Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6Xv_ZPPr6QJfJ9Vd2KjrfEvGMq0.roa
File: 6Xv_ZPPr6QJfJ9Vd2KjrfEvGMq0.roa (raw, json)
Hash identifier: /2J8JLgOP7lY1QjBX4Ier6UbXYekvHoDmv61nA0Jui4=
Subject key identifier: E9:7B:FF:64:F3:EB:E9:02:5F:27:D5:5D:D8:A8:EB:7C:4B:C6:32:AD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE47A4A27A3A3C1F034CC59949C837BD4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6Xv_ZPPr6QJfJ9Vd2KjrfEvGMq0.roa
Signing time: Sat 18 Nov 2023 22:08:21 +0000
ROA not before: Sat 18 Nov 2023 22:08:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e4:7a:4a:27:a3:a3:c1:f0:34:cc:59:94:9c:83:7b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 18 22:08:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e97bff64f3ebe9025f27d55dd8a8eb7c4bc632ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:be:71:4d:cf:86:af:b0:4a:11:37:25:5f:
0f:00:90:b5:9f:63:da:5e:6a:88:9e:1b:5d:a7:02:
ad:1b:a6:e3:c7:5a:78:35:78:61:9d:d9:99:e3:7f:
5f:f3:42:a0:5e:66:07:da:72:ab:05:54:87:d8:85:
a0:90:3c:24:c5:55:13:58:e4:96:61:4a:4d:d4:cc:
d8:5c:64:9a:70:ef:ef:10:94:24:b7:17:8d:fb:99:
29:4a:c0:fd:43:1a:61:98:49:d3:da:3e:2a:d5:66:
54:d6:54:86:7a:af:69:f9:f6:69:ce:96:6c:88:f7:
d4:36:07:9f:0d:30:07:29:38:e1:b8:c8:7f:d3:a9:
c3:26:ff:d0:c5:3b:8e:67:3c:5e:ba:96:cf:49:de:
e6:56:ce:7a:36:41:0a:3c:fc:e7:75:d8:00:8f:27:
d4:f4:ce:01:5d:97:29:2b:29:ec:7e:ca:ca:a4:73:
d8:76:37:3c:a3:c1:9b:d2:a7:92:c7:63:25:a0:e2:
bd:9e:cd:27:a5:a2:f6:9a:d1:0f:3f:cb:fc:75:df:
aa:25:40:8c:fd:a9:32:59:aa:67:3b:0a:0e:c6:75:
20:87:87:f2:fd:b0:cf:e3:d8:3b:18:00:a8:16:0e:
f1:6c:91:9b:d8:3c:4c:0e:7c:85:a9:53:4b:b3:c6:
6c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7B:FF:64:F3:EB:E9:02:5F:27:D5:5D:D8:A8:EB:7C:4B:C6:32:AD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6Xv_ZPPr6QJfJ9Vd2KjrfEvGMq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:2c:1c:38:05:3a:41:20:4a:37:95:e9:4b:b8:c9:1c:93:f7:
dc:b0:04:12:14:bf:6e:a2:b8:74:ec:89:36:b0:73:3f:05:15:
fa:1d:eb:9a:33:f2:8d:85:ad:bb:cf:66:cb:98:52:95:ba:51:
ee:81:95:cc:63:81:4c:ba:55:df:f4:5b:b3:b4:45:62:ec:47:
c5:36:b2:21:78:96:2a:46:77:a5:21:58:05:d5:ab:7d:65:f6:
90:28:f5:82:52:38:c8:6f:8b:7e:5f:32:e4:ef:93:6f:ae:1f:
3a:07:6b:ea:88:82:5c:4b:99:10:70:22:95:34:d1:07:d7:90:
2c:f7:8d:aa:49:19:a6:5f:d5:67:70:cd:64:91:e2:5f:5d:22:
71:ff:fc:07:f0:2a:98:1a:42:ba:fd:ff:d2:02:0e:83:c8:ae:
a7:9a:72:09:a9:66:46:02:f8:71:86:44:70:ca:d0:64:02:11:
68:ef:88:9b:b2:46:f3:8a:c7:7b:e6:56:0f:af:38:4e:2d:bb:
ee:8d:40:69:71:42:e6:6d:4f:f9:3a:d9:11:02:03:09:79:79:
07:b8:f5:42:62:d0:af:42:74:14:ca:87:49:7c:20:c6:42:97:
52:ff:8a:aa:98:96:3d:c6:be:1d:ea:00:ac:d2:06:44:ea:9a:
d8:a4:15:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:05:41 2025 by rpki-client