Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SGTB_B586ZT-YY4ub8a6QJbXf9o.roa
File: SGTB_B586ZT-YY4ub8a6QJbXf9o.roa (raw, json)
Hash identifier: uk57VWJWNkWMLk9igTYXKTa60f7aWUUHYoxcANimoWE=
Subject key identifier: 48:64:C1:FC:1E:7C:E9:94:FE:61:8E:2E:6F:C6:BA:40:96:D7:7F:DA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6B778D1B2C598C6D77BC266087035C0C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SGTB_B586ZT-YY4ub8a6QJbXf9o.roa
Signing time: Fri 15 Dec 2023 03:14:06 +0000
ROA not before: Fri 15 Dec 2023 03:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6b:77:8d:1b:2c:59:8c:6d:77:bc:26:60:87:03:5c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 03:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4864c1fc1e7ce994fe618e2e6fc6ba4096d77fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6f:2b:7b:ec:4b:cc:ac:dc:c1:f0:79:33:c2:
4f:01:31:24:02:c0:26:24:1e:e0:0f:27:87:93:93:
76:db:a1:4b:01:34:f8:da:16:4c:28:ad:8b:c5:5f:
b9:91:9f:ab:69:c6:d2:d7:3c:9f:56:af:d9:25:cd:
5b:46:b3:1e:13:6e:d4:db:34:1e:72:47:d4:f9:c7:
33:30:e2:fa:87:2b:83:43:06:a7:00:2c:40:78:01:
ca:c5:31:e1:dd:3c:55:8d:40:b5:38:84:55:a8:fd:
73:46:dd:ec:e0:48:00:10:bf:97:c8:d9:b4:48:4e:
20:8a:c9:69:8b:2e:eb:54:7a:e0:a4:af:10:49:84:
a4:0b:bc:d1:89:7a:de:5f:9a:1a:86:70:fe:30:9d:
36:98:a0:9e:eb:ef:45:5e:27:74:21:3f:0e:8e:75:
95:e4:d3:71:ae:71:1c:67:8c:c9:1b:74:75:33:f8:
9a:2c:d0:11:68:93:fe:fb:50:6d:d6:aa:30:7d:43:
93:58:28:25:40:78:81:c2:50:25:92:8a:ca:5f:a0:
e2:c0:c8:6a:fc:ac:3c:2b:6f:39:74:93:67:b2:a5:
b7:f1:48:96:40:4c:02:02:67:e8:94:d3:fc:20:1f:
92:28:13:c5:83:d5:6a:c0:36:59:c5:7c:72:de:b1:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:64:C1:FC:1E:7C:E9:94:FE:61:8E:2E:6F:C6:BA:40:96:D7:7F:DA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SGTB_B586ZT-YY4ub8a6QJbXf9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:71:e8:57:66:c1:57:bf:ae:53:f6:fc:e5:8f:76:bd:2e:42:
6d:64:40:ab:96:b1:72:fc:46:df:d0:ed:8d:a4:21:79:f2:d6:
1c:c7:89:31:f7:90:85:2c:4f:87:80:90:e1:7c:b2:23:4a:b8:
4b:a4:49:e5:b7:48:69:37:67:71:d1:b0:2c:db:e1:35:69:7c:
5d:8e:5f:e9:84:b7:92:25:fb:58:48:02:52:75:3f:d5:dc:fb:
77:66:eb:ad:0b:a9:22:cc:20:28:9a:6c:7e:1d:de:38:92:85:
aa:d2:cd:fa:50:13:36:1b:02:03:70:09:a8:5c:14:2d:3a:c4:
1e:af:8e:29:3a:2a:50:dc:4f:31:89:57:28:44:67:b5:34:64:
ab:86:9d:16:f7:96:02:b0:4f:f8:4a:61:64:2e:aa:2d:20:a5:
f9:54:4f:74:a6:ab:ae:af:e0:da:4f:a7:e6:b4:1f:f4:6e:e0:
56:d6:e3:11:63:3a:f7:af:17:ce:8a:31:c6:79:d7:b6:10:fa:
fc:9e:aa:1d:57:ec:ea:f7:60:f5:00:39:25:da:a7:4d:a7:fa:
5f:48:e9:8f:4a:40:0d:ba:85:c8:99:c2:d2:9b:18:f8:e5:6b:
c1:43:d4:5d:19:04:d0:22:38:7c:5a:74:47:58:0c:4f:6c:f7:
30:66:12:8f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxrd40bLFmMbXe8JmCHA1wMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE1MDMxNDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODY0YzFmYzFlN2NlOTk0ZmU2MThlMmU2ZmM2YmE0MDk2ZDc3ZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA028re+xLzKzcwfB5M8JPATEkAsAm
JB7gDyeHk5N226FLATT42hZMKK2LxV+5kZ+racbS1zyfVq/ZJc1bRrMeE27U2zQe
ckfU+cczMOL6hyuDQwanACxAeAHKxTHh3TxVjUC1OIRVqP1zRt3s4EgAEL+XyNm0
SE4gislpiy7rVHrgpK8QSYSkC7zRiXreX5oahnD+MJ02mKCe6+9FXid0IT8OjnWV
5NNxrnEcZ4zJG3R1M/iaLNARaJP++1Bt1qowfUOTWCglQHiBwlAlkorKX6DiwMhq
/Kw8K285dJNnsqW38UiWQEwCAmfolNP8IB+SKBPFg9VqwDZZxXxy3rESwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEhkwfwefOmU/mGOLm/GukCW13/aMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvU0dUQl9CNTg2WlQtWVk0dWI4YTZRSmJYZjlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABZx6FdmwVe/rlP2/OWP
dr0uQm1kQKuWsXL8Rt/Q7Y2kIXny1hzHiTH3kIUsT4eAkOF8siNKuEukSeW3SGk3
Z3HRsCzb4TVpfF2OX+mEt5Il+1hIAlJ1P9Xc+3dm660LqSLMICiabH4d3jiSharS
zfpQEzYbAgNwCahcFC06xB6vjik6KlDcTzGJVyhEZ7U0ZKuGnRb3lgKwT/hKYWQu
qi0gpflUT3Smq66v4NpPp+a0H/Ru4FbW4xFjOvevF86KMcZ517YQ+vyeqh1X7Or3
YPUAOSXap02n+l9I6Y9KQA26hciZwtKbGPjla8FD1F0ZBNAiOHxadEdYDE9s9zBm
Eo8=
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:45:15 2025 by rpki-client