Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6XR-hUYT-iwITk008kY-402EA_g.roa
File: 6XR-hUYT-iwITk008kY-402EA_g.roa (raw, json)
Hash identifier: wuMbwsHzBVigKRc9GsrcUrX79jwEkRV+Qs7UQJnsRtk=
Subject key identifier: E9:74:7E:85:46:13:FA:2C:08:4E:4D:34:F2:46:3E:E3:4D:84:03:F8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EE1E2E39B0F7F16081349D2F8BEA5C518
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6XR-hUYT-iwITk008kY-402EA_g.roa
Signing time: Mon 15 Apr 2024 13:12:06 +0000
ROA not before: Mon 15 Apr 2024 13:12:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:e2:e3:9b:0f:7f:16:08:13:49:d2:f8:be:a5:c5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 15 13:12:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9747e854613fa2c084e4d34f2463ee34d8403f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:35:4d:b6:0b:39:b9:b7:88:ad:8b:9c:68:
95:26:01:37:4a:ba:9b:51:87:85:c8:45:22:86:c5:
bf:76:b1:fc:35:1f:9a:ac:dd:b1:30:bd:51:e9:75:
23:80:0a:26:f1:c5:51:ca:75:44:4a:a0:6a:7f:9d:
c8:90:fb:0b:b5:ee:68:5d:4b:c6:e1:08:86:83:a5:
de:1b:57:a9:4d:ee:1e:23:42:8a:9b:c7:0f:5e:fe:
2d:86:87:f1:ce:85:41:b0:61:51:dd:7d:ee:0e:b4:
0e:86:d3:f1:0f:0c:77:77:09:c0:26:b2:d0:a4:f2:
9c:20:bb:db:75:8a:40:a7:c2:f0:b6:e3:30:42:2c:
ef:c1:31:17:41:18:db:af:4b:e8:95:81:d7:70:42:
39:9b:09:4c:d9:2b:57:79:dd:42:f0:d2:91:af:05:
15:cd:3f:20:83:1e:2d:fd:e6:6c:4c:b6:1e:cf:48:
c3:2d:90:ad:ae:8d:e8:29:b3:11:76:22:00:0d:dd:
50:1f:b7:7b:24:e6:37:2f:11:2a:62:33:9a:f6:8a:
d6:9d:39:f2:fa:e6:a0:45:4c:42:6f:e3:b4:ba:f1:
39:8a:07:4b:dd:59:2b:b2:2c:78:dc:3e:bf:ec:ac:
4f:f0:96:ae:55:27:aa:e6:21:64:0a:d3:6d:24:b8:
33:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:74:7E:85:46:13:FA:2C:08:4E:4D:34:F2:46:3E:E3:4D:84:03:F8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6XR-hUYT-iwITk008kY-402EA_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:c3:39:24:e6:99:68:82:4d:10:2b:af:52:1a:23:d6:78:fd:
aa:1c:d5:87:85:47:ef:8f:69:ea:0c:89:58:5c:9a:33:ec:6e:
2a:bd:15:b2:55:c3:13:7d:28:07:36:55:95:21:9b:8e:25:cd:
6b:f4:83:69:e1:2b:8a:8f:cd:a5:26:16:c4:70:92:c3:86:3b:
3e:b6:57:d5:33:05:b1:2f:fe:d6:d7:85:2f:92:97:a4:8b:cd:
8d:0d:2b:52:b6:6a:5d:c3:81:67:13:0c:c6:f6:2f:fc:4c:e5:
04:bb:0f:c2:ba:aa:dd:4a:de:d4:ff:26:32:01:f6:79:26:b5:
90:86:a6:e2:bd:12:32:ad:01:ff:aa:d3:90:59:e5:e9:ec:6f:
0f:ef:d1:93:be:e5:ea:fb:00:f8:bb:67:73:0b:d9:c8:6e:b4:
8d:a5:67:31:82:c8:c5:81:87:6a:77:1d:f8:d6:b6:d5:ca:50:
63:17:28:d0:ff:fd:65:0e:8a:95:75:6e:2f:4c:2a:ad:37:15:
19:29:ac:08:a7:06:4f:bf:d5:2a:dd:44:90:3e:a7:73:68:d1:
bc:e7:a8:f3:84:ff:d3:0b:93:64:d2:04:96:25:39:e2:a5:2e:
b1:fd:db:56:a2:00:18:14:9d:42:6b:5e:92:48:36:66:52:73:
06:77:68:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:15:20 2025 by rpki-client