Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SUzBcOi4kP2y-ntZVWX304kxHPc.roa
File: SUzBcOi4kP2y-ntZVWX304kxHPc.roa (raw, json)
Hash identifier: 0z+8j9diHECfC5hMDm6Zd81FBcT/uJM4gZakTYzhYxQ=
Subject key identifier: 49:4C:C1:70:E8:B8:90:FD:B2:FA:7B:59:55:65:F7:D3:89:31:1C:F7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA9E79F16CD0DA24510D8A58FD5E1685F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SUzBcOi4kP2y-ntZVWX304kxHPc.roa
Signing time: Wed 27 Dec 2023 06:12:58 +0000
ROA not before: Wed 27 Dec 2023 06:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a9:e7:9f:16:cd:0d:a2:45:10:d8:a5:8f:d5:e1:68:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 27 06:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=494cc170e8b890fdb2fa7b595565f7d389311cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:36:fc:33:f1:84:dd:c5:d0:a5:98:ee:87:
47:f3:64:c8:a5:2f:7a:9f:3f:49:4a:65:f6:09:9b:
ba:0a:b4:ba:d1:b9:04:7b:1a:9f:46:8f:84:b3:21:
e6:4b:9d:63:d4:a6:35:a6:d0:f8:8c:e1:49:35:5a:
9c:c0:8a:c2:b5:67:ae:9a:a5:c0:97:ad:53:7b:5c:
c5:22:ce:24:e6:97:9a:35:27:bc:1a:cd:e8:bb:81:
d3:92:72:f1:4e:28:7a:19:7d:21:2b:51:03:fb:11:
22:c4:04:25:37:db:5b:de:b4:89:bd:11:e9:da:e7:
93:1a:57:29:3b:f4:22:f3:ef:48:53:4d:e8:f7:de:
b1:f5:8d:1b:40:03:b5:a7:04:3e:6f:6b:36:f5:4d:
88:25:f7:03:ca:69:05:80:52:f7:b8:2b:78:a2:57:
d1:f1:90:a8:4f:22:81:2b:56:ce:66:fc:7f:9c:5a:
a8:bf:fe:d9:13:ce:43:9f:35:77:3f:98:2d:aa:da:
aa:62:7d:83:38:87:37:e5:1d:2b:59:59:e6:c5:3c:
fd:b7:97:58:1f:0b:2c:dc:0e:40:db:7c:46:a3:9c:
d5:f7:09:3f:fa:67:6b:17:ac:3c:99:d1:33:b6:49:
ae:84:5a:66:d1:97:5f:d4:e3:55:e7:c3:2f:64:d5:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4C:C1:70:E8:B8:90:FD:B2:FA:7B:59:55:65:F7:D3:89:31:1C:F7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SUzBcOi4kP2y-ntZVWX304kxHPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:38:1c:55:af:31:85:db:56:8d:bd:c7:27:04:85:97:89:e6:
d0:b4:36:f5:b6:75:08:89:0f:08:2a:16:29:9b:2d:49:d0:ea:
84:48:b0:92:7c:06:0f:9a:fd:fe:ac:d0:8f:25:41:a7:11:e8:
d0:9e:53:d6:4b:82:3d:75:2d:8d:51:fd:13:60:40:89:99:d9:
e6:01:ad:5b:61:bf:0f:b1:c0:cf:7c:ec:df:76:2b:b9:ee:48:
7b:0a:9e:08:5a:df:8a:8e:6f:1b:ee:13:55:53:9c:9a:54:b9:
fe:f8:27:17:27:4d:7e:47:43:f6:57:9a:aa:ed:86:f2:fb:3a:
58:c7:33:63:54:4f:75:6c:dd:ca:3d:ef:90:a4:9c:02:72:9c:
b6:da:f1:0f:e4:7f:84:e3:ac:d5:cb:4b:0a:de:f1:67:f3:ab:
a4:dd:bc:14:69:2f:cf:5f:36:52:b4:97:a1:de:21:91:df:23:
e8:d8:e3:9c:09:90:35:e9:5f:bb:6e:20:02:b8:a6:c0:eb:9b:
ee:14:fc:14:6c:f6:87:21:6b:67:fa:cc:bf:09:e9:9b:57:35:
9d:99:cf:5e:41:f3:22:70:80:90:78:dc:de:07:6f:f7:4b:fe:
a5:aa:17:b0:f7:e0:49:96:4c:ed:9f:65:46:eb:b3:43:f0:78:
df:78:51:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:46:38 2025 by rpki-client