Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9F6uyB9m7mRXNAJpmL_sWH0bsfQ.roa
File: 9F6uyB9m7mRXNAJpmL_sWH0bsfQ.roa (raw, json)
Hash identifier: QkHqa8t47C30ZoaqkBSAM8eLgjOSK1QxYFQVzmr4w9k=
Subject key identifier: F4:5E:AE:C8:1F:66:EE:64:57:34:02:69:98:BF:EC:58:7D:1B:B1:F4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA86383B72D8A39C861F98293EA66D2C1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9F6uyB9m7mRXNAJpmL_sWH0bsfQ.roa
Signing time: Tue 07 Nov 2023 06:06:15 +0000
ROA not before: Tue 07 Nov 2023 06:06:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:a863:238e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a8:63:83:b7:2d:8a:39:c8:61:f9:82:93:ea:66:d2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 7 06:06:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f45eaec81f66ee645734026998bfec587d1bb1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:19:46:24:14:bb:b8:5f:ee:d6:8f:2b:8c:
3a:bc:df:79:78:ab:81:c7:f6:fc:58:ef:b7:64:97:
7d:4e:64:b2:03:ac:f9:31:c7:2d:63:1e:3c:b3:65:
87:fc:f5:4a:e2:7c:5d:f2:83:0d:be:9d:4b:32:d3:
56:9b:b0:1a:b2:2a:68:5d:5f:27:51:d0:3d:c3:37:
0a:8b:e4:42:0b:d5:40:14:7d:7c:16:45:67:75:33:
4b:f7:c7:e0:3d:a2:2a:1e:4e:e4:d9:af:fc:40:c9:
d8:07:c1:16:1a:de:3d:3c:bf:ca:f5:3c:b2:9d:9b:
71:11:cc:2e:4f:32:13:48:a9:30:d7:29:68:53:22:
2c:44:64:60:92:0d:8d:1c:7f:9a:a4:52:ac:c2:9c:
d8:8c:fa:19:2a:ef:9b:4e:cc:10:96:7f:ab:19:f9:
69:43:52:0c:ec:d0:2f:52:4a:db:2f:e4:c9:5e:b4:
1a:6d:c9:2b:e3:d4:7a:85:df:6b:0b:80:49:e1:27:
a1:29:a8:e9:50:59:c0:48:5b:c2:50:6e:d3:8c:39:
4d:5e:b4:0b:af:52:82:92:bf:89:a3:65:69:48:dd:
f0:55:ac:08:4e:2a:d2:73:b0:6c:5c:0b:ea:4c:5a:
b0:88:f1:ff:d3:d9:f6:94:09:ed:11:65:c4:c2:09:
48:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5E:AE:C8:1F:66:EE:64:57:34:02:69:98:BF:EC:58:7D:1B:B1:F4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9F6uyB9m7mRXNAJpmL_sWH0bsfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:eb:cb:41:43:39:5e:36:c4:b5:ee:e8:af:1a:4d:7c:d7:34:
68:ce:00:75:bf:0f:9e:ac:ce:e8:04:2a:3a:96:02:e5:08:19:
be:45:21:1a:a9:ff:68:99:d7:84:6b:a3:3e:93:e9:08:89:a4:
c6:4a:9e:2d:ff:e3:2c:68:03:f5:97:65:7b:30:fa:92:56:ed:
00:46:eb:de:85:88:1f:ad:a1:ed:45:d6:0e:84:42:68:71:df:
fb:80:34:f2:4a:c6:c5:b6:4d:8c:ca:e7:7c:e7:c2:ab:79:63:
aa:c8:da:e2:5d:e1:03:93:9d:e3:9d:68:55:7e:40:63:6c:0e:
35:a3:3f:6e:2b:0a:56:ec:1e:67:4b:31:50:12:be:c4:6a:53:
41:97:5f:89:0f:66:23:6d:84:a3:60:cc:60:1f:fc:ad:cd:02:
53:a2:1f:39:6b:d9:dc:88:18:7d:40:58:0e:9a:1e:85:b1:7e:
ea:81:d3:93:b5:03:b6:04:1d:9d:01:07:a8:d9:06:69:39:37:
f7:3d:cb:e1:a3:4e:c2:19:3e:06:2c:b2:d5:d4:a4:ad:2e:27:
1e:9d:4e:cf:26:aa:3d:15:c1:6b:36:5f:c9:d4:17:d9:66:ce:
4f:64:c4:79:81:06:11:ed:25:a6:a9:a7:d9:9d:3a:9b:28:e4:
cc:6c:7e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:19:39 2025 by rpki-client