Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6Cyff92CwIyPAcI3wEuluK_f6zY.roa
File: 6Cyff92CwIyPAcI3wEuluK_f6zY.roa (raw, json)
Hash identifier: DPilfy0/MHLKzsDp2Y7dmAjyLlH3Fk5D+CLnhDeZ1yA=
Subject key identifier: E8:2C:9F:7F:DD:82:C0:8C:8F:01:C2:37:C0:4B:A5:B8:AF:DF:EB:36
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3D15E829481937D8A2F23A39AE4F5D20
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6Cyff92CwIyPAcI3wEuluK_f6zY.roa
Signing time: Wed 06 Dec 2023 03:04:54 +0000
ROA not before: Wed 06 Dec 2023 03:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:3d15:a861/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3d:15:e8:29:48:19:37:d8:a2:f2:3a:39:ae:4f:5d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 03:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e82c9f7fdd82c08c8f01c237c04ba5b8afdfeb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:8f:a8:1b:86:3a:10:c5:d2:df:93:d1:b5:
c7:0b:55:25:55:31:19:5e:ad:85:f5:bd:92:79:04:
94:11:cc:14:56:70:42:3c:0b:85:51:55:00:a9:29:
5c:76:fb:c2:6a:30:18:23:7a:b6:64:06:28:ab:57:
98:43:bb:63:8b:83:c3:9a:24:85:6e:bb:5a:bb:02:
14:e2:e2:d5:7d:0d:88:a0:20:d0:98:72:8b:5c:bf:
f9:e3:e9:2e:26:fa:72:f2:6e:79:20:19:dd:4d:75:
bb:f1:cc:1f:61:e2:78:62:8b:0f:33:8e:a8:82:c4:
b8:fa:8e:e7:7d:3d:c2:d6:ff:71:80:e3:06:78:f8:
59:95:b4:c0:4e:5d:67:c1:e6:9b:17:52:f2:81:a3:
0b:93:5f:54:06:77:f5:17:5d:cc:b8:a2:1e:aa:9c:
e3:30:f7:c0:41:30:00:75:29:8f:be:05:af:28:26:
f6:df:6d:ec:7a:cd:6e:4c:0e:6d:05:9d:b7:36:e4:
ab:13:99:5d:36:0c:23:21:91:ea:6a:ff:88:94:0b:
5b:d5:c7:b6:8d:73:1d:95:ea:01:81:42:02:19:ef:
8d:de:25:35:23:fc:8a:14:08:69:b9:0a:fe:d7:9e:
b6:74:e0:9a:ea:67:66:40:95:d8:30:29:2c:90:f8:
43:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2C:9F:7F:DD:82:C0:8C:8F:01:C2:37:C0:4B:A5:B8:AF:DF:EB:36
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6Cyff92CwIyPAcI3wEuluK_f6zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b9:4c:91:f3:95:8d:9f:3b:78:13:f6:b4:0a:81:fa:ec:a4:42:
3d:86:b8:8f:6f:28:4c:28:5e:8b:25:24:70:28:5a:68:96:d0:
5a:28:d7:01:00:c3:4d:5e:ca:2a:24:0a:b5:97:72:9b:5c:3b:
8a:4f:af:b7:27:56:c3:4d:2a:23:76:21:f0:5d:b4:7a:88:ee:
55:8c:59:3b:f0:9b:da:50:c6:76:43:8e:79:6e:2d:9c:ea:d6:
d4:78:49:16:f7:91:f3:16:a3:9c:5d:c7:43:9a:b9:96:f8:61:
0f:d5:93:45:0d:ed:14:ca:19:47:ac:60:ea:75:02:af:5b:74:
9f:6f:25:74:5c:2d:8e:56:0d:8e:ad:b9:e9:44:fa:f1:2b:8e:
21:8a:a6:33:14:08:1d:d4:49:b1:18:23:f7:96:fc:d6:60:63:
2d:2a:4b:ce:56:7e:ba:53:91:0a:17:93:f9:af:1a:03:5a:c4:
09:84:62:dc:89:82:49:e5:5b:99:51:d7:58:25:e8:7c:0a:6e:
41:81:03:0f:d3:a0:ac:68:d4:85:61:a3:6a:58:52:dd:b9:bf:
39:54:88:2a:ac:a9:0b:fd:0e:d8:10:7b:3e:10:e3:0a:e1:05:
78:62:e7:3f:40:d5:32:d9:88:a1:15:cb:06:6a:f7:ce:3b:26:
af:da:83:84
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYw9FegpSBk32KLyOjmuT10gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA2MDMwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODJjOWY3ZmRkODJjMDhjOGYwMWMyMzdjMDRiYTViOGFmZGZlYjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmWPqBuGOhDF0t+T0bXHC1UlVTEZ
Xq2F9b2SeQSUEcwUVnBCPAuFUVUAqSlcdvvCajAYI3q2ZAYoq1eYQ7tji4PDmiSF
brtauwIU4uLVfQ2IoCDQmHKLXL/54+kuJvpy8m55IBndTXW78cwfYeJ4YosPM46o
gsS4+o7nfT3C1v9xgOMGePhZlbTATl1nweabF1LygaMLk19UBnf1F13MuKIeqpzj
MPfAQTAAdSmPvgWvKCb2323ses1uTA5tBZ23NuSrE5ldNgwjIZHqav+IlAtb1ce2
jXMdleoBgUICGe+N3iU1I/yKFAhpuQr+1562dOCa6mdmQJXYMCkskPhDvwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOgsn3/dgsCMjwHCN8BLpbiv3+s2MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNkN5ZmY5MkN3SXlQQWNJM3dFdWx1S19mNnpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALlMkfOVjZ87eBP2tAqB
+uykQj2GuI9vKEwoXoslJHAoWmiW0Foo1wEAw01eyiokCrWXcptcO4pPr7cnVsNN
KiN2IfBdtHqI7lWMWTvwm9pQxnZDjnluLZzq1tR4SRb3kfMWo5xdx0OauZb4YQ/V
k0UN7RTKGUesYOp1Aq9bdJ9vJXRcLY5WDY6tuelE+vErjiGKpjMUCB3USbEYI/eW
/NZgYy0qS85WfrpTkQoXk/mvGgNaxAmEYtyJgknlW5lR11gl6HwKbkGBAw/ToKxo
1IVho2pYUt25vzlUiCqsqQv9DtgQez4Q4wrhBXhi5z9A1TLZiKEVywZq9847Jq/a
g4Q=
-----END CERTIFICATE-----
Generated at Wed Jun 11 10:27:35 2025 by rpki-client