Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/x6Pb4xVmbYW8dU1SRgJlPL8wWiE.roa
File: x6Pb4xVmbYW8dU1SRgJlPL8wWiE.roa (raw, json)
Hash identifier: xBN7Hy4lgSyfIsPNylKVOZ+TccxnCa8Aefgf1/N2F4w=
Subject key identifier: C7:A3:DB:E3:15:66:6D:85:BC:75:4D:52:46:02:65:3C:BF:30:5A:21
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4160894713B69D9F1A284A9D73CEEF1F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/x6Pb4xVmbYW8dU1SRgJlPL8wWiE.roa
Signing time: Wed 06 Dec 2023 23:04:54 +0000
ROA not before: Wed 06 Dec 2023 23:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:415f:e1fa/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:41:60:89:47:13:b6:9d:9f:1a:28:4a:9d:73:ce:ef:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 23:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7a3dbe315666d85bc754d524602653cbf305a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:81:d1:85:82:c8:b9:ac:90:1a:54:3a:b7:
fd:8a:38:8e:85:79:0f:2d:6b:bd:c6:aa:90:2e:b7:
2d:ad:06:7d:b2:6c:72:dd:f3:72:fc:aa:11:45:a4:
56:cb:6c:92:1c:ca:db:6e:8c:14:e7:e9:56:70:f0:
c0:1b:2a:8f:37:59:ed:67:9b:56:11:f5:2f:96:d4:
7d:4f:03:ca:5b:50:f8:39:62:78:79:99:8e:d6:8b:
e1:43:47:35:36:06:b3:65:e5:0b:5c:73:7a:48:7f:
9b:aa:c9:4b:70:42:3b:70:ff:34:01:47:bb:cb:18:
40:8e:d3:ac:77:09:0f:1e:7c:ad:05:c8:d3:f1:ba:
d3:dd:19:16:af:0d:34:fe:dc:27:1d:9d:bd:41:8b:
9d:f9:c1:e4:9c:49:0d:ab:92:11:9d:ba:be:2e:0b:
f6:ef:58:12:ae:45:54:db:f8:2d:bc:fb:38:39:43:
60:15:eb:70:c9:32:fe:c1:dc:44:75:3a:b4:86:8b:
1f:c1:59:96:83:be:19:7e:49:45:a5:fd:a5:39:e9:
cf:2d:7b:b8:de:b5:66:0d:d2:de:20:5d:84:8b:6e:
cc:15:66:ef:df:ca:08:e4:8c:71:04:48:c8:48:46:
84:16:e7:e9:56:04:df:31:e2:90:0b:91:43:7e:d1:
c5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A3:DB:E3:15:66:6D:85:BC:75:4D:52:46:02:65:3C:BF:30:5A:21
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/x6Pb4xVmbYW8dU1SRgJlPL8wWiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:e0:ab:31:62:30:07:c1:5c:a8:8d:b4:27:db:56:bf:2c:b0:
a8:bc:df:1f:d4:7a:01:c1:7a:b2:5f:78:d9:3c:7e:3b:fb:39:
b4:71:01:54:60:f2:dc:8e:7e:4c:3b:4b:56:2e:ac:12:f0:ee:
be:79:ee:db:cb:ea:cd:5a:8f:3c:36:af:f4:74:a3:f3:46:97:
31:23:2b:e7:d4:9b:be:d5:f7:b9:7e:8e:f2:7d:98:f3:84:ea:
90:70:01:9d:58:ea:c3:f9:54:29:ff:82:e9:c5:61:e2:59:c1:
9f:d2:15:42:1f:5a:98:20:03:df:f0:00:b9:09:27:3c:07:8d:
c1:88:32:53:a3:b8:8e:2f:9b:4e:79:12:01:97:a0:35:8d:39:
39:ca:71:07:42:4d:d4:4b:88:05:a9:8f:80:f8:8e:7a:cc:50:
dc:dd:cb:26:3d:4e:6a:4a:b9:39:48:42:ed:7e:c5:09:23:eb:
eb:de:47:e1:fb:fd:6d:85:68:db:5c:e8:50:74:c7:a2:df:28:
12:09:79:e8:44:e0:9d:4c:33:c1:b2:93:f7:53:08:2e:5b:cf:
51:03:a0:f7:d2:38:44:8d:62:07:b3:35:ce:be:70:9c:46:8e:
ed:05:a6:9d:a6:62:c6:26:64:ee:eb:a0:16:55:ab:2a:52:02:
25:dd:d6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:14:22 2025 by rpki-client