Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sucY09x02fKLGMP8e3POprkabLU.roa
File: sucY09x02fKLGMP8e3POprkabLU.roa (raw, json)
Hash identifier: 3up9ve1rxYqhY/V7l37prXtIPpyAS9vnoVVQnXTs7t4=
Subject key identifier: B2:E7:18:D3:DC:74:D9:F2:8B:18:C3:FC:7B:73:CE:A6:B9:1A:6C:B5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7B504127ED364AAF0B52DC3AD8CDD0CA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sucY09x02fKLGMP8e3POprkabLU.roa
Signing time: Mon 18 Dec 2023 05:05:06 +0000
ROA not before: Mon 18 Dec 2023 05:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:7b4f:eaed/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7b:50:41:27:ed:36:4a:af:0b:52:dc:3a:d8:cd:d0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 18 05:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2e718d3dc74d9f28b18c3fc7b73cea6b91a6cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:85:43:30:db:b5:b7:a2:21:21:17:db:29:cd:
d2:ca:67:ba:af:f7:cb:62:33:76:93:c2:e8:64:f0:
2a:f1:ee:b3:c9:60:aa:df:b5:00:f9:95:03:00:3b:
27:5e:76:a5:04:65:b5:dd:e4:d6:ee:06:e6:e3:ae:
5c:44:e2:fd:43:11:f1:0f:b5:53:75:94:b5:9f:a5:
44:54:1c:c4:eb:5d:bb:3f:7b:8c:32:73:d4:23:de:
11:e8:a1:7a:71:fc:93:3e:b3:10:13:56:6e:1e:92:
bd:5b:b5:7c:96:c5:21:50:53:a3:c2:18:35:4c:82:
a7:6a:76:56:11:56:e8:84:a5:90:25:f2:c0:33:54:
b0:a7:72:89:75:4d:2c:e6:c5:29:72:bc:05:90:a9:
01:5f:ae:38:95:0c:39:a3:5f:f8:d0:d3:80:56:73:
92:45:50:4f:f9:d7:1d:aa:78:5a:9a:32:86:d2:74:
69:85:73:a8:65:43:ef:30:4d:94:e7:99:f0:1a:9a:
4e:b0:6b:ac:07:29:f5:28:ae:f4:1e:b9:3d:01:ac:
0c:38:e6:8a:04:0b:61:8c:95:8c:15:40:36:e6:85:
d5:91:10:e7:58:e4:59:35:00:97:ab:dc:ba:68:99:
b6:b9:0c:09:2c:e8:d1:7f:3e:2a:be:22:1f:d9:c9:
ab:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E7:18:D3:DC:74:D9:F2:8B:18:C3:FC:7B:73:CE:A6:B9:1A:6C:B5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sucY09x02fKLGMP8e3POprkabLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:d3:6c:9d:49:89:0d:1e:0d:78:cd:a5:76:2a:59:4e:e8:a5:
72:40:aa:11:99:79:3c:0b:de:55:76:f1:92:6d:55:3a:0d:2b:
78:df:60:14:9a:4e:57:cc:58:15:10:2f:49:91:03:68:48:ea:
b8:22:7f:1a:40:86:52:33:f5:76:6c:38:78:79:cf:23:bf:7b:
7c:ad:5d:d2:4f:b5:db:54:68:35:3b:49:92:2b:a9:31:ff:da:
bc:cc:e0:86:28:19:b1:23:06:1d:38:4c:9b:78:d1:d2:2e:2d:
02:2d:54:5a:da:0e:ec:e4:99:7b:9f:ed:4d:76:12:00:d8:f3:
61:a0:11:2e:bc:0c:d5:bc:bd:3c:c0:a0:a5:77:9e:87:1f:50:
49:a9:f9:03:97:43:67:ae:42:06:d7:73:74:d0:3a:b6:a9:06:
c1:cb:76:30:34:e6:ad:a9:38:46:be:47:b5:45:61:5a:f4:06:
9d:fd:3c:7f:fe:c4:79:88:ef:00:6e:7f:19:4b:94:e5:c6:b9:
fb:17:a3:3b:66:8e:8d:ed:c0:d2:f7:f9:b2:d6:f0:be:e2:58:
4e:84:db:bd:8c:33:bf:d1:9a:06:50:ad:0e:fc:b2:4f:6a:d4:
d4:81:fc:95:66:e3:45:2b:9d:df:cd:b9:a7:bf:44:a3:25:c3:
39:55:45:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:45:20 2025 by rpki-client