Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6mKK68TyGG69KqD7oEbiADSL_j4.roa
File: 6mKK68TyGG69KqD7oEbiADSL_j4.roa (raw, json)
Hash identifier: 1itLokbaypxPxcSbQb0n6xnkVwzSUe9mrHvo70cebJ0=
Subject key identifier: EA:62:8A:EB:C4:F2:18:6E:BD:2A:A0:FB:A0:46:E2:00:34:8B:FE:3E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2C63200641974D551ABA72CB40DED209
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6mKK68TyGG69KqD7oEbiADSL_j4.roa
Signing time: Sat 14 Oct 2023 04:12:55 +0000
ROA not before: Sat 14 Oct 2023 04:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2c:63:20:06:41:97:4d:55:1a:ba:72:cb:40:de:d2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 04:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea628aebc4f2186ebd2aa0fba046e200348bfe3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a8:35:c3:3c:65:5f:98:27:2b:1e:c8:0d:df:
63:52:e5:08:38:90:8d:89:b8:c8:5b:80:fd:9f:38:
ef:10:d7:37:b3:61:c3:04:9a:33:3e:f2:57:a8:7d:
6c:fb:02:58:2d:ce:b1:26:aa:1e:b4:db:89:90:13:
c1:cc:b3:39:c4:87:5a:e6:e8:d2:6b:8c:85:0b:06:
67:c6:c7:67:31:23:85:88:f2:b6:4c:bb:01:83:79:
20:d0:ef:b3:3f:f5:14:b0:01:83:32:cf:08:6c:09:
a4:a3:d9:a3:eb:7a:c5:5d:2f:6f:f9:87:fc:20:bb:
09:37:f0:61:90:e3:a0:25:d2:49:d2:aa:8c:68:eb:
19:43:72:ba:a7:d8:62:9c:a3:81:3e:57:95:ca:1e:
b4:82:66:06:ff:9c:c5:dd:20:30:04:aa:52:52:86:
cc:e8:61:37:59:f2:1f:45:56:95:64:24:ef:ca:dc:
11:5d:a9:dc:75:6f:37:79:e4:5b:e2:8e:95:8b:cf:
84:93:43:b6:57:a9:fa:d1:41:65:77:41:e2:ed:e4:
f2:c1:7b:24:10:c3:18:16:c1:37:56:60:3d:5f:f7:
8f:92:dc:6c:21:67:1c:bf:77:40:94:2a:de:8f:3a:
c1:b4:fc:07:6d:a8:a7:64:c1:08:a2:3c:9f:1d:9d:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:62:8A:EB:C4:F2:18:6E:BD:2A:A0:FB:A0:46:E2:00:34:8B:FE:3E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6mKK68TyGG69KqD7oEbiADSL_j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:8f:45:63:34:12:4e:cd:3f:51:f1:a6:f1:0d:39:e1:2a:39:
09:bd:64:e3:5b:3a:69:0a:5b:b2:5b:4d:d7:f5:80:c0:e9:53:
fa:e4:c1:ac:bd:ae:bf:18:2f:1b:66:c6:40:53:93:f4:f8:56:
de:36:bc:c8:50:9b:ac:db:72:65:47:d9:70:79:a7:3b:d2:d2:
26:8a:9e:fb:92:bc:de:fe:24:ec:ec:47:1a:89:01:b8:39:41:
18:04:46:da:9a:ae:3c:92:4a:d3:4a:34:fa:a7:5b:04:49:8f:
49:bb:4a:43:78:7f:bc:1e:bf:74:77:0b:06:7e:f7:98:20:07:
cb:d1:cd:14:be:91:e4:e3:b9:70:6b:b4:fc:27:eb:d9:22:7b:
29:a1:99:7a:5e:bb:e8:8b:ab:e1:f1:18:bb:64:8c:0e:ae:ea:
8c:6e:ca:64:db:38:d2:46:28:3f:8b:d6:58:c5:bb:70:a3:60:
44:1f:95:a1:20:11:e0:d2:d2:ba:3a:23:b5:3f:31:76:5f:76:
b2:c6:94:91:9f:9b:a1:aa:0c:03:8c:ce:8b:21:e0:2d:4f:17:
b9:48:1f:f9:ff:5a:1e:3c:ed:48:d8:0d:e6:7e:2c:c8:df:9d:
ac:4e:d7:30:eb:32:3c:e7:b2:f4:0e:60:05:9d:1a:ef:91:fb:
61:8b:76:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:59:09 2025 by rpki-client