Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/L5QJYAkcntUzkW_bYPBsODNozxg.roa
File: L5QJYAkcntUzkW_bYPBsODNozxg.roa (raw, json)
Hash identifier: AzWgsaGNAmQbk/WrXEN10+LNhvrWnBeo3ZoDWbP+6Vs=
Subject key identifier: 2F:94:09:60:09:1C:9E:D5:33:91:6F:DB:60:F0:6C:38:33:68:CF:18
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C67D1B7025757E5A9FBE4D8E42E4B590D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/L5QJYAkcntUzkW_bYPBsODNozxg.roa
Signing time: Thu 14 Dec 2023 10:14:06 +0000
ROA not before: Thu 14 Dec 2023 10:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:d1:b7:02:57:57:e5:a9:fb:e4:d8:e4:2e:4b:59:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 10:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f940960091c9ed533916fdb60f06c383368cf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:dd:d1:eb:69:2e:ae:e3:db:a0:a6:e4:73:
94:5b:25:81:e8:70:22:b1:d3:48:22:dc:ae:7e:69:
33:ab:5b:78:c3:6a:e4:58:bd:ca:3f:f4:ff:0c:3d:
84:d7:9c:be:02:7a:b9:a0:2b:a5:1c:aa:04:b2:b6:
01:39:27:a1:66:e5:33:5d:d7:8d:e5:d4:0c:4b:8b:
f5:ba:c7:7f:52:7e:91:84:be:cf:f2:a7:76:08:aa:
c4:29:5b:9b:ea:05:a8:6c:6e:22:94:b1:c8:3b:a3:
81:8c:82:f6:23:77:53:2d:66:5b:c8:28:b1:61:2d:
63:be:4e:c3:43:ba:4e:3c:c2:d8:7a:47:51:50:99:
c7:bd:b8:82:80:c3:3b:51:9c:31:08:3a:fb:b2:47:
e7:cf:40:4f:cf:2c:c8:82:3b:45:77:b6:0f:ea:c0:
2e:34:76:cd:03:ac:56:2b:ad:26:41:59:c5:95:67:
51:f2:76:e9:e7:a2:7e:10:15:3f:eb:9e:56:bd:28:
b1:d9:0b:42:25:7f:c3:ab:1b:94:25:3b:a5:a7:ce:
83:05:06:2a:69:03:1a:c1:fb:ff:14:13:68:79:25:
64:bd:b7:70:22:2f:d5:01:33:32:45:79:69:df:26:
32:c9:69:9a:c9:43:44:83:ec:04:3c:8f:a2:f8:b2:
9e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:94:09:60:09:1C:9E:D5:33:91:6F:DB:60:F0:6C:38:33:68:CF:18
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/L5QJYAkcntUzkW_bYPBsODNozxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:fd:bf:99:fd:4a:dc:40:62:76:db:1c:9c:41:fc:b9:b1:00:
c7:5c:fe:47:5c:13:4d:d6:41:ab:78:03:01:1f:a0:49:b0:b4:
3e:71:6e:92:5b:0f:0a:36:6c:02:08:b4:8f:a6:53:80:e4:6c:
b8:59:a8:30:97:6d:51:37:c9:98:55:3f:d0:6c:1d:1b:81:6d:
87:89:95:1f:66:21:a7:7e:b0:d3:fe:15:de:88:d9:fc:d1:52:
88:80:10:a8:06:82:45:0b:0c:21:e5:7b:d0:e0:20:23:d2:76:
79:5c:3c:9f:61:58:f1:91:f8:82:a8:d4:29:5a:a6:4c:2b:59:
ea:c1:e3:60:10:76:fb:03:9a:ac:7c:05:2c:19:ec:f8:35:0f:
c7:b8:70:c4:6d:4f:2b:1d:04:8d:5b:5f:fe:0f:80:05:c4:b6:
7b:1b:22:97:59:5b:14:5b:bb:d3:6f:23:f8:ac:35:10:56:6c:
2b:a7:6a:58:c5:67:2e:35:4e:44:36:5f:21:99:c5:37:b9:bc:
1c:24:41:47:aa:0d:cc:9c:ac:a6:f2:15:d8:32:9e:8b:d4:26:
68:56:89:23:b4:10:4d:e7:30:e3:68:f3:3a:14:70:3d:05:cb:
ec:9d:61:c2:3c:03:d5:c0:74:58:18:ed:06:4d:c0:1b:56:8e:
56:04:31:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 00:51:56 2025 by rpki-client