Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6w73Rm9sLKGK-NidN5buqgwLcJo.roa
File: 6w73Rm9sLKGK-NidN5buqgwLcJo.roa (raw, json)
Hash identifier: DSrlcPHYELvM9MsSmEaXOt3HRtRLGgEtCdQYSNWXPYM=
Subject key identifier: EB:0E:F7:46:6F:6C:2C:A1:8A:F8:D8:9D:37:96:EE:AA:0C:0B:70:9A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3E5F7FF3139EEDFD90CE5EBB3D1C1905
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6w73Rm9sLKGK-NidN5buqgwLcJo.roa
Signing time: Wed 06 Dec 2023 09:04:54 +0000
ROA not before: Wed 06 Dec 2023 09:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:3e5f:1ba7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:5f:7f:f3:13:9e:ed:fd:90:ce:5e:bb:3d:1c:19:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 09:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb0ef7466f6c2ca18af8d89d3796eeaa0c0b709a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ae:62:ce:e2:c3:4d:02:02:bc:0e:f4:75:96:
ed:70:fd:3a:9f:06:9a:db:75:91:4b:31:a8:4f:28:
09:25:eb:63:a3:b9:b2:01:8a:13:c5:e0:61:c8:42:
7d:c1:8a:d5:ec:a4:1a:4e:c6:fd:c2:78:66:3b:2a:
85:9a:a8:3c:9c:01:d9:c2:e5:71:08:b9:a6:d0:8d:
70:db:74:1a:5d:2c:67:b0:52:6d:34:e8:2d:ec:a7:
61:c9:36:4e:34:96:7c:29:b4:13:5a:ce:5e:08:cc:
ea:42:09:b6:a5:b7:35:aa:19:10:9c:97:d1:92:bc:
6a:db:39:02:1c:31:20:a0:8f:c8:d5:d3:39:2d:83:
c3:6b:b5:e2:15:c0:dd:8f:3c:16:bf:07:a8:d7:a5:
47:4a:63:54:2e:b0:3e:92:76:1a:6a:29:6d:8f:08:
74:03:96:06:af:38:7c:31:96:e1:c9:79:48:89:e6:
b7:f2:64:5f:54:03:64:01:0d:33:27:a7:2f:0c:24:
82:74:f0:51:de:97:3b:97:2e:b7:0e:e3:c4:9d:93:
16:f0:24:42:41:6e:6c:b3:35:7c:b4:37:6b:04:db:
cb:ea:e5:6d:53:e0:8c:81:7d:ca:34:a8:c5:e1:26:
c1:77:42:0e:b0:87:4c:05:16:5c:7a:fc:d0:02:45:
e8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0E:F7:46:6F:6C:2C:A1:8A:F8:D8:9D:37:96:EE:AA:0C:0B:70:9A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6w73Rm9sLKGK-NidN5buqgwLcJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c7:73:56:1f:48:37:13:9e:b9:1c:22:8d:d3:ad:5b:ce:e5:c1:
06:81:09:d9:93:35:7b:46:c1:62:04:c0:d2:50:f1:fa:27:3e:
75:8c:75:5b:2a:da:6e:8f:d3:ff:a7:a9:37:3d:aa:f4:bc:7c:
f4:8c:55:4b:93:e9:3e:9f:e2:1c:4c:6d:82:42:12:62:fb:2a:
3e:c3:72:f7:51:c1:60:b5:55:81:ca:bf:3f:4c:03:03:c1:a4:
cd:d2:81:0d:e3:04:cb:3f:b9:18:84:d9:d9:85:ae:74:e2:c9:
e8:71:a3:d0:fb:43:39:88:1c:22:63:a3:dc:26:87:2f:23:c2:
c1:f2:57:d1:d5:9d:a4:0c:59:3f:94:aa:d0:53:75:a3:00:28:
d5:51:3e:e8:2d:13:b6:5d:83:ba:87:c9:8e:26:4c:42:f6:44:
8d:0a:80:37:a2:15:bf:47:d2:81:a1:ae:f8:c3:58:7a:b9:a2:
92:51:d4:7c:91:f6:d0:79:52:4a:9c:e4:7e:7b:fb:39:c8:d3:
4b:31:08:ec:41:c5:15:c0:4e:cf:e9:ac:0b:0b:57:2a:25:61:
1a:ad:67:5c:7d:cd:23:77:ca:32:b3:ac:9e:14:89:2b:3f:28:
f4:22:c5:c0:f4:08:b1:a1:15:d1:56:92:8d:3c:09:83:ef:2c:
c8:cf:e2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:11:50 2025 by rpki-client