Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6yIFLdraWHonkac8FmZY9_33xZc.roa
File: 6yIFLdraWHonkac8FmZY9_33xZc.roa (raw, json)
Hash identifier: K9MM2w9w7hhV78mFeGoG1m+IzF0LMyB1RaJhPGcQZio=
Subject key identifier: EB:22:05:2D:DA:DA:58:7A:27:91:A7:3C:16:66:58:F7:FD:F7:C5:97
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B491CF37BF4B173FBA5ADD1F95E9B64A1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6yIFLdraWHonkac8FmZY9_33xZc.roa
Signing time: Thu 19 Oct 2023 18:05:15 +0000
ROA not before: Thu 19 Oct 2023 18:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:491c:327f/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:49:1c:f3:7b:f4:b1:73:fb:a5:ad:d1:f9:5e:9b:64:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 18:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb22052ddada587a2791a73c166658f7fdf7c597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:fc:25:99:05:68:f4:09:3b:66:c0:df:87:
34:74:65:c1:78:89:a9:01:a7:af:e8:64:64:9a:60:
8c:55:70:da:3f:82:02:07:8d:c8:c5:30:ca:fe:b9:
1d:7a:19:0a:3d:1b:be:62:dc:5c:8a:00:26:ad:7c:
18:1b:c3:2f:f8:32:8c:a2:b9:8a:26:86:26:9c:41:
55:1b:52:e5:f5:4b:a5:b6:90:70:c7:91:05:49:f0:
86:96:6f:54:71:3b:eb:12:d8:74:e2:cb:4b:a7:e4:
d5:60:ba:95:e9:46:f0:e9:fc:4d:44:89:1a:19:6f:
3e:1b:d0:90:eb:c2:b2:c3:6d:51:72:6d:8a:de:0f:
28:45:d1:60:27:3d:53:d9:c8:ce:15:ec:7c:9b:c4:
ad:84:8d:1e:10:00:bd:35:b6:5f:7b:e0:fc:c2:80:
85:32:67:05:d0:2a:e0:ca:ac:dd:3b:7d:96:89:76:
67:9f:72:c0:12:46:d9:14:ec:39:4f:c0:94:4a:7c:
56:41:05:a2:69:d9:c4:5c:8b:98:76:7c:01:e6:ab:
2b:98:88:4c:3d:0e:b5:a2:63:be:26:d4:65:8e:bf:
f8:01:37:96:92:c9:76:24:a1:3c:7b:99:ca:cb:b1:
ea:6c:74:cc:3e:03:5b:be:69:94:11:6c:81:79:0e:
f5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:22:05:2D:DA:DA:58:7A:27:91:A7:3C:16:66:58:F7:FD:F7:C5:97
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6yIFLdraWHonkac8FmZY9_33xZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:7c:b7:0d:66:43:62:18:84:f0:89:88:e3:f7:e8:50:11:73:
f1:58:b9:80:ef:f9:ca:7a:69:d2:96:c0:cf:68:08:85:32:b4:
30:8e:5e:87:21:6e:ec:4c:1a:bb:f6:32:27:07:f6:7a:92:3c:
fb:a2:c6:62:35:f4:82:0a:dc:1a:f0:ec:58:bc:f3:42:d3:a4:
9b:d0:a0:1f:ec:f8:66:bd:44:02:72:69:05:c3:52:8d:55:f9:
90:24:e3:c0:cc:2a:04:44:d5:eb:44:73:d5:12:f2:99:5b:52:
68:63:00:64:f9:75:06:6c:14:94:fe:c9:00:c3:40:c0:10:60:
51:74:bb:3b:e4:a9:20:8c:72:21:91:52:2e:85:61:2e:2f:83:
16:9c:f1:ab:d4:68:79:e4:46:ac:cd:b9:a6:f3:4d:0d:1e:16:
f3:94:43:88:c2:a0:fb:dd:cd:c7:9e:6a:9a:ca:c0:47:a2:2e:
79:bf:a6:6b:5c:e1:07:ed:9d:a4:3d:3b:31:38:57:db:9d:e2:
5c:41:72:cd:43:37:fd:fc:06:70:a8:04:5d:4d:20:bc:5e:3d:
5a:42:12:de:ca:a2:84:67:6b:27:8a:3d:7a:48:a1:8e:7c:f8:
f2:e8:38:a0:de:01:10:81:5d:91:2e:73:b7:34:89:c4:c5:67:
1d:d5:1b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:16:45 2025 by rpki-client