Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6yhe9NeYG4govQWFfoG4qEQZrf8.roa
File: 6yhe9NeYG4govQWFfoG4qEQZrf8.roa (raw, json)
Hash identifier: a8Va4c+Tad+9E27/tDuLkM+ZqLJz/ZMPw3UqoVI59R0=
Subject key identifier: EB:28:5E:F4:D7:98:1B:88:28:BD:05:85:7E:81:B8:A8:44:19:AD:FF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8497173A52087BD9A7F7C831BD786B52
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6yhe9NeYG4govQWFfoG4qEQZrf8.roa
Signing time: Tue 31 Oct 2023 07:16:16 +0000
ROA not before: Tue 31 Oct 2023 07:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:84:97:17:3a:52:08:7b:d9:a7:f7:c8:31:bd:78:6b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 07:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb285ef4d7981b8828bd05857e81b8a84419adff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:ca:4a:cb:9a:b8:05:e5:f2:87:5c:c7:64:
94:29:d6:0b:83:9b:fa:66:a5:cd:19:74:af:8c:c7:
da:b9:ed:bc:62:35:40:4c:82:c9:c6:cf:28:f7:b2:
b6:fb:c3:c8:68:3d:69:e0:c0:00:ba:a8:17:94:29:
b1:19:cf:d8:23:b4:55:40:5b:69:96:ea:58:6e:2c:
57:37:78:51:52:6a:74:a3:e4:43:17:ae:84:a2:e3:
b4:40:d0:3c:39:9c:d9:90:2c:a0:b1:e9:ec:6b:6d:
00:99:2c:f4:81:98:79:af:2c:c1:68:6f:ff:91:ff:
18:66:b5:f6:12:6b:9b:a3:6d:80:0a:c0:bb:02:b1:
70:3f:f7:e2:f0:e8:9c:b2:a6:95:9b:1b:a7:79:4b:
18:e2:33:99:e5:06:de:34:9e:e9:14:1d:42:8a:b2:
3c:76:3a:a1:de:28:c7:b1:d9:f3:57:07:44:48:12:
ca:11:62:cc:85:37:3e:35:82:fa:9c:be:5d:0a:89:
a7:34:d2:08:53:cb:6a:5b:ab:8a:16:8f:7b:ab:02:
89:6f:6c:61:96:2d:56:9e:98:b9:94:41:60:1f:f3:
29:48:61:ea:2b:b0:ce:64:6a:a9:6f:fa:90:9d:87:
3a:2e:21:a1:06:79:64:4a:70:68:b4:ec:e9:39:47:
18:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:28:5E:F4:D7:98:1B:88:28:BD:05:85:7E:81:B8:A8:44:19:AD:FF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6yhe9NeYG4govQWFfoG4qEQZrf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:78:c9:4a:fb:37:7b:85:51:0a:6e:ff:9b:01:c2:4a:e7:92:
67:26:c4:59:e2:84:a7:3e:9a:46:83:9b:f7:1a:b1:eb:33:28:
cd:17:16:69:84:16:0a:57:79:d4:ff:5b:06:40:fa:62:e5:31:
36:6f:f4:43:64:43:0f:c7:52:f6:fc:02:11:5a:21:1b:4d:cb:
89:fe:d3:03:f1:8a:43:97:3f:7a:fc:47:e7:7d:61:c1:88:df:
fc:e8:cf:61:c4:c9:fb:b7:30:95:12:fa:2f:33:7e:16:09:0a:
7f:4d:43:1c:6a:56:1c:db:9d:32:9c:4b:c4:08:b8:28:64:a5:
17:79:d0:9e:07:f2:99:dd:ca:f4:8c:d5:9f:c8:88:82:af:7b:
d0:7c:f2:2c:b8:19:ad:5a:82:2c:b8:f0:2a:74:2e:a5:84:f0:
07:d5:38:cb:95:8a:0e:47:be:0e:05:1d:35:37:91:cb:c5:be:
4a:fa:d5:5b:5c:dc:58:72:eb:f2:cb:69:b5:59:80:e9:35:f3:
99:3b:eb:57:e1:25:e6:2a:b9:6a:de:98:09:f2:97:c9:5c:d2:
8f:79:51:7d:4d:9b:de:58:03:13:39:9c:80:2a:47:a6:4c:8c:
51:c0:64:ce:41:7c:7b:b3:03:a0:27:af:4d:d5:c4:c1:26:00:
33:7b:21:fe
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuElxc6Ugh72af3yDG9eGtSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDMxMDcxNjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjI4NWVmNGQ3OTgxYjg4MjhiZDA1ODU3ZTgxYjhhODQ0MTlhZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoTKSsuauAXl8odcx2SUKdYLg5v6
ZqXNGXSvjMfaue28YjVATILJxs8o97K2+8PIaD1p4MAAuqgXlCmxGc/YI7RVQFtp
lupYbixXN3hRUmp0o+RDF66EouO0QNA8OZzZkCygsensa20AmSz0gZh5ryzBaG//
kf8YZrX2Emubo22ACsC7ArFwP/fi8OicsqaVmxuneUsY4jOZ5QbeNJ7pFB1CirI8
djqh3ijHsdnzVwdESBLKEWLMhTc+NYL6nL5dComnNNIIU8tqW6uKFo97qwKJb2xh
li1Wnpi5lEFgH/MpSGHqK7DOZGqpb/qQnYc6LiGhBnlkSnBotOzpOUcYRwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOsoXvTXmBuIKL0FhX6BuKhEGa3/MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNnloZTlOZVlHNGdvdlFXRmZvRzRxRVFacmY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG54yUr7N3uFUQpu/5sB
wkrnkmcmxFnihKc+mkaDm/caseszKM0XFmmEFgpXedT/WwZA+mLlMTZv9ENkQw/H
Uvb8AhFaIRtNy4n+0wPxikOXP3r8R+d9YcGI3/zoz2HEyfu3MJUS+i8zfhYJCn9N
QxxqVhzbnTKcS8QIuChkpRd50J4H8pndyvSM1Z/IiIKve9B88iy4Ga1agiy48Cp0
LqWE8AfVOMuVig5Hvg4FHTU3kcvFvkr61Vtc3Fhy6/LLabVZgOk185k761fhJeYq
uWremAnyl8lc0o95UX1Nm95YAxM5nIAqR6ZMjFHAZM5BfHuzA6Anr03VxMEmADN7
If4=
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:44:30 2025 by rpki-client