Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6ky3ppaTjNz-HKCcAqQYZ93dL9g.roa
File: 6ky3ppaTjNz-HKCcAqQYZ93dL9g.roa (raw, json)
Hash identifier: Tkqub/UbMy5YWxMOtHV/ZzvWoVYGPKkTB/NJ0WdvPmg=
Subject key identifier: EA:4C:B7:A6:96:93:8C:DC:FE:1C:A0:9C:02:A4:18:67:DD:DD:2F:D8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C49F7D060156D9F15366A7BB203899ECC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6ky3ppaTjNz-HKCcAqQYZ93dL9g.roa
Signing time: Fri 08 Dec 2023 15:07:06 +0000
ROA not before: Fri 08 Dec 2023 15:07:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:49f5:37ef/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:f7:d0:60:15:6d:9f:15:36:6a:7b:b2:03:89:9e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 15:07:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea4cb7a696938cdcfe1ca09c02a41867dddd2fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:2f:1a:a7:6e:57:55:39:7e:6b:fc:1f:ac:
c8:d6:3f:44:1e:73:ef:00:67:99:17:ce:5d:10:70:
12:4f:3f:e8:81:92:ee:6c:a4:b6:39:5f:d8:64:be:
40:74:d4:9e:6c:87:7a:62:a5:7c:8b:b4:8b:57:ad:
ae:28:23:c9:30:38:e1:79:a3:34:d9:eb:cf:59:3a:
08:fd:47:2e:94:7d:2d:30:46:d2:d2:7a:04:31:11:
88:14:a9:ce:56:40:ab:98:48:99:79:3f:1b:a2:57:
1f:8e:f9:8d:36:51:29:27:ef:78:84:5a:3b:34:60:
e8:2b:fb:11:07:c1:65:93:5a:e6:5a:7f:1c:ef:ac:
68:a7:b4:11:65:1b:37:80:f0:0a:b1:f8:a9:b8:e5:
8a:09:51:e5:93:64:2a:3d:9a:70:12:76:d1:09:e4:
50:d6:23:f2:5f:75:25:a0:fa:3f:43:ed:d0:67:7d:
06:82:9c:fe:f8:65:34:8d:a6:bb:46:88:01:1e:2c:
36:9e:0d:40:9b:5d:7b:50:7b:ff:83:13:2e:e0:48:
83:22:b4:d9:d0:59:35:39:67:cc:82:1b:de:16:27:
4f:da:dc:9e:11:e2:4e:7a:04:31:6c:4c:59:8b:13:
34:02:b1:cc:ab:33:8a:f4:a9:c7:c6:05:0b:c6:64:
1e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4C:B7:A6:96:93:8C:DC:FE:1C:A0:9C:02:A4:18:67:DD:DD:2F:D8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6ky3ppaTjNz-HKCcAqQYZ93dL9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:73:3d:59:2f:8d:db:19:91:cb:4c:62:8b:73:89:e1:cc:c8:
e0:85:0e:8b:c2:de:7d:10:d2:f2:70:f7:9e:e2:2e:24:e5:30:
40:22:ad:ac:67:09:43:62:9d:c4:e6:3a:5e:a1:af:11:0e:da:
75:b6:9d:34:e3:2e:eb:3e:9d:a9:de:f7:52:6e:0c:78:fc:bd:
1e:be:1d:36:13:b3:72:25:c6:ff:3d:a1:77:68:20:af:7f:90:
1c:85:c1:c6:c2:34:8f:30:64:c3:55:e7:2e:62:fb:5b:92:a6:
83:58:3d:d8:d7:f9:a9:ff:a9:67:7f:c1:d7:a3:09:90:b9:4a:
11:1b:36:8b:82:8d:90:9e:41:2e:35:df:74:9d:e1:f4:96:59:
b0:8c:24:0c:d6:a2:aa:63:f1:67:8b:11:e8:c3:39:ac:17:fc:
cf:01:1b:18:64:67:0d:c2:2e:c9:c8:25:63:b0:85:db:8f:db:
53:c7:b6:74:b5:53:da:22:e6:38:69:61:81:92:f4:4b:de:6a:
9c:f6:66:ad:d7:40:99:a9:c6:20:93:38:0a:f3:b0:cc:1c:95:
ed:e2:af:11:b0:c8:0b:b5:d8:4f:b5:03:ae:e9:74:b2:c5:c3:
bc:85:99:5e:c4:c3:41:b3:d4:50:af:bd:37:13:0e:82:58:a7:
34:60:60:f8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxJ99BgFW2fFTZqe7IDiZ7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA4MTUwNzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTRjYjdhNjk2OTM4Y2RjZmUxY2EwOWMwMmE0MTg2N2RkZGQyZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDsvGqduV1U5fmv8H6zI1j9EHnPv
AGeZF85dEHASTz/ogZLubKS2OV/YZL5AdNSebId6YqV8i7SLV62uKCPJMDjheaM0
2evPWToI/UculH0tMEbS0noEMRGIFKnOVkCrmEiZeT8bolcfjvmNNlEpJ+94hFo7
NGDoK/sRB8Flk1rmWn8c76xop7QRZRs3gPAKsfipuOWKCVHlk2QqPZpwEnbRCeRQ
1iPyX3UloPo/Q+3QZ30Ggpz++GU0jaa7RogBHiw2ng1Am117UHv/gxMu4EiDIrTZ
0Fk1OWfMghveFidP2tyeEeJOegQxbExZixM0ArHMqzOK9KnHxgULxmQerQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOpMt6aWk4zc/hygnAKkGGfd3S/YMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNmt5M3BwYVRqTnotSEtDY0FxUVlaOTNkTDlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF9zPVkvjdsZkctMYotz
ieHMyOCFDovC3n0Q0vJw957iLiTlMEAiraxnCUNincTmOl6hrxEO2nW2nTTjLus+
nane91JuDHj8vR6+HTYTs3Ilxv89oXdoIK9/kByFwcbCNI8wZMNV5y5i+1uSpoNY
PdjX+an/qWd/wdejCZC5ShEbNouCjZCeQS4133Sd4fSWWbCMJAzWoqpj8WeLEejD
OawX/M8BGxhkZw3CLsnIJWOwhduP21PHtnS1U9oi5jhpYYGS9Eveapz2Zq3XQJmp
xiCTOArzsMwcle3irxGwyAu12E+1A67pdLLFw7yFmV7Ew0Gz1FCvvTcTDoJYpzRg
YPg=
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:18:35 2025 by rpki-client