Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6OKkzzTRuC3jjutvLFmdY9H3o_A.roa
File: 6OKkzzTRuC3jjutvLFmdY9H3o_A.roa (raw, json)
Hash identifier: vMDZA307D6dZ1Ot1tC9M1bOEBkAzSnHHdni0HvZRdO4=
Subject key identifier: E8:E2:A4:CF:34:D1:B8:2D:E3:8E:EB:6F:2C:59:9D:63:D1:F7:A3:F0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE93A540D64DF692D96E6C178431B53CC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6OKkzzTRuC3jjutvLFmdY9H3o_A.roa
Signing time: Sun 19 Nov 2023 20:16:35 +0000
ROA not before: Sun 19 Nov 2023 20:16:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e9:3a:54:0d:64:df:69:2d:96:e6:c1:78:43:1b:53:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 20:16:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8e2a4cf34d1b82de38eeb6f2c599d63d1f7a3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:28:ae:0d:8a:c5:fe:72:15:2c:57:38:89:
7b:92:a3:7d:c3:55:6d:49:25:3e:5b:b2:38:4e:6b:
65:26:93:83:04:92:51:18:97:c1:bc:a2:6e:e5:05:
90:9a:61:6d:90:8c:f2:a2:19:94:55:69:ae:4b:bd:
ba:06:df:f5:88:7d:f9:08:91:f0:5d:26:17:bc:dd:
fa:7b:c3:2c:c8:3f:4d:b3:e0:83:28:7b:25:d2:cb:
59:db:68:08:e5:c5:bb:8b:ac:10:c4:5e:8c:c3:2b:
a8:73:8f:60:ad:c7:7e:9e:99:e2:94:54:21:da:d4:
43:8b:1f:fb:bb:74:c3:d7:21:bf:f7:65:7b:dc:c1:
1e:c6:ce:7b:c0:f5:a2:13:79:66:bb:12:c4:3a:58:
c7:df:85:59:12:5e:af:68:b3:39:7b:b0:df:f8:6b:
7f:22:de:9f:37:1b:c1:71:e3:83:58:c1:1c:4a:bf:
7a:43:d5:fc:10:29:b5:31:c7:f9:20:8b:4e:1b:1c:
79:06:c5:28:cf:c7:15:32:f9:ad:99:18:c3:30:ad:
0b:0b:2d:f9:b8:fa:c4:a8:10:c6:c6:f6:b4:64:91:
9e:7e:0a:9a:8c:a6:04:e2:47:57:fc:d2:cd:f5:b6:
84:9e:fa:b4:99:1d:0d:ee:d5:c1:34:86:80:0c:19:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E2:A4:CF:34:D1:B8:2D:E3:8E:EB:6F:2C:59:9D:63:D1:F7:A3:F0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6OKkzzTRuC3jjutvLFmdY9H3o_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:d4:02:9c:09:b0:3c:ba:09:a6:95:d3:be:d5:70:28:b8:e0:
28:98:14:87:46:84:21:bc:29:80:83:05:e0:34:91:9b:f8:8d:
1e:dd:da:d4:67:df:c8:3a:55:30:6a:c8:4a:89:da:37:f2:68:
2c:4f:21:32:69:91:e8:91:9c:40:80:9a:ce:93:44:79:40:f7:
2c:11:5c:00:7c:b9:a8:08:68:df:c2:35:da:61:ef:fc:9e:49:
39:02:4a:40:d3:52:ae:98:d7:43:98:ce:59:dd:79:75:3d:db:
2b:2b:79:cb:16:c2:13:f6:78:ba:46:d3:e1:80:bf:bd:da:0d:
8e:49:42:e1:62:a6:ba:d2:bc:40:19:3e:24:11:87:9b:f7:a4:
c8:c0:6d:23:86:9b:bf:16:d4:e8:80:aa:b3:48:8d:db:66:15:
29:11:e4:c0:b4:b3:91:a2:49:15:c7:22:3a:16:c1:c6:61:29:
dd:e0:4d:b1:b4:ae:35:3e:a9:4c:93:1b:19:26:41:a3:80:1f:
ea:b3:f2:d4:66:a6:82:39:e9:27:36:d5:b6:8e:58:26:6d:ca:
6f:64:e4:02:51:fa:c3:73:f0:6f:ef:1d:f6:e8:72:cb:a8:8b:
14:d1:9e:fb:a7:f1:56:73:65:f9:a7:d4:a8:27:ba:c3:69:f1:
92:66:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:33 2025 by rpki-client