Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SjbFTeUKL55KRsrFmuG9S03u-Yk.roa
File: SjbFTeUKL55KRsrFmuG9S03u-Yk.roa (raw, json)
Hash identifier: XA4Eru0ImKO6tub/eu4NWQo0cREnDQE0Gop06eONhew=
Subject key identifier: 4A:36:C5:4D:E5:0A:2F:9E:4A:46:CA:C5:9A:E1:BD:4B:4D:EE:F9:89
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1E0573BDDA45FDB9FC00F0CA986946E0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SjbFTeUKL55KRsrFmuG9S03u-Yk.roa
Signing time: Wed 11 Oct 2023 09:15:55 +0000
ROA not before: Wed 11 Oct 2023 09:15:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:05:73:bd:da:45:fd:b9:fc:00:f0:ca:98:69:46:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 09:15:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a36c54de50a2f9e4a46cac59ae1bd4b4deef989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4b:13:8f:93:3b:1a:02:3d:cc:16:c1:58:79:
f0:77:31:23:a4:a4:c0:66:96:87:bb:fe:7c:04:98:
2e:ad:70:a2:3e:5d:5a:6c:bd:f6:a0:ef:08:a8:4d:
3c:f9:42:8d:1a:0b:dc:09:7a:6a:39:aa:25:62:bc:
1b:1f:58:01:2e:a5:62:31:fc:45:35:34:79:78:80:
0c:ac:eb:3e:ea:b9:4b:4a:8a:11:8e:fa:a5:0a:cb:
7e:23:44:39:04:e4:99:c6:03:b8:99:71:db:04:36:
81:f5:0b:59:fb:d6:b3:a9:de:b4:5a:f3:34:4d:7a:
88:44:c0:ae:da:9f:af:41:1b:45:a1:46:45:66:95:
fd:97:c5:27:78:d8:1c:c6:2a:73:f0:0f:a8:62:32:
a3:da:5a:b0:8c:12:e7:43:e0:91:b6:7f:1f:0f:fb:
42:92:6d:5a:6c:15:46:34:c5:43:ea:b1:cf:6f:ec:
5f:7a:18:b3:bb:57:d7:a2:a3:b2:16:ab:58:22:69:
02:ac:65:bf:86:d7:c6:d2:67:98:3d:24:da:97:0f:
4f:76:9a:dc:20:6e:09:5b:3e:5d:a5:e5:5a:89:0f:
84:f7:ed:c6:88:80:74:3d:f1:61:e9:83:3b:5e:3d:
70:ee:ff:ef:c1:6d:e9:56:df:e1:5f:a4:1a:f4:0a:
83:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:36:C5:4D:E5:0A:2F:9E:4A:46:CA:C5:9A:E1:BD:4B:4D:EE:F9:89
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SjbFTeUKL55KRsrFmuG9S03u-Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:c4:47:97:4c:b3:54:97:ae:d0:45:71:e4:8e:68:34:90:a5:
a5:0e:4a:4d:cf:76:c9:5d:64:c4:b6:16:16:d6:6c:e5:21:6a:
b1:52:44:48:89:ae:65:02:cd:50:eb:51:c6:fc:17:56:2f:bc:
10:f1:f2:b2:ef:7e:de:dd:92:6f:d4:40:3f:dd:68:f1:1e:cb:
8e:c7:18:eb:d3:80:a5:30:89:0e:84:c3:00:da:03:73:ec:56:
a5:0a:9c:3e:87:45:d1:6a:fa:8f:4e:ce:f9:de:82:7e:2c:2a:
de:9c:31:39:ab:3b:7a:3e:09:4a:91:21:a1:c7:f7:d1:7a:69:
37:0f:85:48:d1:10:c5:e7:d9:e4:0e:ff:18:c2:98:99:9c:cf:
a0:84:fa:39:f8:5a:bb:19:0f:69:c1:e1:43:63:f6:42:8c:1b:
37:ee:8c:e6:ea:36:e7:ba:36:e6:3f:45:88:e4:3a:b2:84:80:
15:90:72:a1:d2:5f:d3:f9:f6:18:0e:e2:6a:b1:9c:a1:13:39:
4e:64:98:9c:4a:1e:cd:74:dc:11:50:3c:b4:64:9a:b6:8b:c0:
40:74:44:9c:42:7f:ee:be:da:ea:ff:76:f0:50:82:50:19:d3:
58:40:d2:48:11:8b:67:37:a8:4a:18:3a:c3:ab:bf:23:f5:1d:
f4:3a:09:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:03:22 2025 by rpki-client