Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/s6sFE1Kd-IMlE_3NcC9z7VXo1nE.roa
File: s6sFE1Kd-IMlE_3NcC9z7VXo1nE.roa (raw, json)
Hash identifier: O0hb0JawnMriA7bXtgK4niRT+WPewmLXe8eOYblxmpY=
Subject key identifier: B3:AB:05:13:52:9D:F8:83:25:13:FD:CD:70:2F:73:ED:55:E8:D6:71
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B90CD9D0C2108D7B6C2C740F291FC0086
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/s6sFE1Kd-IMlE_3NcC9z7VXo1nE.roa
Signing time: Thu 02 Nov 2023 16:11:16 +0000
ROA not before: Thu 02 Nov 2023 16:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:cd:9d:0c:21:08:d7:b6:c2:c7:40:f2:91:fc:00:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 16:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3ab0513529df8832513fdcd702f73ed55e8d671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:fe:58:15:59:cb:31:47:fc:a4:9c:ff:a7:
22:9d:24:f2:c3:95:47:29:f3:08:0e:1c:01:ad:50:
d2:24:ea:e0:e1:e7:6c:ed:5d:de:e4:fc:a9:1f:3e:
89:3e:47:a1:52:96:0f:ed:02:c4:99:94:b1:4f:b6:
28:58:b5:18:60:5b:86:c9:7f:39:db:8b:13:c7:08:
10:33:51:30:d5:24:39:91:e2:50:29:9c:8e:7e:a4:
11:f6:64:00:d2:9a:a9:11:45:0f:78:98:65:fd:06:
7d:21:b1:70:89:ab:1a:3d:e4:45:d4:13:eb:3c:e6:
a2:d2:d7:5b:6d:89:3e:2c:f8:f3:e6:8c:bf:af:46:
9a:f0:1a:f6:39:08:e9:f7:6a:30:f0:d2:ce:22:18:
5c:9b:0f:d1:72:71:12:81:3c:59:ae:00:15:1c:3e:
ff:66:9c:37:b8:ce:69:20:88:28:7e:e8:78:09:67:
79:f0:61:cd:7f:5f:e4:20:54:bc:e9:97:ba:97:5e:
4d:16:1f:29:38:86:36:52:56:1f:bc:0e:b5:ec:ee:
e3:7f:9e:da:74:00:73:2a:a3:84:ad:8b:d6:8c:e0:
f4:ac:14:52:75:b5:4a:22:69:cf:3e:5c:0d:91:2f:
7d:0c:d0:cd:b3:61:52:9b:aa:cb:c3:cf:86:b4:fb:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AB:05:13:52:9D:F8:83:25:13:FD:CD:70:2F:73:ED:55:E8:D6:71
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/s6sFE1Kd-IMlE_3NcC9z7VXo1nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c3:40:1e:12:57:75:e8:b5:38:aa:ad:fd:d4:be:e8:d3:9d:00:
a2:e8:78:c3:fe:ef:94:6c:91:20:74:8a:0a:9f:1e:d3:14:16:
98:72:92:39:7b:b3:bf:c9:9e:45:ad:61:4d:b1:04:26:00:d8:
96:07:3d:e6:96:6c:af:c0:fe:d0:48:2a:61:41:e4:da:ef:8b:
c6:b2:be:db:32:b1:c6:b4:70:c6:80:52:54:5b:0a:2f:54:35:
62:24:6e:83:a5:c5:08:9e:7c:6d:3d:b0:ef:1a:f3:88:28:6b:
e2:14:c3:b3:77:0c:66:37:fc:1e:09:c8:e0:5e:69:8c:55:5b:
fb:e0:4f:e1:f3:05:3b:0b:36:e9:ff:02:aa:83:d4:a1:ff:ee:
5f:43:ba:04:61:ca:22:25:15:10:2b:9e:cc:e1:69:3b:92:31:
64:67:b3:04:1c:bc:9d:56:ba:d3:8b:4e:88:4e:4d:4f:9a:01:
2d:7a:f4:d7:1a:74:8e:c6:30:09:d4:8b:b7:62:14:6b:a0:56:
29:69:87:eb:ad:26:3b:f0:c7:e4:50:11:c2:bc:c6:ff:ee:63:
c2:89:34:10:6c:6e:51:69:ed:58:be:5f:9a:3a:dc:1d:c4:e5:
5f:64:bb:a0:a0:e8:c8:98:31:30:ce:9c:0e:19:79:95:24:f4:
fc:44:ad:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:19:18 2025 by rpki-client