Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/s6Yy-npgtVmIucCqR4WBjE8XJmM.roa
File: s6Yy-npgtVmIucCqR4WBjE8XJmM.roa (raw, json)
Hash identifier: o7z+YdPa1UAlnSckfjZqbS92zNi1lVPI/+cNnqoH9ss=
Subject key identifier: B3:A6:32:FA:7A:60:B5:59:88:B9:C0:AA:47:85:81:8C:4F:17:26:63
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C401EC6DCFA3E3213D37CCC0FFE482C54
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/s6Yy-npgtVmIucCqR4WBjE8XJmM.roa
Signing time: Wed 06 Dec 2023 17:13:27 +0000
ROA not before: Wed 06 Dec 2023 17:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:40:1e:c6:dc:fa:3e:32:13:d3:7c:cc:0f:fe:48:2c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 17:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3a632fa7a60b55988b9c0aa4785818c4f172663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:a2:9f:0e:66:6f:b4:70:c7:d2:f1:06:2d:
1c:f5:94:39:77:5a:cc:f3:49:e0:07:56:df:a6:db:
c8:92:98:b9:61:f7:75:3b:a3:0a:32:3b:74:35:f2:
05:75:38:d3:4b:ed:fa:66:da:cd:b3:6d:71:65:32:
5d:8e:6b:ad:96:9e:1c:e9:0d:cf:30:c0:1b:6b:3d:
f3:b3:da:51:68:09:03:7a:58:30:39:56:79:67:3c:
5d:a2:1f:21:7d:df:27:11:a8:7f:7f:af:10:6b:a2:
ce:01:df:76:a4:4b:f6:27:f4:d6:37:20:6f:7b:a1:
ce:eb:20:3e:ee:35:b3:66:8e:c4:97:ef:39:3b:34:
cd:a6:90:7b:55:07:d8:d2:c7:c5:87:29:d4:1d:cf:
ec:7e:9f:da:4b:78:0d:00:88:db:59:68:b3:73:fc:
df:f9:9b:34:88:36:89:92:1c:52:2c:3f:60:00:c2:
0f:1d:ea:bf:60:a5:0d:ab:00:6e:c9:79:ae:66:cf:
2d:a7:08:6f:90:84:10:1b:3c:82:d2:b3:2c:70:98:
d6:3d:b7:ff:fd:bc:d7:20:79:7c:d9:8d:66:5d:90:
3f:0e:be:16:1c:30:f3:39:1c:a7:2a:10:0e:11:1b:
44:85:3d:14:e6:83:52:ef:57:b2:a4:f8:65:cb:61:
ed:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A6:32:FA:7A:60:B5:59:88:B9:C0:AA:47:85:81:8C:4F:17:26:63
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/s6Yy-npgtVmIucCqR4WBjE8XJmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:61:1b:a7:c3:66:f4:b0:3c:f4:33:3b:3a:0f:32:1c:00:9e:
a5:52:39:fe:2e:db:30:dd:f0:b5:94:39:1f:6d:b0:ef:81:91:
3b:98:40:c5:8d:c2:61:77:46:8c:db:e1:ea:2b:f9:29:84:d8:
7e:2b:13:f3:93:60:67:6e:4f:93:c1:a5:10:ed:60:52:e7:15:
58:08:9f:ee:e2:0c:77:22:42:1d:79:7b:bf:d4:c5:74:ca:a5:
a7:28:ff:21:42:3b:ed:83:f5:ce:20:6c:4e:55:08:d6:59:53:
93:21:27:67:7f:e1:65:4a:0b:30:cc:cd:d7:1a:8e:9a:13:0d:
15:9f:96:82:56:7f:81:fc:b9:ed:22:06:8a:39:6d:41:90:e7:
80:24:cb:2e:27:8c:b9:65:88:24:ba:86:3a:37:4d:10:fb:5a:
07:19:31:5e:52:3c:70:9e:b6:df:fc:44:fc:55:2d:24:21:87:
78:06:1c:c0:f8:33:1a:c0:36:60:41:c8:b9:ae:ce:ca:a5:3a:
99:03:f0:52:0f:e7:9b:7f:93:c0:3d:a3:47:36:cc:7c:d7:d9:
cf:46:44:5b:5d:8a:9c:fd:28:a9:fd:18:56:ad:67:e9:ac:91:
69:03:7a:9f:b9:b2:96:e3:90:2c:0d:d3:22:c2:14:ee:2a:f5:
4e:c9:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:10:18 2025 by rpki-client