Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M6wAnDorNJ9nTiN9XhbAalXtcPg.roa
File: M6wAnDorNJ9nTiN9XhbAalXtcPg.roa (raw, json)
Hash identifier: ihm4g7vGuefldpmvzqUn5P28iA3tyzCIqJ/XAW0I/Ik=
Subject key identifier: 33:AC:00:9C:3A:2B:34:9F:67:4E:23:7D:5E:16:C0:6A:55:ED:70:F8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7DEAB696D2279F492CBED8E0E5C72D05
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M6wAnDorNJ9nTiN9XhbAalXtcPg.roa
Signing time: Mon 30 Oct 2023 00:10:15 +0000
ROA not before: Mon 30 Oct 2023 00:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7d:ea:b6:96:d2:27:9f:49:2c:be:d8:e0:e5:c7:2d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 00:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33ac009c3a2b349f674e237d5e16c06a55ed70f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:b0:ad:04:2e:68:23:b1:2c:b5:7c:1f:2d:
cf:89:af:53:7c:8e:aa:f6:04:4f:09:c6:94:e8:52:
bf:f7:38:ce:8f:84:72:ec:d5:b2:72:35:c5:44:0c:
8f:0f:c9:23:49:77:70:29:51:ef:d5:f1:e5:b1:91:
1f:83:14:fc:b9:6a:4d:59:c3:87:1a:0a:33:42:5a:
9b:35:e1:8f:41:22:aa:d3:02:ff:94:42:42:84:a4:
e5:a8:0c:a7:39:8d:2a:9f:8e:ff:bd:05:be:29:d9:
a0:ac:a1:ea:55:db:86:54:06:9e:19:b1:6a:4d:89:
b4:d5:bd:ce:60:33:59:06:dc:da:8c:82:c7:48:12:
a8:d5:b0:7a:86:46:3e:c3:cb:4f:34:69:af:d6:62:
51:0f:35:af:c1:e5:42:f2:fd:36:09:b3:2e:83:44:
a8:0d:63:d8:f7:dc:bc:62:c3:1a:72:b5:15:7d:c1:
34:b0:79:b0:73:cc:af:64:47:b2:0b:c7:32:f8:83:
96:06:ba:81:c9:52:7a:2f:38:c7:b8:5c:4e:15:10:
a6:bf:41:13:3d:00:d1:f5:9d:a1:ce:b7:bc:76:97:
95:7c:fe:52:7b:f8:b7:35:7c:ac:56:08:a9:c0:75:
8f:37:ab:ba:c1:3e:62:6e:4b:72:ed:bf:13:90:b2:
b2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AC:00:9C:3A:2B:34:9F:67:4E:23:7D:5E:16:C0:6A:55:ED:70:F8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M6wAnDorNJ9nTiN9XhbAalXtcPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:3f:65:5a:52:00:d0:66:79:6a:1b:ea:39:62:fb:1b:9a:39:
1c:87:ab:30:72:87:05:a6:5f:d4:cb:65:9a:6a:2c:27:c1:9c:
bd:d9:83:cd:0c:d2:b6:7a:29:ba:7c:b3:37:8e:1f:6c:52:64:
4d:a9:c1:3a:29:28:96:c9:dc:cf:08:76:9e:38:6f:fd:2d:e3:
76:45:73:9d:64:2e:50:2b:8b:57:fe:44:17:3b:36:9f:e1:85:
8f:32:6f:a9:f9:dd:6f:73:13:44:38:bb:2d:1f:8e:75:5f:27:
33:d7:91:d6:6c:cf:b1:41:91:96:f5:e4:94:7b:34:8b:49:76:
bf:e9:28:52:13:2e:6c:0d:a8:13:84:df:25:20:18:5c:e0:4a:
71:e4:b9:84:3c:d8:32:10:0b:c3:a8:f0:95:b3:50:ce:7c:92:
5c:07:af:41:a2:6c:a7:86:b6:5b:ac:4e:59:17:ea:f0:00:d2:
02:b0:26:b9:d4:13:eb:71:26:ca:93:4e:a3:e3:06:74:49:64:
9e:6a:cb:53:ea:61:4c:b5:26:c0:50:ed:c9:73:97:9d:27:0e:
19:16:1b:80:e5:87:a3:4b:26:ee:7b:9b:38:7a:3a:09:69:30:
f9:06:51:91:87:e6:40:a3:5e:ee:1b:bb:d3:e4:98:b1:1c:d1:
fc:f4:74:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:30:03 2025 by rpki-client