Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6m1KnBLjAqk-2Llbdc2bFbuLmm4.roa
File: 6m1KnBLjAqk-2Llbdc2bFbuLmm4.roa (raw, json)
Hash identifier: tOFN/TlTdHBZ5bQGm6EIrcqyXLGRdz4TyEqIRPQpmQ4=
Subject key identifier: EA:6D:4A:9C:12:E3:02:A9:3E:D8:B9:5B:75:CD:9B:15:BB:8B:9A:6E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C14589F6E59807B93CC762837F5C3CAAB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6m1KnBLjAqk-2Llbdc2bFbuLmm4.roa
Signing time: Tue 28 Nov 2023 05:13:21 +0000
ROA not before: Tue 28 Nov 2023 05:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:14:58:9f:6e:59:80:7b:93:cc:76:28:37:f5:c3:ca:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 05:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea6d4a9c12e302a93ed8b95b75cd9b15bb8b9a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:44:47:09:d8:86:52:3d:a1:02:5a:64:a8:
fe:33:1b:a3:65:5c:04:b0:85:1c:7d:b8:fb:05:48:
dd:fa:a2:fd:08:df:f5:8d:91:76:2a:34:a3:27:f6:
15:27:c7:93:c7:d1:e0:95:48:33:ce:9e:d3:b1:9d:
aa:8a:35:ac:e9:43:35:0c:8a:fa:15:b5:78:b6:66:
93:83:d9:e1:38:b6:a6:e7:92:55:06:4b:bf:dd:60:
b6:ac:94:dc:d1:3e:cd:06:36:e5:6c:6d:14:8b:1b:
f3:35:b9:32:81:ac:d9:c7:b2:ef:bf:c5:04:12:15:
2f:64:cc:97:89:0e:8f:04:d4:03:ea:4a:33:fe:e8:
c6:6b:bc:bf:48:79:ca:50:a0:1d:2c:ed:88:91:22:
94:76:ba:3c:be:0f:ff:7d:90:e8:69:0a:0f:dd:96:
5c:28:3b:89:2e:b6:a9:5c:ef:63:f1:b2:7f:ce:1a:
c0:a3:20:2f:35:85:d8:66:61:09:86:0e:62:8e:65:
93:4c:3f:b6:c3:17:49:29:ba:a8:d0:0a:ff:ec:33:
43:f2:aa:31:e1:d0:a2:e4:24:7d:2d:71:7f:b8:87:
c1:50:42:ad:4c:24:17:a7:55:a9:7a:ca:4a:9a:9f:
26:b5:63:96:d6:b4:e7:24:5c:aa:fb:0e:67:e5:4a:
f7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6D:4A:9C:12:E3:02:A9:3E:D8:B9:5B:75:CD:9B:15:BB:8B:9A:6E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6m1KnBLjAqk-2Llbdc2bFbuLmm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:f5:58:94:0a:71:3a:59:19:54:8b:19:7c:d7:b9:1c:e2:10:
52:32:1c:a1:42:71:27:1c:ee:c3:9c:8b:b8:1f:d3:60:ca:29:
03:67:8f:b4:73:15:5b:bb:cc:c3:66:8c:2d:04:5e:4e:49:d1:
b1:fc:c6:d8:af:08:83:5c:fb:c4:f4:49:61:0b:a4:b5:46:f2:
47:05:25:cf:bc:19:a3:01:a6:c2:ab:df:2a:d4:f4:d4:d4:df:
6e:07:9a:b9:dc:d6:3a:d2:70:8e:2a:03:2d:fd:93:e6:47:1c:
ca:a4:40:0d:6b:04:f4:a7:be:2d:3d:64:07:48:fc:68:28:08:
ae:ff:cb:49:38:8f:54:2e:e7:95:3c:9f:f5:b2:85:94:3d:a6:
2d:3a:33:c3:e6:e7:4a:b2:50:92:03:85:fc:cb:c0:31:1d:77:
b8:c2:49:2d:92:6e:7c:ae:81:2a:ea:de:ab:b0:70:9b:cd:e5:
36:81:74:59:79:4e:68:80:e8:b3:db:7f:97:c6:3c:f8:88:ff:
74:c2:55:fa:a6:86:d4:52:03:77:53:c9:da:18:3a:0a:92:c3:
dd:48:ef:55:a0:51:33:72:75:d0:52:93:3c:36:38:08:05:70:
1f:2d:ae:f2:6e:fd:7f:e4:6b:55:a3:bf:91:0c:f5:fa:33:3e:
3e:57:51:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:24:20 2025 by rpki-client