Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6rB3wSldzCtTWUTs84AuOj27Q1Y.roa
File: 6rB3wSldzCtTWUTs84AuOj27Q1Y.roa (raw, json)
Hash identifier: knOj8UwvEVC2mRpGkEP7BadLMcQ6mxsWDlzFWv6Vn/s=
Subject key identifier: EA:B0:77:C1:29:5D:CC:2B:53:59:44:EC:F3:80:2E:3A:3D:BB:43:56
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3D1F0B60D9CA9D6B9471FECB4B85AC43
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6rB3wSldzCtTWUTs84AuOj27Q1Y.roa
Signing time: Tue 17 Oct 2023 10:12:06 +0000
ROA not before: Tue 17 Oct 2023 10:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:1f:0b:60:d9:ca:9d:6b:94:71:fe:cb:4b:85:ac:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 10:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eab077c1295dcc2b535944ecf3802e3a3dbb4356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d1:8c:da:af:67:c2:ce:dc:3d:09:ff:8d:93:
c7:96:19:7d:e8:63:fe:00:d3:6b:d7:f8:7e:66:76:
da:ff:83:7b:a9:71:fc:d2:85:24:5a:50:53:1c:ef:
d2:8c:b5:5d:69:b3:9f:ca:ef:54:5e:8e:5e:c5:38:
27:e2:39:ad:d8:41:62:e7:0f:a7:c7:a2:12:b9:46:
b3:3a:c5:72:ee:af:2c:ee:8c:38:8d:d6:70:c7:89:
04:1d:b7:49:b6:1d:76:8a:98:1a:8a:d2:2d:1c:71:
72:06:bb:70:51:b5:d0:b3:bf:82:07:a4:5a:d3:cb:
b8:09:78:41:e9:a2:81:7f:10:78:53:28:fe:97:71:
aa:1b:5c:e2:e8:b2:1e:22:bb:68:7d:2a:c6:4e:6a:
a0:69:6a:f2:2f:86:84:d1:9c:c7:00:bc:c1:4b:75:
5c:8f:9a:24:f1:cf:ba:68:38:bd:92:a3:47:d6:08:
53:76:14:fa:6a:81:f3:47:36:36:1f:63:36:0f:74:
3a:7b:f0:2c:01:22:2a:a1:a9:91:2b:50:17:91:3e:
01:49:d6:a9:e6:fd:f9:3d:a6:cd:eb:84:92:db:e9:
e2:65:6c:45:b0:30:ef:88:87:66:f6:a7:07:c1:0a:
65:5e:23:36:49:6b:9c:67:1e:b3:5f:d9:09:8c:be:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B0:77:C1:29:5D:CC:2B:53:59:44:EC:F3:80:2E:3A:3D:BB:43:56
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6rB3wSldzCtTWUTs84AuOj27Q1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:fd:f1:0b:eb:9d:6e:e3:c8:41:4c:f5:41:84:3c:d4:96:5b:
ac:2b:ae:c2:fd:01:3a:15:c3:81:12:76:2a:e9:00:e0:e9:30:
80:ab:12:e3:02:b7:09:fe:41:48:d1:fd:ae:3f:48:8e:c6:61:
94:df:5c:ce:3f:27:89:66:87:dc:0d:6d:53:91:3d:70:7f:9b:
1f:07:92:8f:48:80:ae:b2:b9:97:81:38:47:2b:01:43:e3:e3:
d0:c2:91:6d:e4:2e:c4:e7:2b:cb:cd:36:a6:40:a9:3c:a7:5d:
a4:ed:53:8c:39:c9:e5:14:6c:ef:a4:5c:f0:c0:ef:4d:bd:b9:
e4:e5:2f:99:ab:b7:f0:57:fa:35:cc:a4:a4:3e:03:0f:ee:65:
06:d8:b5:44:9d:d8:aa:56:2d:24:3a:29:ce:6d:a7:a6:84:ab:
95:a6:67:bc:7b:a9:59:22:99:fd:36:a9:87:44:36:7c:dd:25:
34:0c:61:ba:f4:a8:e6:43:a4:b7:b9:fd:fb:b2:2a:b9:0d:1b:
75:58:89:55:12:21:95:c6:a8:18:f2:34:bb:7c:bc:d3:ea:04:
a5:e9:a1:92:c8:ea:ae:2b:e6:5d:94:79:b5:26:48:68:bb:18:
d2:73:10:89:71:52:ec:49:6b:4c:d0:4a:83:89:e6:95:cd:52:
6d:b5:25:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:35:40 2025 by rpki-client