Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SuRfoji16LOY1QcxyhMeqcWJyl0.roa
File: SuRfoji16LOY1QcxyhMeqcWJyl0.roa (raw, json)
Hash identifier: ccxbq0+9Dlp6Y5mSKzCv+uzStFW/XzhJODlp2PCJgK0=
Subject key identifier: 4A:E4:5F:A2:38:B5:E8:B3:98:D5:07:31:CA:13:1E:A9:C5:89:CA:5D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B11C6814A8EFDF4DCCB194B8FC89D94A5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SuRfoji16LOY1QcxyhMeqcWJyl0.roa
Signing time: Mon 09 Oct 2023 00:11:43 +0000
ROA not before: Mon 09 Oct 2023 00:11:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:11:c6:81:4a:8e:fd:f4:dc:cb:19:4b:8f:c8:9d:94:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 9 00:11:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ae45fa238b5e8b398d50731ca131ea9c589ca5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:56:a5:f5:02:d7:4b:8a:d1:87:e1:7d:0d:
63:f9:83:f0:5d:f6:f1:51:f2:95:85:e7:47:e3:7a:
e2:9a:48:bf:9c:88:a8:fc:db:93:77:72:af:84:c0:
10:3c:9b:08:f7:69:c9:d3:74:72:83:a9:f4:b0:87:
3a:86:dd:13:45:d3:61:1e:9a:70:e5:6c:ab:91:4c:
4b:ae:35:42:73:05:e4:ee:13:92:9c:ef:c9:c2:1d:
9b:5d:56:8e:b4:b9:a2:b4:1e:45:57:46:c5:c5:84:
fb:95:01:3a:da:7c:ee:97:61:a8:3f:07:c3:7f:c3:
f1:6c:55:b5:6a:37:96:d4:2e:09:36:6e:58:2b:ba:
2c:11:b9:76:12:4f:75:2c:65:db:7c:e5:9e:53:44:
89:5c:60:7f:8c:8c:3e:00:dd:0c:1c:d6:d7:05:4d:
b6:e4:4b:12:4e:de:a9:5c:94:0e:7c:fd:ea:71:64:
02:4d:0b:9c:b6:30:a3:0b:14:55:1c:e7:c7:48:61:
d9:64:4a:ba:34:e4:18:71:9d:24:6b:5b:72:f4:35:
68:36:8e:2b:0e:6b:e9:3d:92:01:7c:64:f8:8d:4c:
d5:a1:83:6c:b1:ab:ea:04:7a:9d:2f:d2:ae:ff:be:
56:8e:bc:c4:30:5c:f5:49:30:57:c0:2b:7e:fb:7a:
9a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E4:5F:A2:38:B5:E8:B3:98:D5:07:31:CA:13:1E:A9:C5:89:CA:5D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SuRfoji16LOY1QcxyhMeqcWJyl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:cf:7b:5a:73:a6:c5:f2:91:7b:6c:44:30:95:7f:c0:3e:bd:
8f:27:0b:7c:69:8d:4e:bb:fd:92:6b:e3:bd:68:93:d9:d2:bc:
1a:8f:b6:4a:4e:7b:d5:9f:f2:89:1d:fd:6d:1d:73:eb:1c:9d:
35:b9:c6:3a:fd:98:55:24:81:6e:7c:a4:c4:53:ad:02:6b:f8:
9c:74:c8:8c:e5:f9:0b:51:6a:ea:61:05:cf:f4:73:08:b0:2f:
78:3b:62:60:b6:ef:d3:ca:96:d0:82:3d:9d:c7:b1:fa:a3:e1:
b4:9c:0e:a7:ab:03:a4:11:aa:f1:1a:d7:7b:43:96:69:a8:e2:
e4:e4:fb:4e:1b:3b:18:53:76:96:61:ac:21:8a:4a:0a:46:ff:
29:bc:3b:a7:d0:86:75:44:26:f1:2d:04:0e:71:a0:59:19:28:
54:cb:f4:fc:8a:10:b5:2d:a2:9e:b4:ec:1a:e4:28:5b:77:67:
81:45:e4:5d:24:f2:09:b5:35:6b:14:d7:f9:f7:20:f2:9e:eb:
71:74:e2:90:cb:e8:e2:7a:20:52:49:94:00:b5:f1:db:5c:79:
68:26:47:5d:f8:0b:c4:50:59:51:2d:a0:f8:e4:bf:b0:fa:f8:
4b:7a:fa:71:36:00:03:a6:48:e7:f5:1b:2b:70:7d:3e:ea:0c:
ff:3d:9f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:39:58 2025 by rpki-client