Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6lzFL0MdksDhfuWpLvmulEAXUK4.roa
File: 6lzFL0MdksDhfuWpLvmulEAXUK4.roa (raw, json)
Hash identifier: 1AdWBMlvtFdPsgyyvPo5kRJCw1QOeaNtyYZLUe5pah4=
Subject key identifier: EA:5C:C5:2F:43:1D:92:C0:E1:7E:E5:A9:2E:F9:AE:94:40:17:50:AE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE740BD0DBF54B27CAD67EDE8B8CE982F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6lzFL0MdksDhfuWpLvmulEAXUK4.roa
Signing time: Sun 19 Nov 2023 11:04:21 +0000
ROA not before: Sun 19 Nov 2023 11:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:e740:9e69/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e7:40:bd:0d:bf:54:b2:7c:ad:67:ed:e8:b8:ce:98:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 11:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea5cc52f431d92c0e17ee5a92ef9ae94401750ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b3:4e:b4:0e:f7:62:51:ac:a3:e4:11:dc:fd:
f0:a8:13:51:a4:78:4e:8f:2d:37:8e:21:4c:cb:31:
9b:da:b3:1a:b1:f7:46:bc:31:81:ac:ae:ec:e6:df:
2f:90:27:2f:09:22:43:8c:cb:52:1b:e3:3e:42:3a:
21:c9:6a:a6:b6:63:4b:2d:8a:30:36:5c:98:e6:8a:
d3:e8:23:a0:ef:f0:b0:3d:48:cc:9d:89:83:a8:24:
34:ec:92:7f:7e:7a:3d:b5:05:aa:a6:10:85:1a:f4:
e7:b1:25:77:18:a8:f1:8d:d4:7d:6a:59:2a:d9:72:
11:aa:67:19:63:a5:58:d3:6d:43:00:9c:4b:4d:02:
16:d8:b9:29:bd:1e:1a:db:42:df:be:97:17:c0:13:
75:18:cd:a9:e1:44:78:c4:c9:4e:81:8f:ff:0d:67:
a0:f1:03:e7:2a:f7:38:5d:da:16:51:d9:31:ee:0e:
99:db:b9:f4:c0:c7:02:83:53:8c:91:69:b8:a2:f1:
b5:d7:fa:7b:eb:93:dc:cd:77:c7:8a:97:6e:62:e7:
7e:0e:b5:f9:e9:59:0e:c5:bc:2f:69:2d:a6:ee:50:
9e:a3:b8:f1:eb:ba:97:33:57:29:df:cb:5f:32:c2:
d5:c4:1f:49:e1:3c:4d:47:d3:7f:3f:1e:26:76:2e:
24:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5C:C5:2F:43:1D:92:C0:E1:7E:E5:A9:2E:F9:AE:94:40:17:50:AE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6lzFL0MdksDhfuWpLvmulEAXUK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:aa:4c:b2:6a:9b:42:11:ba:05:9f:57:aa:57:91:8b:cb:c7:
07:a5:66:3f:28:08:24:6b:71:a4:80:7b:09:1c:62:a0:b7:2b:
cb:5a:4b:c8:c8:0b:61:8a:b5:24:ac:e1:66:83:29:bd:d3:30:
61:d6:4a:eb:2e:8f:41:b8:e2:f9:cb:84:3d:84:fd:b5:f2:16:
5b:da:d3:0e:98:d0:72:95:25:95:75:d3:51:86:88:47:cd:9a:
09:a5:83:18:59:68:d1:51:88:18:56:17:91:16:63:f5:f0:58:
04:e9:dc:71:f7:11:ba:3a:64:98:dd:26:d5:1b:e4:91:62:71:
6d:4a:bb:cc:4a:24:a7:5f:35:c9:5f:26:01:8b:d4:71:41:d3:
e5:3f:fb:c3:33:67:e1:30:71:3d:1f:3c:f3:82:df:12:26:92:
6c:16:cc:bf:0c:1b:03:e2:07:1f:51:c8:de:77:06:da:5a:24:
cf:04:74:53:28:cb:ad:71:ef:e5:e4:b3:c2:22:3b:0c:19:b0:
f2:ce:61:ce:70:fa:2c:da:e4:22:63:ab:be:6b:cf:54:96:43:
f6:c6:82:94:3b:d9:06:04:f5:8d:55:00:1d:9d:d3:eb:b1:6e:
7a:61:3a:38:97:b7:ee:2d:25:f7:2b:23:71:35:98:0c:85:cb:
44:14:3c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 02:55:45 2025 by rpki-client