Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/suJehXncMDrhD-YNp_awDHYCplU.roa
File: suJehXncMDrhD-YNp_awDHYCplU.roa (raw, json)
Hash identifier: jP0WsV5K3pKIkzJgeTrduf0DRphSZfEIEswTI7jVhlg=
Subject key identifier: B2:E2:5E:85:79:DC:30:3A:E1:0F:E6:0D:A7:F6:B0:0C:76:02:A6:55
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE255E400DC72E5DF88B92F799AB8B615
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/suJehXncMDrhD-YNp_awDHYCplU.roa
Signing time: Sat 18 Nov 2023 12:09:21 +0000
ROA not before: Sat 18 Nov 2023 12:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e2:55:e4:00:dc:72:e5:df:88:b9:2f:79:9a:b8:b6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 18 12:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2e25e8579dc303ae10fe60da7f6b00c7602a655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:f8:06:c8:57:21:97:06:a2:94:39:25:8d:
b1:60:0c:68:43:fa:81:e8:be:ba:70:bd:99:93:88:
b8:0e:3c:df:44:eb:a6:89:48:e2:ad:8a:a8:c2:16:
7b:2c:ec:3f:62:25:55:ca:c3:55:df:2d:fe:63:56:
00:40:6b:c1:ee:ee:23:f7:e3:09:93:4d:49:dd:83:
41:8f:87:a5:72:d0:af:a9:70:7a:17:47:d0:81:e4:
80:a2:23:d2:f9:20:28:cc:69:5c:7c:5b:42:25:4b:
1e:9d:e9:e7:74:e7:19:d0:76:63:07:ec:4b:4d:ec:
d6:57:fb:9f:88:fe:90:f3:7c:98:52:37:ea:fa:6d:
34:a1:95:ad:87:66:a8:eb:8b:08:77:5e:37:37:8c:
2a:38:35:53:08:74:5d:74:c0:84:35:fe:79:27:33:
ec:bd:24:29:d6:e4:d4:b5:a2:e1:81:43:ba:9e:60:
8b:98:de:31:d9:06:6c:02:51:72:d1:7c:7f:b9:10:
56:f7:0c:33:b0:8b:bf:54:c6:1d:19:3d:88:f5:dd:
51:8c:bb:ba:95:e6:6a:0d:f0:59:9a:35:b6:d4:80:
11:4b:50:1b:4d:32:11:1d:58:b8:fb:e0:54:c4:98:
40:2a:00:eb:ac:5a:d1:e6:1e:3d:0c:5d:e9:c9:fe:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E2:5E:85:79:DC:30:3A:E1:0F:E6:0D:A7:F6:B0:0C:76:02:A6:55
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/suJehXncMDrhD-YNp_awDHYCplU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:89:5b:35:f8:2e:17:f1:ce:ac:ca:da:f8:08:8e:ed:5c:41:
77:96:45:df:3d:87:82:f3:78:5d:6e:ab:00:2b:8e:d7:06:3e:
4c:2f:d7:c1:3b:63:b2:c7:d9:8b:64:db:69:39:7d:2a:27:23:
60:a6:35:af:c4:a2:8a:d5:e9:1f:18:2c:dd:7b:ed:12:34:4f:
eb:9a:04:08:c0:df:d0:26:db:48:b2:56:2c:3f:cd:d2:de:b9:
bd:5f:88:91:75:4d:c4:2a:59:bf:25:cd:b0:58:d0:8e:e1:e1:
90:37:75:2c:bf:08:5f:7c:c2:73:99:e0:88:bd:b5:00:bc:91:
77:4b:b3:bb:75:11:33:e6:63:71:11:6d:67:29:cf:63:13:d4:
11:2a:75:c5:61:3e:63:70:66:e7:9d:2f:00:b3:59:b1:7d:b4:
74:da:24:7b:14:d7:0e:c5:b8:f4:c1:35:3f:7b:a5:26:69:a8:
00:6f:4a:d0:0b:10:f6:fe:18:9e:a7:11:a1:c4:f9:bc:ca:eb:
f8:55:0d:2c:90:6c:0a:12:fa:c9:c8:1a:2d:36:78:5f:ab:1f:
60:d8:9d:36:7c:e5:a8:f6:82:c9:ad:f0:d6:f9:02:d8:39:cd:
46:c1:88:6f:6f:34:b9:e7:b5:36:db:85:54:d5:29:94:0a:38:
ad:d7:05:83
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYviVeQA3HLl34i5L3mauLYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE4MTIwOTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmUyNWU4NTc5ZGMzMDNhZTEwZmU2MGRhN2Y2YjAwYzc2MDJhNjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvz4BshXIZcGopQ5JY2xYAxoQ/qB
6L66cL2Zk4i4DjzfROumiUjirYqowhZ7LOw/YiVVysNV3y3+Y1YAQGvB7u4j9+MJ
k01J3YNBj4elctCvqXB6F0fQgeSAoiPS+SAozGlcfFtCJUsenenndOcZ0HZjB+xL
TezWV/ufiP6Q83yYUjfq+m00oZWth2ao64sId143N4wqODVTCHRddMCENf55JzPs
vSQp1uTUtaLhgUO6nmCLmN4x2QZsAlFy0Xx/uRBW9wwzsIu/VMYdGT2I9d1RjLu6
leZqDfBZmjW21IARS1AbTTIRHVi4++BUxJhAKgDrrFrR5h49DF3pyf78kwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLLiXoV53DA64Q/mDaf2sAx2AqZVMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvc3VKZWhYbmNNRHJoRC1ZTnBfYXdESFlDcGxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA+JWzX4LhfxzqzK2vgI
ju1cQXeWRd89h4LzeF1uqwArjtcGPkwv18E7Y7LH2Ytk22k5fSonI2CmNa/EoorV
6R8YLN177RI0T+uaBAjA39Am20iyViw/zdLeub1fiJF1TcQqWb8lzbBY0I7h4ZA3
dSy/CF98wnOZ4Ii9tQC8kXdLs7t1ETPmY3ERbWcpz2MT1BEqdcVhPmNwZuedLwCz
WbF9tHTaJHsU1w7FuPTBNT97pSZpqABvStALEPb+GJ6nEaHE+bzK6/hVDSyQbAoS
+snIGi02eF+rH2DYnTZ85aj2gsmt8Nb5Atg5zUbBiG9vNLnntTbbhVTVKZQKOK3X
BYM=
-----END CERTIFICATE-----
Generated at Mon May 12 19:10:05 2025 by rpki-client