:
7f:55:c2:6b:cb:c7:2f:22:c6:77:7b:dc:98:5c:3a:
0e:1d:57:a5:f0:0c:ea:ec:f3:f0:5e:83:a2:f4:c4:
63:a8:c3:de:b9:dd:0d:72:4d:66:32:bb:ce:b1:c2:
8c:24:f1:78:46:05:df:b6:ad:72:28:38:f6:41:4e:
e9:3d:3c:f3:6c:53:d5:8a:6d:cd:e2:fd:32:da:75:
fe:f3:c5:4c:9c:7e:a2:83:77:6b:90:3e:02:94:8d:
0b:9c:09:3d:ea:70:10:da:ee:5e:4c:69:a8:f3:4d:
bd:86:4d:8d:6a:2d:c5:63:6e:6a:c9:7f:37:8d:9f:
0f:73:5b:64:dc:91:c5:a3:d7:64:16:fc:cc:78:9e:
ad:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DE:9E:0C:5E:35:9E:72:47:69:76:C5:3E:04:94:A4:3D:DA:0B:1F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6d6eDF41nnJHaXbFPgSUpD3aCx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:73:ed:9f:30:94:24:b5:70:c5:83:05:25:8b:0d:0a:11:13:
90:05:dc:c2:81:e8:49:2e:14:5c:45:49:73:f3:03:16:de:e4:
71:d4:36:43:64:f6:0a:6f:6b:2c:21:31:61:1d:d5:48:18:bb:
4b:b3:60:b6:9c:7e:5a:c7:2d:7c:b2:fe:a2:8b:30:ca:c8:44:
bf:ea:a3:8f:20:84:6a:51:6d:db:be:f1:2f:e3:91:b3:7c:8d:
e3:d0:ad:b4:be:01:c4:3d:b8:39:ce:af:b1:d7:29:5c:85:8d:
00:a7:a0:bf:e5:a0:7f:0d:23:c3:4c:73:c8:ff:aa:8d:30:5c:
f8:44:cc:14:9e:a3:f1:6f:18:77:66:88:ad:7b:a5:5c:fb:a8:
1e:da:b3:f9:66:39:3e:64:76:5a:79:1e:0f:b9:8b:ee:06:f4:
bb:6c:73:29:66:9a:e8:13:25:99:47:82:b4:52:d5:b1:f5:1d:
f7:3f:6f:28:a7:1a:6d:cf:6c:29:23:d1:85:77:14:56:21:be:
c8:4f:3d:31:84:f2:a0:ba:15:33:a0:c4:97:55:fe:5a:d5:05:
be:95:ff:85:12:28:74:79:c3:4a:e6:cf:06:fa:eb:f9:c0:d7:
03:73:54:58:d1:74:de:b1:62:11:a9:9f:cf:08:3b:7e:80:36:
6d:29:b2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:47:03 2025 by rpki-client