Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/suwzLFe6GF1oJ8VB_V6OVBlwhWI.roa
File: suwzLFe6GF1oJ8VB_V6OVBlwhWI.roa (raw, json)
Hash identifier: f4cPFWMtH2nAv1CnY8kHOztbMErjME20PLRtx5y5Hio=
Subject key identifier: B2:EC:33:2C:57:BA:18:5D:68:27:C5:41:FD:5E:8E:54:19:70:85:62
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2A75D5A047897A6A5ACEF4E794C990FE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/suwzLFe6GF1oJ8VB_V6OVBlwhWI.roa
Signing time: Sat 02 Dec 2023 12:16:54 +0000
ROA not before: Sat 02 Dec 2023 12:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2a:75:d5:a0:47:89:7a:6a:5a:ce:f4:e7:94:c9:90:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 12:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2ec332c57ba185d6827c541fd5e8e5419708562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bb:55:41:e2:a6:c8:ed:62:5d:f6:c3:65:22:
da:ac:14:91:b1:81:da:18:ab:91:cf:d0:00:69:14:
2d:f1:b8:cd:02:f8:15:3d:8f:7d:c7:7e:61:a2:fb:
c6:9d:ec:4e:23:a9:9d:b3:ff:36:13:5b:ee:12:5d:
c5:2e:c9:2a:8b:64:23:d5:61:10:b5:69:a0:15:cf:
31:45:fc:52:8b:bc:5a:b9:c8:5b:8c:e5:a3:0f:6f:
e0:99:2f:e0:23:61:6c:60:67:ef:92:cc:12:6c:c1:
9b:59:4e:28:88:a2:d9:85:8a:e2:63:7b:e4:3f:fa:
13:0a:f1:fa:1c:86:c8:72:63:1e:2d:59:4e:21:e3:
0c:b5:75:94:e2:a4:74:48:9e:89:15:dc:5a:98:b6:
3d:4e:38:43:2c:24:bc:8f:a7:76:c4:ea:aa:d6:3f:
53:71:af:2f:e6:04:21:f8:65:45:82:06:a1:5b:8e:
fb:22:ec:54:07:71:a8:ed:c7:d8:35:0f:53:5e:f3:
3e:c3:81:d4:62:95:e2:0d:1c:13:0f:55:37:ed:1b:
df:c5:e3:2d:00:83:a9:fd:b5:14:68:1b:cd:64:d2:
70:ec:8a:9a:2e:d1:ae:78:43:1e:7e:bb:a2:1b:03:
56:8f:d0:31:e7:b3:06:ae:67:8d:f8:e5:fd:e7:e2:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EC:33:2C:57:BA:18:5D:68:27:C5:41:FD:5E:8E:54:19:70:85:62
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/suwzLFe6GF1oJ8VB_V6OVBlwhWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:63:7a:eb:4e:17:a7:73:69:45:16:a4:75:e0:05:c1:19:9a:
f6:b9:3c:51:7a:e2:1a:48:0d:64:ad:82:5f:c5:6a:f1:22:24:
86:d3:d8:4e:42:f1:61:0f:7c:cd:fd:88:49:4f:d0:eb:df:37:
54:27:1f:34:cb:9f:1d:9b:d0:96:b9:c8:e6:73:44:7a:b7:d5:
f8:95:2e:dd:6d:d9:f2:ac:96:4e:c5:db:d0:f6:f2:ec:38:0e:
3c:4f:bb:20:96:c7:cd:10:4a:79:90:8e:9e:5a:b3:af:9c:d4:
a0:46:e6:29:5f:1f:57:d6:2d:ae:42:c8:bc:e0:29:9e:69:6e:
d1:64:1d:b9:56:20:a1:f1:e3:ac:40:f5:ad:8e:63:ad:42:ca:
e9:e6:4c:39:42:6e:86:ba:b3:56:ca:39:5d:27:d7:c7:c3:d2:
fb:42:5e:62:c8:46:0e:ad:f5:5c:8b:4a:57:7f:ee:04:12:17:
15:4e:0f:7d:d5:dc:d7:da:5d:15:27:d9:14:b7:e2:b5:e4:b2:
bf:b1:58:aa:6f:2e:a8:cf:fc:3f:88:13:9f:1d:f0:24:2f:39:
5e:18:97:b2:58:a4:c7:b1:f4:69:f6:6a:df:83:57:b0:55:7c:
3c:0e:2f:df:ff:b7:f6:b6:a1:ee:57:7b:cd:fd:81:cf:ba:a9:
b1:4b:53:96
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwqddWgR4l6alrO9OeUyZD+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjAyMTIxNjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmVjMzMyYzU3YmExODVkNjgyN2M1NDFmZDVlOGU1NDE5NzA4NTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LtVQeKmyO1iXfbDZSLarBSRsYHa
GKuRz9AAaRQt8bjNAvgVPY99x35hovvGnexOI6mds/82E1vuEl3FLskqi2Qj1WEQ
tWmgFc8xRfxSi7xauchbjOWjD2/gmS/gI2FsYGfvkswSbMGbWU4oiKLZhYriY3vk
P/oTCvH6HIbIcmMeLVlOIeMMtXWU4qR0SJ6JFdxamLY9TjhDLCS8j6d2xOqq1j9T
ca8v5gQh+GVFggahW477IuxUB3Go7cfYNQ9TXvM+w4HUYpXiDRwTD1U37RvfxeMt
AIOp/bUUaBvNZNJw7IqaLtGueEMefruiGwNWj9Ax57MGrmeN+OX95+KcSwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLLsMyxXuhhdaCfFQf1ejlQZcIViMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvc3V3ekxGZTZHRjFvSjhWQl9WNk9WQmx3aFdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGpjeutOF6dzaUUWpHXg
BcEZmva5PFF64hpIDWStgl/FavEiJIbT2E5C8WEPfM39iElP0OvfN1QnHzTLnx2b
0Ja5yOZzRHq31fiVLt1t2fKslk7F29D28uw4DjxPuyCWx80QSnmQjp5as6+c1KBG
5ilfH1fWLa5CyLzgKZ5pbtFkHblWIKHx46xA9a2OY61CyunmTDlCboa6s1bKOV0n
18fD0vtCXmLIRg6t9VyLSld/7gQSFxVOD33V3NfaXRUn2RS34rXksr+xWKpvLqjP
/D+IE58d8CQvOV4Yl7JYpMex9Gn2at+DV7BVfDwOL9//t/a2oe5Xe839gc+6qbFL
U5Y=
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:19:01 2025 by rpki-client