Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6P-dZ3dsHxHBMsGt3EivWWXi0f4.roa
File: 6P-dZ3dsHxHBMsGt3EivWWXi0f4.roa (raw, json)
Hash identifier: 2P8Nm0kNy6ZRCPYAH3y0XRtrP+Xv4Heb707M2KHizc0=
Subject key identifier: E8:FF:9D:67:77:6C:1F:11:C1:32:C1:AD:DC:48:AF:59:65:E2:D1:FE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BBF277A6A7AA1906A4F484BB548009096
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6P-dZ3dsHxHBMsGt3EivWWXi0f4.roa
Signing time: Sat 11 Nov 2023 16:11:57 +0000
ROA not before: Sat 11 Nov 2023 16:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bf:27:7a:6a:7a:a1:90:6a:4f:48:4b:b5:48:00:90:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 11 16:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8ff9d67776c1f11c132c1addc48af5965e2d1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:20:e9:b8:93:47:8a:fa:a0:9f:72:b2:5d:
20:71:80:80:7d:9b:3b:b7:f9:e2:89:52:b6:f1:ea:
8c:b8:ea:4d:0a:a4:f4:c7:62:e6:42:13:6b:56:49:
28:36:2b:65:07:dc:55:a2:a0:f5:a0:40:a0:47:d0:
9a:e9:51:5e:29:83:e9:7f:57:89:7a:fb:9d:45:88:
4f:d3:ed:fb:ee:6b:1c:63:c8:3b:15:69:9b:ff:6b:
85:ae:4f:98:39:43:a2:1c:8e:57:af:61:7e:50:b1:
47:98:97:fd:03:fb:37:e6:ec:4d:51:6f:15:15:40:
e2:22:f7:b4:c8:a9:6a:f7:ea:7b:ba:3d:2a:dd:94:
c4:d3:c6:e0:46:1c:3e:52:73:6d:4f:df:26:06:01:
19:60:e4:cf:8d:ba:9d:56:20:e9:93:36:b6:f6:1c:
19:1d:1d:77:11:a8:78:1a:99:74:31:2d:9c:3b:9e:
c1:aa:21:66:cb:bf:c3:8d:d1:16:da:dc:b4:65:09:
31:34:7f:57:52:d8:3e:ed:88:5e:7c:0b:1d:f0:04:
e2:2c:7c:f0:ab:5d:a9:7a:c9:27:64:c3:07:e6:79:
54:f9:cc:a9:de:24:ac:dd:95:7f:3f:f7:55:5d:e8:
f3:a4:74:d6:c6:be:a0:73:35:9b:19:0f:2f:70:a3:
9a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FF:9D:67:77:6C:1F:11:C1:32:C1:AD:DC:48:AF:59:65:E2:D1:FE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6P-dZ3dsHxHBMsGt3EivWWXi0f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:c9:10:89:4f:0c:7a:74:d2:e5:da:6e:f3:10:e8:d6:ba:a1:
85:9c:46:bc:9c:7e:c3:41:7d:c6:30:d0:d7:71:50:d5:3e:1f:
50:d1:71:47:e0:b6:c0:38:96:d9:58:91:9d:9d:0d:d4:06:d1:
92:d2:da:43:0c:34:b4:94:7b:d1:e3:3f:e7:57:bd:a5:08:48:
e1:e3:68:19:12:37:7e:94:55:8e:3c:13:3a:05:1c:d1:32:5f:
e9:a1:3c:b1:11:f4:ad:62:f7:e4:1d:df:96:58:05:7b:d5:13:
38:5b:49:3c:fb:87:22:bf:d2:f2:9c:e1:dd:bc:e5:37:ea:f0:
74:7e:72:aa:46:10:5b:01:82:ba:66:77:44:3a:01:4f:a9:aa:
e2:0f:f7:20:7c:f7:1e:fd:ef:c1:47:12:ec:03:d3:01:d2:99:
6a:55:e8:a4:dc:2b:4c:67:9a:45:c4:33:e4:11:7c:b0:20:62:
aa:44:a7:fb:b9:9a:d7:0b:1a:d2:15:71:f8:d9:46:3f:b5:a2:
0c:c4:f6:f9:7a:d2:d6:e2:c2:55:ae:1d:62:9b:82:18:0d:d4:
44:c5:d4:5b:d1:50:5a:75:a9:23:04:8f:f9:b6:ab:29:86:d8:
7c:95:41:d5:b2:f5:0e:74:f5:33:37:ea:e5:4e:8a:90:0d:a9:
ae:4b:16:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:38:38 2025 by rpki-client