Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6FeXp49dBGdsJyjNxHgAFsTFXqc.roa
File: 6FeXp49dBGdsJyjNxHgAFsTFXqc.roa (raw, json)
Hash identifier: af3ZAaIPyW5fTBs7aDoy+3fF8VCPFJVobSjlzMNIXqE=
Subject key identifier: E8:57:97:A7:8F:5D:04:67:6C:27:28:CD:C4:78:00:16:C4:C5:5E:A7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B465DAEF6AE4F4456353C0AD036D6A0B2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6FeXp49dBGdsJyjNxHgAFsTFXqc.roa
Signing time: Thu 19 Oct 2023 05:17:06 +0000
ROA not before: Thu 19 Oct 2023 05:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:5d:ae:f6:ae:4f:44:56:35:3c:0a:d0:36:d6:a0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 05:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e85797a78f5d04676c2728cdc4780016c4c55ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:c5:2d:a0:7a:82:3c:cc:fc:a7:05:84:47:
f1:ae:f3:e7:78:4d:f5:bf:cf:cf:2e:ac:08:bc:67:
98:7a:ad:12:1f:35:35:3e:e1:84:35:e5:9c:f9:6b:
5e:00:a4:1e:fa:78:a2:d2:5f:ac:a7:42:79:2e:a5:
83:a2:e1:59:ad:79:a8:73:a5:d6:ac:6b:4d:60:60:
19:56:97:7d:f7:19:c0:9d:f0:25:0e:c2:4b:c2:04:
71:76:11:0a:4a:66:1d:e4:80:4b:91:76:03:e1:72:
12:02:3d:5e:a4:f1:b5:68:74:de:6c:ec:20:2c:5b:
9a:f5:06:a8:f0:69:55:16:ac:e4:50:b6:1d:22:28:
96:d3:02:8f:8e:b5:31:dc:f3:37:46:fb:08:53:ca:
8b:17:ca:ca:00:ac:56:e0:4b:e6:20:7a:fa:e4:a2:
62:c4:a8:78:2b:ce:c7:8d:11:e9:6f:1b:f0:00:df:
c8:20:51:21:8f:cc:5e:ab:a2:5d:2e:e3:78:cc:93:
44:05:b8:4b:6b:40:1d:7c:4c:9c:d2:1f:a4:8d:04:
11:63:22:76:21:0b:4d:43:e7:e8:21:32:2f:2d:c6:
d8:c0:a6:a4:bf:cd:69:a2:0a:d2:98:a6:42:0f:51:
48:d9:aa:d7:88:1e:6d:b4:43:f0:7b:05:c8:2d:74:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:57:97:A7:8F:5D:04:67:6C:27:28:CD:C4:78:00:16:C4:C5:5E:A7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6FeXp49dBGdsJyjNxHgAFsTFXqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:1b:b0:00:5a:17:a4:84:d4:3f:53:28:2d:7a:70:b2:a4:ee:
1f:51:86:5d:39:25:b7:de:3b:5d:91:06:67:1d:1e:04:f5:ff:
37:3b:46:f3:74:92:77:59:f2:6f:b0:d6:64:82:7e:bd:63:bf:
0e:b2:91:a9:47:fe:6f:bd:e9:be:20:1d:fc:53:64:b0:16:49:
63:a2:44:74:b0:7c:26:7f:42:7a:1f:f3:e3:36:c8:3d:99:4c:
0d:d9:2b:8c:7c:ed:fd:aa:e2:9f:e4:70:cd:5c:52:6b:94:21:
14:4a:b2:0f:24:97:08:62:da:0e:77:fd:28:b3:98:54:f6:1f:
e5:7e:c1:0d:91:54:82:bd:2a:93:f5:0a:b3:01:51:9f:a7:01:
50:19:83:7e:ed:21:06:af:c2:94:6f:59:6f:27:7a:30:e9:fb:
05:dc:75:4a:5f:cf:68:e7:24:f1:af:57:74:d1:e6:ca:bf:94:
59:67:2f:1c:98:ae:80:5d:b7:f8:c7:8e:55:6b:75:56:f1:c6:
aa:48:f3:89:a3:69:b2:76:30:85:d6:c6:22:dc:53:d8:c2:c1:
9a:83:74:f5:fa:67:7e:26:83:c0:e0:e9:f1:27:f5:4f:29:29:
43:27:5c:2c:aa:e6:f5:8a:e0:05:b1:02:6d:83:a2:cd:a6:c5:
5e:23:4e:15
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtGXa72rk9EVjU8CtA21qCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE5MDUxNzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODU3OTdhNzhmNWQwNDY3NmMyNzI4Y2RjNDc4MDAxNmM0YzU1ZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnanFLaB6gjzM/KcFhEfxrvPneE31
v8/PLqwIvGeYeq0SHzU1PuGENeWc+WteAKQe+nii0l+sp0J5LqWDouFZrXmoc6XW
rGtNYGAZVpd99xnAnfAlDsJLwgRxdhEKSmYd5IBLkXYD4XISAj1epPG1aHTebOwg
LFua9Qao8GlVFqzkULYdIiiW0wKPjrUx3PM3RvsIU8qLF8rKAKxW4EvmIHr65KJi
xKh4K87HjRHpbxvwAN/IIFEhj8xeq6JdLuN4zJNEBbhLa0AdfEyc0h+kjQQRYyJ2
IQtNQ+foITIvLcbYwKakv81pogrSmKZCD1FI2arXiB5ttEPwewXILXRqhwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOhXl6ePXQRnbCcozcR4ABbExV6nMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNkZlWHA0OWRCR2RzSnlqTnhIZ0FGc1RGWHFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEsbsABaF6SE1D9TKC16
cLKk7h9Rhl05JbfeO12RBmcdHgT1/zc7RvN0kndZ8m+w1mSCfr1jvw6ykalH/m+9
6b4gHfxTZLAWSWOiRHSwfCZ/Qnof8+M2yD2ZTA3ZK4x87f2q4p/kcM1cUmuUIRRK
sg8klwhi2g53/SizmFT2H+V+wQ2RVIK9KpP1CrMBUZ+nAVAZg37tIQavwpRvWW8n
ejDp+wXcdUpfz2jnJPGvV3TR5sq/lFlnLxyYroBdt/jHjlVrdVbxxqpI84mjabJ2
MIXWxiLcU9jCwZqDdPX6Z34mg8Dg6fEn9U8pKUMnXCyq5vWK4AWxAm2Dos2mxV4j
ThU=
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:52:22 2025 by rpki-client