Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6ZRcADlOzJNQHP84FkbXSllixEw.roa
File: 6ZRcADlOzJNQHP84FkbXSllixEw.roa (raw, json)
Hash identifier: GdYshS0uW5NcqcNKdLivr3N2Caicr+5R1fjF2JgpuRg=
Subject key identifier: E9:94:5C:00:39:4E:CC:93:50:1C:FF:38:16:46:D7:4A:59:62:C4:4C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4ADB61DDB64E1A6C1C2182902AA7E57D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6ZRcADlOzJNQHP84FkbXSllixEw.roa
Signing time: Fri 08 Dec 2023 19:15:40 +0000
ROA not before: Fri 08 Dec 2023 19:15:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4a:db:61:dd:b6:4e:1a:6c:1c:21:82:90:2a:a7:e5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 19:15:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9945c00394ecc93501cff381646d74a5962c44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:95:52:a6:79:08:42:2b:93:85:0c:21:a5:
1b:92:a6:a6:57:57:cd:67:f4:44:50:6c:27:83:50:
b6:23:e6:62:99:34:99:54:e8:67:ba:dd:ec:99:6d:
b0:fb:09:fd:99:59:70:88:3b:48:75:ed:3b:52:bf:
83:b3:20:68:66:f1:04:7a:c8:74:e4:37:62:1c:a9:
1e:6c:29:1e:d1:f5:65:c1:f9:52:6e:ba:60:aa:e2:
c4:d4:17:9c:82:75:96:8a:88:2a:7f:a5:0e:39:e8:
b0:2f:2e:1a:e8:dc:64:c0:08:27:9d:14:03:0b:a0:
78:14:fc:55:62:be:49:c5:ca:de:a2:71:fb:24:31:
0f:e6:f1:56:21:1c:80:8a:d5:83:cc:61:b9:e4:9b:
60:00:7e:9a:0f:29:e4:0f:a2:62:47:c3:3c:69:a9:
1d:b3:a1:67:5a:98:2d:f4:b5:29:64:60:79:2c:d7:
bd:78:c6:0d:5c:3f:81:b0:c3:14:02:3f:69:87:1e:
a2:c5:9c:23:ab:f7:60:74:c7:42:47:ab:1a:87:16:
cc:41:3e:86:4b:7c:63:e6:7a:24:d7:f3:91:cc:f1:
21:8a:fb:ca:42:42:db:26:4f:13:d1:5a:31:51:69:
6f:3d:1e:a8:61:1e:cb:d2:db:bc:6d:ee:5f:e7:c8:
2e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:94:5C:00:39:4E:CC:93:50:1C:FF:38:16:46:D7:4A:59:62:C4:4C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6ZRcADlOzJNQHP84FkbXSllixEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:ee:42:63:dc:b5:64:74:3b:10:11:dc:cc:19:d0:1d:0d:12:
3e:15:c6:c1:c4:69:9d:fd:69:33:52:f5:8e:bb:86:f3:b3:6d:
ad:45:48:3f:3a:b7:34:72:94:a1:02:08:fe:c0:e2:25:3a:b1:
73:d7:8a:b6:b2:6c:73:b0:b1:df:54:49:ec:5c:d2:9f:dd:de:
96:90:f6:49:5c:56:bd:4c:27:b7:9c:1b:4c:22:63:5c:bf:6c:
dc:7d:74:f0:50:08:4c:d2:39:94:9b:fb:f5:ba:f5:79:f4:c4:
69:83:2f:47:46:de:45:20:21:6b:78:6b:71:95:88:d1:00:82:
80:a9:0b:60:bf:08:8c:b7:7f:bf:5f:8c:33:1b:b0:1d:3f:e7:
76:2a:a0:3f:bf:e0:5d:9a:3b:54:e7:82:70:fd:70:1e:e5:b1:
0e:f2:f7:9a:10:f9:63:27:5a:d7:86:5d:6b:ee:f2:f9:d1:ce:
d6:cb:ae:62:c6:ff:85:d2:38:85:71:05:cb:eb:ab:6c:bb:31:
13:7c:22:c1:5b:70:4a:70:b9:d7:82:39:01:f4:07:7f:b6:49:
85:6e:b5:1c:65:55:78:34:9d:c5:bc:b7:f6:c8:d0:85:1c:e2:
0c:2d:13:3f:7c:c4:7b:42:9a:66:66:f7:9a:2f:c2:75:53:02:
ae:fd:21:ac
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxK22Hdtk4abBwhgpAqp+V9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA4MTkxNTQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTk0NWMwMDM5NGVjYzkzNTAxY2ZmMzgxNjQ2ZDc0YTU5NjJjNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1eVUqZ5CEIrk4UMIaUbkqamV1fN
Z/REUGwng1C2I+ZimTSZVOhnut3smW2w+wn9mVlwiDtIde07Ur+DsyBoZvEEesh0
5DdiHKkebCke0fVlwflSbrpgquLE1BecgnWWiogqf6UOOeiwLy4a6NxkwAgnnRQD
C6B4FPxVYr5JxcreonH7JDEP5vFWIRyAitWDzGG55JtgAH6aDynkD6JiR8M8aakd
s6FnWpgt9LUpZGB5LNe9eMYNXD+BsMMUAj9phx6ixZwjq/dgdMdCR6sahxbMQT6G
S3xj5nok1/ORzPEhivvKQkLbJk8T0VoxUWlvPR6oYR7L0tu8be5f58gueQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOmUXAA5TsyTUBz/OBZG10pZYsRMMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNlpSY0FEbE96Sk5RSFA4NEZrYlhTbGxpeEV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAHuQmPctWR0OxAR3MwZ
0B0NEj4VxsHEaZ39aTNS9Y67hvOzba1FSD86tzRylKECCP7A4iU6sXPXiraybHOw
sd9USexc0p/d3paQ9klcVr1MJ7ecG0wiY1y/bNx9dPBQCEzSOZSb+/W69Xn0xGmD
L0dG3kUgIWt4a3GViNEAgoCpC2C/CIy3f79fjDMbsB0/53YqoD+/4F2aO1TngnD9
cB7lsQ7y95oQ+WMnWteGXWvu8vnRztbLrmLG/4XSOIVxBcvrq2y7MRN8IsFbcEpw
udeCOQH0B3+2SYVutRxlVXg0ncW8t/bI0IUc4gwtEz98xHtCmmZm95ovwnVTAq79
Iaw=
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:02:21 2025 by rpki-client