Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/6KPlwMePZuQguVtn69S9mvQHcww.roa
File: 6KPlwMePZuQguVtn69S9mvQHcww.roa (raw, json)
Hash identifier: 9/t0clqpE9hSL62SSXUMPOdiZiA7jBlppgeghWVVOMU=
Subject key identifier: E8:A3:E5:C0:C7:8F:66:E4:20:B9:5B:67:EB:D4:BD:9A:F4:07:73:0C
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EEBBAB68E5F5E3420F02E5BEE5194C787
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/6KPlwMePZuQguVtn69S9mvQHcww.roa
Signing time: Wed 17 Apr 2024 11:04:25 +0000
ROA not before: Wed 17 Apr 2024 11:04:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:ebba:a872/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:eb:ba:b6:8e:5f:5e:34:20:f0:2e:5b:ee:51:94:c7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 17 11:04:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8a3e5c0c78f66e420b95b67ebd4bd9af407730c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:aa:50:ac:c7:b9:b8:f1:2c:39:6a:44:32:
1b:cf:48:6b:28:6e:e2:d1:fe:0b:15:3d:34:88:f9:
99:35:5c:d7:17:74:db:92:a2:43:4e:3b:f2:6c:e8:
3b:93:d3:60:05:39:e5:c7:53:75:1a:ea:3a:6e:12:
3e:6d:4c:1a:f3:c8:92:44:ce:22:de:ca:df:e6:34:
69:e3:9f:53:80:18:bc:14:12:03:84:2f:18:2e:f0:
71:ba:3a:ec:11:0c:12:9e:4c:9d:0a:12:d0:6b:80:
15:42:76:4f:25:39:76:34:35:22:5b:08:40:ee:8a:
82:19:33:07:b5:a1:60:4e:01:47:e8:17:97:f3:d6:
21:f3:69:ee:f7:03:c4:8d:d0:f2:e1:28:f3:d7:b9:
28:b9:5b:3f:df:86:76:2f:06:76:24:02:6a:1b:53:
67:36:54:ca:f9:91:fa:84:a5:21:a9:ec:4b:05:09:
5f:0a:ac:79:e2:9a:47:20:ac:bd:f7:e9:c3:91:68:
78:ed:85:e1:47:8f:01:8a:6b:f2:14:03:c5:6a:98:
0b:32:c9:7d:bf:02:2d:1c:96:90:e7:2f:af:19:7d:
8f:df:cb:eb:43:a7:69:9d:e2:96:d1:c3:bf:e7:17:
c4:f1:29:2f:22:44:11:50:34:7f:1c:c3:bf:3a:c5:
ee:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A3:E5:C0:C7:8F:66:E4:20:B9:5B:67:EB:D4:BD:9A:F4:07:73:0C
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/6KPlwMePZuQguVtn69S9mvQHcww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:a5:1a:80:22:41:78:d9:43:27:ff:af:a1:8f:8b:e2:33:b2:
a4:29:54:9a:28:5f:d9:6d:9c:43:b7:11:9d:6d:7b:7c:9a:2f:
4c:05:e5:54:5b:71:70:fb:bc:b1:7d:d3:8f:09:b2:5b:6e:15:
f8:26:28:a2:b2:a2:f0:1f:13:00:3e:96:a2:5c:c7:0a:05:02:
7c:d6:a9:85:19:1b:0f:a9:fa:22:ea:70:fb:00:72:06:a2:39:
29:47:c2:28:a0:64:38:36:1b:41:dc:67:74:42:25:5b:ab:bf:
76:1d:78:b5:02:31:cd:55:dc:1c:73:59:e4:a5:e4:38:02:ef:
02:5a:e5:97:28:89:c8:4e:6c:77:a8:be:6e:d3:3b:86:ba:f5:
d3:4e:d9:23:2e:b3:41:33:8e:3d:31:85:a0:3e:37:e8:f8:6f:
f8:fb:1b:f0:ec:6f:20:67:0d:31:3d:60:2f:8e:be:52:5b:5a:
3d:8d:8c:2e:56:e7:ae:ad:31:1b:b1:86:05:14:9f:9e:57:25:
c6:18:b4:2a:d2:35:4e:5e:09:cf:4f:54:a8:90:b6:03:95:44:
c3:c1:c0:61:90:c2:c1:00:64:02:6a:3a:d8:c3:0f:ca:b0:e6:
1e:35:7b:77:44:b3:7c:d6:fb:51:92:0d:99:47:33:39:3b:89:
39:6f:2e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:44:14 2025 by rpki-client