Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/SUNpsJG-rSmIitxl743N59mtwok.roa
File: SUNpsJG-rSmIitxl743N59mtwok.roa (raw, json)
Hash identifier: BuPE+hyhXLNEfBT6X4kjBkbNilP2if4ZgXXYqyaR5VU=
Subject key identifier: 49:43:69:B0:91:BE:AD:29:88:8A:DC:65:EF:8D:CD:E7:D9:AD:C2:89
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A81FC075AF3A5AC4654CFEC65669EAC99
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/SUNpsJG-rSmIitxl743N59mtwok.roa
Signing time: Mon 11 Sep 2023 02:04:52 +0000
ROA not before: Mon 11 Sep 2023 02:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:81fb:749d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:81:fc:07:5a:f3:a5:ac:46:54:cf:ec:65:66:9e:ac:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 11 02:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=494369b091bead29888adc65ef8dcde7d9adc289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:7b:8a:0b:3d:a0:c7:c8:61:db:3e:38:f0:
3c:a7:af:00:c4:da:28:a9:57:18:10:b2:1b:d1:b2:
05:bd:a7:b9:94:39:ea:3a:d9:7d:4e:a0:20:44:a9:
3e:16:c5:7c:64:91:68:7d:d2:ad:31:c1:82:66:95:
ff:4f:98:19:87:63:25:ba:0b:0b:10:ea:9f:fe:a8:
ce:2d:72:7b:fd:cd:b4:00:45:8b:0d:7a:f7:de:88:
70:be:f6:43:c3:a2:53:1a:9a:15:2a:f1:5c:b4:fa:
b8:ee:56:fe:f5:10:41:c8:7d:17:b7:4f:21:b3:32:
3e:e6:8e:f8:54:5e:c8:4d:25:34:ea:05:81:d7:8b:
26:ac:70:09:67:d8:00:c3:13:97:55:12:45:7c:7f:
e2:02:49:06:bd:38:1b:2f:18:75:7a:48:02:d9:01:
50:d4:64:7a:72:d0:8a:c9:ab:94:ec:c3:4c:79:91:
2a:da:2d:62:1d:77:0b:ac:1b:07:04:ac:d4:60:7b:
81:f6:ce:c6:0a:fa:e9:d7:3f:cd:1e:86:55:64:43:
23:72:05:5d:e0:12:77:4f:b2:60:7d:6c:08:f6:82:
d1:ce:38:d0:aa:87:36:f3:87:ab:7b:5d:69:b1:e7:
38:6f:c8:b4:fe:29:4a:37:a9:a9:22:2f:64:a3:65:
83:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:43:69:B0:91:BE:AD:29:88:8A:DC:65:EF:8D:CD:E7:D9:AD:C2:89
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/SUNpsJG-rSmIitxl743N59mtwok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:56:ba:9c:0e:34:0f:91:34:bf:e8:8f:48:dd:45:84:b0:9e:
24:b7:01:e7:5d:45:af:cf:05:0d:b7:c9:4e:12:92:c0:07:9b:
7e:d0:bd:47:4e:bc:91:ce:01:b3:eb:a5:6e:a9:0a:26:e3:c6:
fc:15:bd:a7:81:94:fd:72:18:0a:c6:b0:50:6a:6e:e3:e3:6f:
33:44:47:12:8b:0c:93:7a:26:4e:cb:fb:0f:b8:6f:09:dd:74:
71:50:7a:c6:e5:10:00:7f:52:86:31:db:f2:7f:f8:38:04:da:
c1:a9:38:a1:dc:82:f9:25:7b:ff:e7:ab:79:17:b4:10:50:5d:
31:7c:7e:de:7b:73:8b:dd:44:33:0d:eb:ae:66:87:51:3f:fd:
d4:ea:5f:a4:32:9b:33:3b:54:a4:0b:73:a3:a2:e3:b8:b5:32:
2b:8f:ab:30:e8:85:b3:bf:fd:b6:06:a6:e0:50:fb:5a:98:a5:
18:dc:61:c3:05:ec:73:0f:ed:f0:f8:12:ac:88:4d:39:24:14:
43:2e:61:04:f0:68:09:bf:3b:7a:94:98:8a:3c:74:3b:33:e4:
be:f3:c4:72:77:15:87:d3:f8:c8:71:ce:51:a1:40:72:97:5c:
46:0c:72:e4:2e:1e:01:d6:84:1d:ca:ba:af:26:74:7a:cd:12:
d0:d5:7b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:00 2025 by rpki-client