Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SsbE44_O2tfPU1SqFDn8zf1ieq0.roa
File: SsbE44_O2tfPU1SqFDn8zf1ieq0.roa (raw, json)
Hash identifier: 6tNl+DC67HP+K6/140EjkJKZK0HZzTj/DPJdQeQ6TkM=
Subject key identifier: 4A:C6:C4:E3:8F:CE:DA:D7:CF:53:54:AA:14:39:FC:CD:FD:62:7A:AD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B79DC81759DF11F5B75A04EDE0EB2DC16
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SsbE44_O2tfPU1SqFDn8zf1ieq0.roa
Signing time: Sun 29 Oct 2023 05:16:15 +0000
ROA not before: Sun 29 Oct 2023 05:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:79:dc:81:75:9d:f1:1f:5b:75:a0:4e:de:0e:b2:dc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 05:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ac6c4e38fcedad7cf5354aa1439fccdfd627aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0a:57:ec:93:5c:69:d4:38:71:6f:86:bb:3c:
d3:1f:49:31:63:6f:bb:8e:95:67:af:0b:53:cb:fb:
0e:a6:2d:36:e4:17:32:37:4a:57:5f:56:07:c6:1d:
81:11:51:4d:ea:fb:49:c9:c9:91:2c:fa:4e:56:61:
99:9d:d0:42:dd:27:b5:a4:b9:e5:6a:7c:0e:4d:76:
40:a0:fd:56:da:0b:82:c2:86:9d:a3:57:08:ea:93:
74:ff:b7:4e:b5:7a:8a:b1:28:e6:77:9e:53:8f:11:
8b:b9:c7:de:a2:17:17:82:8c:47:33:78:eb:d3:ce:
02:8b:e0:5b:52:1e:1f:06:3a:d4:c8:64:12:a3:1c:
25:48:b3:d0:06:92:c8:42:a5:f1:4f:4d:eb:4f:3d:
3b:2d:22:58:a7:ad:ca:1f:30:f8:9b:32:f4:16:08:
6b:6d:06:ac:21:5b:b3:55:ab:13:35:0e:48:cd:8c:
74:bc:cc:4a:ef:d0:32:dc:f3:41:8d:50:61:aa:5a:
5d:9a:4c:9f:dc:10:5a:0a:34:78:48:e2:3f:4c:8e:
8f:92:31:83:6e:73:cf:1b:00:3a:d6:b7:07:3a:5d:
f2:dc:a5:39:9e:31:fe:f0:fe:a4:67:a8:8f:42:9f:
97:9c:fa:59:de:d5:e0:be:13:90:76:2a:a8:85:11:
05:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C6:C4:E3:8F:CE:DA:D7:CF:53:54:AA:14:39:FC:CD:FD:62:7A:AD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SsbE44_O2tfPU1SqFDn8zf1ieq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:b8:2f:89:ac:e9:41:58:dc:cc:63:37:da:40:ea:1c:4d:12:
25:4f:fd:f3:30:e3:ac:bc:1a:f9:0b:90:7a:a6:e6:d1:63:39:
a5:6b:80:8b:f4:c5:a8:98:da:9e:26:a0:0d:99:cb:71:02:9c:
a3:84:be:a1:b7:ae:d7:d4:4f:72:5e:41:17:fb:1b:9a:a3:ca:
31:30:e1:ff:e3:54:ad:02:55:1e:bb:40:2b:30:ef:55:81:57:
02:f6:bc:2e:fc:ca:28:2e:66:70:c1:13:72:30:2d:97:e8:63:
9e:02:79:87:91:17:cb:c3:01:28:ed:5b:fd:16:ff:55:c3:3f:
05:a0:ac:bb:70:48:53:c8:ee:64:a8:28:0c:0a:38:5d:95:17:
50:4b:1e:c4:48:8f:6c:08:dc:96:27:13:b5:78:eb:dd:70:32:
54:99:ea:34:83:e7:eb:df:6a:dd:b7:30:07:35:30:16:55:09:
af:d4:ed:09:e2:36:db:f3:97:c1:2d:78:c5:11:30:11:3f:54:
bf:7c:27:05:b4:3f:dc:af:7d:4f:8b:89:83:9f:f5:c0:7b:4b:
22:06:74:b3:24:81:4e:a7:66:df:24:28:ff:fd:10:c1:dd:c4:
36:a0:3d:d9:c3:16:f1:58:e6:b1:5b:8b:23:c2:fb:e1:25:51:
86:25:f6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:01:36 2025 by rpki-client