Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sURyKAJG8RCA3_eZ8aYwuVN1_50.roa
File: sURyKAJG8RCA3_eZ8aYwuVN1_50.roa (raw, json)
Hash identifier: ib/aCdTJugpNbIqxTwAn1LL4bkCGhwj8vtzKvRQh8xQ=
Subject key identifier: B1:44:72:28:02:46:F1:10:80:DF:F7:99:F1:A6:30:B9:53:75:FF:9D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B43CD3F98C06BFE826298F348941029EB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sURyKAJG8RCA3_eZ8aYwuVN1_50.roa
Signing time: Wed 18 Oct 2023 17:20:06 +0000
ROA not before: Wed 18 Oct 2023 17:20:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:43:cd:3f:98:c0:6b:fe:82:62:98:f3:48:94:10:29:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 17:20:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b14472280246f11080dff799f1a630b95375ff9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:2a:a9:45:56:3c:3f:75:ff:14:ee:57:0c:
e6:9d:76:87:1a:71:a7:02:f4:aa:91:09:61:92:f6:
73:40:53:88:6c:83:23:89:59:6e:fd:67:63:95:bd:
bd:41:30:b4:25:e5:be:cc:0e:30:00:fa:df:63:b4:
83:6f:8a:c5:3b:85:b5:b1:eb:98:70:40:01:c9:64:
13:62:fa:e7:cf:2b:f3:e1:95:d8:3f:71:c0:0e:62:
99:10:e5:7a:09:23:fa:77:1c:f8:3e:95:a8:85:1a:
ee:12:f4:5f:94:1c:44:54:d8:a7:6d:bf:05:23:70:
bf:93:43:f1:25:3a:2a:ee:15:71:5f:3b:50:b1:94:
a4:20:77:4c:12:63:4e:12:14:7f:fe:9a:c2:50:26:
48:e7:b0:3a:5a:91:d1:b5:f8:21:86:e3:d5:e3:a8:
2a:4d:1b:59:75:ce:b7:f0:4e:5b:9c:e0:ab:01:b8:
30:75:db:a7:48:bc:45:ba:06:f7:02:8b:84:26:9f:
0d:3f:2c:7e:6e:69:b8:c2:ee:81:e4:ad:54:40:7d:
96:f9:ed:a3:27:11:ac:59:c0:25:a9:5d:b0:de:c4:
bf:59:45:3d:bd:b6:bc:e0:fb:66:f1:69:c0:ce:32:
51:d1:07:70:10:59:67:9b:9c:fa:41:5b:7d:c9:a9:
cf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:44:72:28:02:46:F1:10:80:DF:F7:99:F1:A6:30:B9:53:75:FF:9D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sURyKAJG8RCA3_eZ8aYwuVN1_50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:69:f4:4e:f7:46:2e:74:b2:a3:9e:d9:ea:8c:33:27:20:6f:
64:7e:44:1f:b5:2c:83:06:10:9f:5a:fb:3c:80:d0:73:f8:9a:
7f:cb:26:fa:df:d3:30:e5:af:fd:44:a7:38:8a:9e:98:cf:b0:
0a:95:62:af:55:24:0d:7e:b2:00:53:8c:b9:d2:6f:b9:11:85:
44:b8:87:d9:d7:7e:03:46:9a:c9:b7:8e:a2:0f:df:5e:ba:0a:
cd:ed:4c:b7:92:26:46:d2:a8:ef:6e:7b:62:3f:f9:2e:d9:02:
90:74:39:40:c9:04:7a:ec:63:3e:6f:59:74:a0:8a:5a:84:47:
5c:93:4a:1f:10:a5:26:a5:7d:4a:13:4c:33:f6:c0:dd:ab:8c:
d7:d0:df:c1:08:58:52:ff:b5:63:c6:13:6e:23:5d:5f:00:5e:
87:7e:6a:94:23:eb:35:a7:a9:69:80:8d:0c:7a:9d:af:96:15:
ba:1f:10:f7:08:db:03:d0:fa:67:c4:02:01:95:82:6a:45:df:
ad:b1:15:4c:d7:8c:99:60:86:79:58:d1:d7:55:bd:2b:8a:d7:
01:a5:7c:aa:6c:68:44:31:25:39:19:b7:a6:3d:d9:8c:4c:dd:
c8:ee:c4:9c:6c:9b:65:37:06:05:f1:8d:78:7c:83:dd:9a:95:
db:29:35:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:24:05 2025 by rpki-client