Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SJSyx2MgRiFKAwzqETvC8aszlGk.roa
File: SJSyx2MgRiFKAwzqETvC8aszlGk.roa (raw, json)
Hash identifier: ppBKvyaU5hmj0PYwG9F7c4FTTudQk1NZAAPb8RnbufU=
Subject key identifier: 48:94:B2:C7:63:20:46:21:4A:03:0C:EA:11:3B:C2:F1:AB:33:94:69
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD5ACD07152F140EFC866028A6D0FD329
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SJSyx2MgRiFKAwzqETvC8aszlGk.roa
Signing time: Wed 27 Sep 2023 08:06:27 +0000
ROA not before: Wed 27 Sep 2023 08:06:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:d5ac:cbd0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:ac:d0:71:52:f1:40:ef:c8:66:02:8a:6d:0f:d3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 08:06:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4894b2c7632046214a030cea113bc2f1ab339469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:b4:72:09:a2:1c:cf:13:23:96:ce:ab:96:
b8:22:c4:51:35:82:dc:24:c0:e6:f0:2f:2d:f5:e3:
b2:ef:e5:d9:af:5e:03:e9:85:63:8e:bc:1a:f8:18:
7b:44:89:78:2e:14:69:09:72:92:ee:ed:6c:1e:b9:
56:61:77:11:d0:be:e0:da:4d:69:07:b7:c2:80:f6:
ff:0f:c1:84:92:3f:44:4e:19:71:40:c0:32:93:c9:
15:07:ee:7f:d5:81:2e:b9:47:97:8e:74:5b:8d:a1:
47:9b:19:6e:fc:ca:76:5b:8c:59:6c:63:7d:f5:67:
53:7c:ac:6c:fe:a8:01:12:ce:2c:b5:83:39:23:8c:
ba:4d:c3:aa:d3:5d:ce:1b:15:80:a1:b2:f5:c0:06:
5a:8a:b1:d9:61:de:3c:25:bd:6d:6e:0c:1c:4e:e5:
89:b7:7d:7e:a1:9f:35:20:31:df:90:03:e7:b1:24:
a2:85:5a:61:91:65:9e:c3:6e:8c:07:07:b1:a2:3e:
3b:43:cc:11:87:ee:af:8e:59:c7:02:d8:cc:e6:a2:
79:10:4d:94:f7:ed:86:e3:20:04:b4:3e:d0:43:2a:
08:28:2c:14:cb:96:69:b1:ee:be:8f:8f:25:b4:11:
7f:fd:31:3d:ad:28:60:98:53:89:90:5a:7e:7b:83:
f4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:94:B2:C7:63:20:46:21:4A:03:0C:EA:11:3B:C2:F1:AB:33:94:69
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SJSyx2MgRiFKAwzqETvC8aszlGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:e5:56:f5:87:b9:2b:62:f2:54:37:2c:28:84:bd:4d:38:9f:
3d:6e:cf:5d:48:81:56:ab:f5:17:59:cb:5d:4a:4c:83:c2:d6:
f8:a4:a2:5e:be:2a:fd:f3:39:ee:0f:a3:21:4c:49:aa:72:0a:
f5:3c:07:5f:12:1a:84:1d:28:72:19:92:fb:cc:16:9c:16:6b:
a0:ff:63:09:44:d2:b6:a0:24:6c:97:af:00:f3:a7:50:8e:88:
bf:e1:62:9b:a8:29:7a:ba:ad:0a:99:33:a3:d6:ae:9c:01:26:
9b:8d:d1:d6:a6:5a:8b:de:5a:93:0e:1f:e4:59:dc:0f:2e:d9:
df:9b:c2:35:f9:63:4c:3d:83:f6:19:7e:7a:cf:d2:72:6c:74:
9c:4a:60:9c:68:86:c6:df:8d:bb:27:76:35:d2:00:59:0a:95:
e4:5d:72:32:80:fa:8d:01:c0:9e:16:03:19:53:ce:58:e0:43:
32:c2:ba:e8:1a:00:9e:8c:cb:ca:95:52:46:eb:3e:12:57:67:
5b:41:55:6f:db:1b:1a:84:1e:c9:2d:81:dd:27:5c:7b:fa:8d:
29:f2:15:f4:7b:71:a6:dd:46:79:62:8d:c0:2f:39:99:44:31:
57:ac:14:c1:c9:3f:63:c4:2d:be:e6:a6:7b:47:8c:95:7c:ca:
00:95:05:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:06:39 2025 by rpki-client