Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/suug6NC7-gMxDyhujVLYaMYaXCQ.roa
File: suug6NC7-gMxDyhujVLYaMYaXCQ.roa (raw, json)
Hash identifier: /YDQ0uUH6fasPtpgmihVpahltO9KPGhQxU9G8dPMFLo=
Subject key identifier: B2:EB:A0:E8:D0:BB:FA:03:31:0F:28:6E:8D:52:D8:68:C6:1A:5C:24
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7EC6706C2C1DF25ED587934A825A93FD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/suug6NC7-gMxDyhujVLYaMYaXCQ.roa
Signing time: Mon 30 Oct 2023 04:10:15 +0000
ROA not before: Mon 30 Oct 2023 04:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7e:c6:70:6c:2c:1d:f2:5e:d5:87:93:4a:82:5a:93:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 04:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2eba0e8d0bbfa03310f286e8d52d868c61a5c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:33:04:67:40:23:85:2a:84:1b:fc:8f:6f:66:
ef:f8:94:b6:5e:5a:09:87:69:13:f2:f7:74:b8:8b:
0f:e4:5c:f3:e1:8b:67:8c:96:45:1e:6f:8f:a7:c4:
67:f9:5f:a7:24:81:62:58:52:19:b3:2a:a6:3b:4a:
d6:eb:6f:aa:2a:dd:4a:89:1b:06:ea:24:e8:2b:85:
5b:7a:3c:20:e2:92:bc:60:6c:71:87:5d:c8:db:4f:
93:f8:c6:0e:0e:f3:ce:ea:39:ac:e8:ac:74:fd:4f:
07:54:7b:68:3d:ef:11:7a:46:2f:7c:fc:0c:93:a4:
23:67:9d:38:e7:e5:a3:67:de:6e:67:6d:0e:82:f0:
8b:92:a6:5f:78:c7:aa:88:4c:7b:ce:78:50:4d:28:
6e:7e:be:9d:6b:3a:73:d4:93:2f:98:32:17:96:61:
97:5d:02:b6:02:ee:68:ad:09:1f:85:77:84:06:3f:
4d:b1:76:8d:6c:4e:9b:d3:0c:a1:88:8f:74:53:eb:
ff:b5:48:29:ea:85:1d:a3:16:eb:d6:0f:13:68:8d:
0b:9e:79:33:7c:a4:cd:b0:87:73:13:e7:ca:07:98:
ac:01:57:85:e7:a0:f2:69:b7:97:98:55:6e:0b:91:
c2:92:5f:fd:a3:40:20:fe:95:e9:47:76:fe:d0:05:
85:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EB:A0:E8:D0:BB:FA:03:31:0F:28:6E:8D:52:D8:68:C6:1A:5C:24
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/suug6NC7-gMxDyhujVLYaMYaXCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cd:48:65:ae:f0:fa:d2:a0:dd:78:84:76:3f:49:9b:f4:dd:39:
1c:2f:9a:1a:3b:35:30:b8:c0:76:b0:f7:58:0e:18:82:01:f6:
a6:b0:9e:5b:dd:62:c7:a9:0e:69:22:dc:17:e0:48:03:90:41:
38:05:be:d6:76:ea:d4:8f:c8:99:76:ed:d8:68:84:71:a4:c0:
d9:96:bc:28:56:ec:45:13:9f:b1:ed:c0:4f:4f:e4:8c:78:a2:
6c:91:0c:b4:76:70:cd:ad:3e:90:89:63:f5:d2:81:e9:0a:a9:
2c:ab:fc:14:6c:5f:f6:62:06:f2:f1:2d:3e:98:30:35:4d:db:
6a:4e:27:dc:e5:88:20:6d:97:b9:f1:8b:c8:fd:bf:e3:0d:85:
0f:a1:b8:22:51:3b:61:c2:9d:88:89:49:4b:14:61:84:cf:a8:
67:1d:e0:30:cd:80:bc:c9:a5:82:e2:8b:94:ba:a2:63:3a:3e:
88:2c:d7:ac:da:39:fc:42:e5:f8:60:c7:86:ad:0a:fc:0b:df:
9c:b3:5f:ca:9f:06:9a:23:e3:ea:79:e6:33:ef:6f:96:e4:26:
bb:c9:7a:66:ec:2d:90:f6:f7:17:5e:1e:ea:6c:47:03:bd:39:
b6:a7:35:f3:a7:61:b9:26:96:64:d6:dd:c0:76:8b:bb:e0:9e:
be:1d:88:46
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYt+xnBsLB3yXtWHk0qCWpP9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDMwMDQxMDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmViYTBlOGQwYmJmYTAzMzEwZjI4NmU4ZDUyZDg2OGM2MWE1YzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTMEZ0AjhSqEG/yPb2bv+JS2XloJ
h2kT8vd0uIsP5Fzz4YtnjJZFHm+Pp8Rn+V+nJIFiWFIZsyqmO0rW62+qKt1KiRsG
6iToK4Vbejwg4pK8YGxxh13I20+T+MYODvPO6jms6Kx0/U8HVHtoPe8RekYvfPwM
k6QjZ5045+WjZ95uZ20OgvCLkqZfeMeqiEx7znhQTShufr6dazpz1JMvmDIXlmGX
XQK2Au5orQkfhXeEBj9NsXaNbE6b0wyhiI90U+v/tUgp6oUdoxbr1g8TaI0Lnnkz
fKTNsIdzE+fKB5isAVeF56DyabeXmFVuC5HCkl/9o0Ag/pXpR3b+0AWFLQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLLroOjQu/oDMQ8obo1S2GjGGlwkMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvc3V1ZzZOQzctZ014RHlodWpWTFlhTVlhWENRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAM1IZa7w+tKg3XiEdj9J
m/TdORwvmho7NTC4wHaw91gOGIIB9qawnlvdYsepDmki3BfgSAOQQTgFvtZ26tSP
yJl27dhohHGkwNmWvChW7EUTn7HtwE9P5Ix4omyRDLR2cM2tPpCJY/XSgekKqSyr
/BRsX/ZiBvLxLT6YMDVN22pOJ9zliCBtl7nxi8j9v+MNhQ+huCJRO2HCnYiJSUsU
YYTPqGcd4DDNgLzJpYLii5S6omM6Pogs16zaOfxC5fhgx4atCvwL35yzX8qfBpoj
4+p55jPvb5bkJrvJembsLZD29xdeHupsRwO9ObanNfOnYbkmlmTW3cB2i7vgnr4d
iEY=
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:09:04 2025 by rpki-client