Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SBURUVnLZU48QNPjZYvZ0FWUfCw.roa
File: SBURUVnLZU48QNPjZYvZ0FWUfCw.roa (raw, json)
Hash identifier: cbInoy7aSMPqLyLKfd+YkokhWPIA+9D+HSWw3nJjHjw=
Subject key identifier: 48:15:11:51:59:CB:65:4E:3C:40:D3:E3:65:8B:D9:D0:55:94:7C:2C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B461BC3CFD6E4B6E9B625AB589E3790D8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SBURUVnLZU48QNPjZYvZ0FWUfCw.roa
Signing time: Thu 19 Oct 2023 04:05:06 +0000
ROA not before: Thu 19 Oct 2023 04:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:461b:415a/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:1b:c3:cf:d6:e4:b6:e9:b6:25:ab:58:9e:37:90:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 04:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4815115159cb654e3c40d3e3658bd9d055947c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:3a:46:83:0f:f5:0b:7f:93:db:57:a5:e3:
71:09:61:cc:16:22:fb:0e:aa:4c:0a:11:86:6b:ba:
e7:d6:a5:42:49:d8:12:a0:4e:2c:58:4b:45:5a:df:
57:45:5b:87:0a:8c:cf:fe:2d:40:f6:0a:ed:e9:5b:
28:f5:05:25:79:dd:ef:e2:33:57:01:ae:2f:b3:05:
97:4b:33:eb:f8:c7:03:03:6e:53:f7:ee:73:c3:df:
61:e9:c8:69:07:65:0d:b1:3b:7f:b7:4e:1f:d1:2d:
47:ac:51:43:d5:bb:89:18:28:64:3b:c6:28:33:31:
4c:d8:b5:c8:78:b2:fb:d8:69:2a:0e:83:b4:1e:96:
77:d2:81:fe:dc:a1:80:8c:b5:84:26:ae:18:56:6e:
bf:6b:42:a0:74:22:8c:6b:69:d4:41:69:6a:13:7e:
e0:8d:0e:e1:7d:43:15:f5:81:a9:75:14:16:10:45:
27:e3:9e:05:34:7a:80:d1:f1:e6:03:5d:f7:7c:93:
74:da:33:d4:24:2a:cc:93:6d:8f:0b:de:5d:f9:b0:
1e:31:b9:cb:49:c9:b1:17:65:1a:f5:4a:0e:f9:74:
e4:65:c7:6b:18:9f:90:af:30:2f:a3:9e:82:a1:6b:
86:ca:2f:e2:d6:18:25:49:e5:b6:f3:8b:3b:d4:6b:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:15:11:51:59:CB:65:4E:3C:40:D3:E3:65:8B:D9:D0:55:94:7C:2C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SBURUVnLZU48QNPjZYvZ0FWUfCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bc:d8:3b:c4:57:f1:b6:0c:3f:b4:fd:b8:65:4b:db:7b:f7:a0:
8f:76:2a:9a:13:c9:ff:16:01:4f:65:a3:38:5f:10:50:2c:1e:
ad:47:0e:8c:13:49:5a:47:55:f3:d3:e8:25:80:0f:54:cf:9b:
aa:2e:fc:3d:80:37:db:f4:5d:23:90:6e:7c:11:c7:83:74:1d:
eb:4e:dd:6f:71:0b:63:1b:e0:7f:35:15:41:26:2c:a4:fc:48:
5d:47:74:07:ab:43:4f:c0:8e:e6:b0:af:30:b2:5e:ae:cf:54:
56:4f:93:f9:3c:8b:80:6e:9f:cb:de:24:7e:bc:85:4c:c5:0e:
41:ed:c1:44:12:59:36:27:4c:8e:98:c7:a4:be:2b:02:6a:79:
65:ed:c5:ec:7b:c2:e8:ff:f0:3f:8f:89:1d:45:e8:97:39:82:
f7:88:ff:f7:34:8b:72:06:22:bf:bb:1f:70:cd:6c:42:11:99:
22:e9:26:cc:20:bd:de:fc:47:48:ab:4b:b8:0e:aa:94:d0:ec:
60:b0:aa:7b:1c:29:a6:3e:b9:31:25:97:6a:0b:44:27:44:d1:
95:b4:34:8a:51:49:00:d4:82:03:9d:ea:81:27:2e:f7:d4:15:
e0:b7:f2:56:da:88:53:20:79:2b:64:95:e2:71:e3:6d:92:88:
59:c7:57:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:01:46 2025 by rpki-client