Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6e6_ez2XtE8o7TqEC7IAfFunbAM.roa
File: 6e6_ez2XtE8o7TqEC7IAfFunbAM.roa (raw, json)
Hash identifier: OhtAq1WE8j5XQNmEo7DhqUuZq43Ra2xmtRM3UVUeaqw=
Subject key identifier: E9:EE:BF:7B:3D:97:B4:4F:28:ED:3A:84:0B:B2:00:7C:5B:A7:6C:03
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADFC145174379F6908389E3790241BD4A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6e6_ez2XtE8o7TqEC7IAfFunbAM.roa
Signing time: Fri 29 Sep 2023 07:04:59 +0000
ROA not before: Fri 29 Sep 2023 07:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:dfc0:d627/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:c1:45:17:43:79:f6:90:83:89:e3:79:02:41:bd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 29 07:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9eebf7b3d97b44f28ed3a840bb2007c5ba76c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:86:f9:fa:3c:12:d5:94:df:05:94:77:02:
2f:f0:c8:81:2f:91:51:25:af:11:cf:86:f9:a5:ee:
a0:db:79:9b:25:d3:9a:b2:74:9f:54:c7:2e:5c:27:
4e:9d:27:30:5a:ab:3c:01:a4:1c:60:da:b5:0a:ed:
a7:51:c5:24:f4:3b:7e:62:9f:89:52:ad:47:c4:fc:
9e:7d:a9:a6:1b:4d:31:fe:40:f4:5a:e4:ac:ea:38:
e3:09:58:35:31:7a:99:63:b2:80:94:6e:01:f2:ea:
39:31:4c:d3:fa:5a:f2:31:48:92:e6:0d:c9:3d:2c:
7f:7b:99:53:6e:ab:19:97:40:da:42:0a:ac:1e:a9:
63:69:7a:42:54:cc:91:b1:29:73:c5:36:55:96:12:
15:2f:38:12:d8:10:cb:fd:5c:93:92:3e:05:3c:2a:
2a:ac:4e:09:2f:c2:34:5f:d8:70:6a:9a:b9:7d:a4:
86:ca:4a:46:b8:f9:98:a2:d7:c7:22:b4:35:4b:58:
b8:34:cb:ec:8f:db:74:91:f8:d8:b2:49:28:02:16:
d5:f6:07:e3:e2:28:62:5e:8c:c6:0a:31:1c:8f:ea:
ef:fc:e9:12:5e:97:30:25:f6:92:cd:8f:99:1d:06:
69:95:93:a6:07:4b:59:40:ac:b9:2c:bf:45:13:4a:
f4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EE:BF:7B:3D:97:B4:4F:28:ED:3A:84:0B:B2:00:7C:5B:A7:6C:03
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6e6_ez2XtE8o7TqEC7IAfFunbAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:ad:94:60:a4:41:c3:64:99:db:4b:9f:75:dc:39:2a:04:b1:
2b:fe:6f:6f:80:02:06:6f:b6:9a:97:7d:4f:f9:92:3f:c0:4b:
17:01:5f:fc:95:c3:11:a9:f2:57:bf:b7:d3:cc:77:82:23:4b:
b5:8a:cb:a7:ba:0b:52:56:6c:8d:1c:d0:3b:f8:80:2b:bc:4e:
d2:02:3c:6c:1a:40:5f:1c:b6:54:3c:c0:ba:ae:b7:4a:71:69:
cb:4a:36:e7:9d:5f:30:b2:72:fb:43:2f:02:e1:0f:94:72:6d:
b4:91:6e:c2:36:8b:40:28:6a:9d:00:3e:78:8c:ca:03:2e:10:
2e:8b:eb:af:3f:a0:5e:2a:ad:ee:18:af:fc:15:42:32:58:4a:
37:c3:b0:52:02:fb:95:78:4a:57:3a:df:c5:93:6b:4c:c8:f9:
58:2a:b8:93:6d:f3:65:48:84:39:69:4b:49:39:81:8d:c8:f4:
41:b3:00:6c:44:77:8e:cd:1f:65:ab:8e:f8:b9:ed:30:59:21:
95:72:aa:d9:81:3b:13:a4:91:61:03:88:3e:d7:94:46:5a:37:
6c:d5:7e:de:7d:67:d6:e4:f7:96:c6:e1:d2:2d:a3:7e:94:26:
b0:c8:b6:a1:35:ee:31:64:79:b2:41:9f:29:b5:7c:f2:79:cf:
66:79:01:de
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrfwUUXQ3n2kIOJ43kCQb1KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI5MDcwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWVlYmY3YjNkOTdiNDRmMjhlZDNhODQwYmIyMDA3YzViYTc2YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQSG+fo8EtWU3wWUdwIv8MiBL5FR
Ja8Rz4b5pe6g23mbJdOasnSfVMcuXCdOnScwWqs8AaQcYNq1Cu2nUcUk9Dt+Yp+J
Uq1HxPyefammG00x/kD0WuSs6jjjCVg1MXqZY7KAlG4B8uo5MUzT+lryMUiS5g3J
PSx/e5lTbqsZl0DaQgqsHqljaXpCVMyRsSlzxTZVlhIVLzgS2BDL/VyTkj4FPCoq
rE4JL8I0X9hwapq5faSGykpGuPmYotfHIrQ1S1i4NMvsj9t0kfjYskkoAhbV9gfj
4ihiXozGCjEcj+rv/OkSXpcwJfaSzY+ZHQZplZOmB0tZQKy5LL9FE0r0/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOnuv3s9l7RPKO06hAuyAHxbp2wDMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNmU2X2V6Mlh0RThvN1RxRUM3SUFmRnVuYkFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKatlGCkQcNkmdtLn3Xc
OSoEsSv+b2+AAgZvtpqXfU/5kj/ASxcBX/yVwxGp8le/t9PMd4IjS7WKy6e6C1JW
bI0c0Dv4gCu8TtICPGwaQF8ctlQ8wLqut0pxactKNuedXzCycvtDLwLhD5RybbSR
bsI2i0Aoap0APniMygMuEC6L668/oF4qre4Yr/wVQjJYSjfDsFIC+5V4Slc638WT
a0zI+VgquJNt82VIhDlpS0k5gY3I9EGzAGxEd47NH2Wrjvi57TBZIZVyqtmBOxOk
kWEDiD7XlEZaN2zVft59Z9bk95bG4dIto36UJrDItqE17jFkebJBnym1fPJ5z2Z5
Ad4=
-----END CERTIFICATE-----
Generated at Mon Jul 28 21:48:39 2025 by rpki-client