Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LFFJD1-KxunZz5zgxuQXKlDYRR4.roa
File: LFFJD1-KxunZz5zgxuQXKlDYRR4.roa (raw, json)
Hash identifier: v1KnR04EU7AcNLhLup5l6bLRg/SytggEWJadk03Vq2I=
Subject key identifier: 2C:51:49:0F:5F:8A:C6:E9:D9:CF:9C:E0:C6:E4:17:2A:50:D8:45:1E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B21A13806FAB83B36A3F9BE812A142EDF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LFFJD1-KxunZz5zgxuQXKlDYRR4.roa
Signing time: Thu 12 Oct 2023 02:04:55 +0000
ROA not before: Thu 12 Oct 2023 02:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:21a0:9b73/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:21:a1:38:06:fa:b8:3b:36:a3:f9:be:81:2a:14:2e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 12 02:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c51490f5f8ac6e9d9cf9ce0c6e4172a50d8451e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b5:bd:d7:eb:72:49:75:b7:60:a8:ab:a8:bc:
4e:f7:b3:c1:1f:cd:1d:4c:f5:8a:6f:88:55:bb:74:
94:a2:ee:c8:05:03:12:71:b3:df:83:e4:15:35:77:
52:b0:8e:e1:18:af:ad:4e:71:11:c1:00:f3:05:0b:
25:86:63:28:76:d6:7e:77:a8:2b:16:5a:d9:d0:8d:
66:0f:c2:ad:bb:fb:69:06:19:fc:75:ad:e0:4f:fd:
db:6c:69:8d:3f:a0:1f:18:56:f1:7d:69:47:e0:16:
97:f1:9d:3f:57:8b:2b:e6:bc:0c:f1:05:fd:c3:13:
6a:9e:fe:7f:be:26:cf:a6:cf:32:86:3b:ea:9b:35:
f7:f6:00:36:b4:a1:b9:b2:71:4c:8e:bc:7a:2a:c8:
35:c8:87:c5:31:d6:2d:d9:37:ba:80:6a:40:cc:ce:
ae:cc:09:a4:45:ac:26:a5:bf:5c:84:8f:ee:13:e3:
3a:10:80:97:56:0c:e6:95:47:23:e0:2d:56:6a:a7:
2c:2f:24:89:36:2f:03:33:61:7f:f8:9c:b7:7c:2e:
28:f9:b1:b6:ac:03:6b:15:db:48:34:b1:71:3d:31:
10:d5:16:03:44:8f:09:36:a0:4e:ea:ee:a1:ff:10:
69:db:97:8b:19:f1:50:59:ea:ff:fd:f1:e3:be:9d:
b5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:51:49:0F:5F:8A:C6:E9:D9:CF:9C:E0:C6:E4:17:2A:50:D8:45:1E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LFFJD1-KxunZz5zgxuQXKlDYRR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cc:41:ae:a0:f6:14:f7:5e:86:4e:ac:76:70:6e:55:87:e8:35:
b3:ab:f4:99:41:bd:48:41:f9:5a:24:c1:b5:9e:ef:a6:8c:1c:
3b:41:07:30:14:df:3e:33:fc:2e:b4:d8:43:5f:7b:71:7d:f0:
94:17:7d:08:1a:63:d6:6c:83:18:14:23:e3:7a:93:77:7a:4e:
5e:4f:fd:b1:13:ee:a0:a5:9b:5b:ad:20:b7:e4:cc:ac:79:b5:
48:a4:ea:d8:82:c6:5b:3f:38:44:7d:e4:45:47:4a:df:97:84:
e2:0c:99:df:26:86:05:89:1f:e0:37:39:1c:20:a6:c0:b4:93:
aa:19:70:10:c8:27:3f:80:b3:a6:25:a2:10:3e:dc:f0:6c:92:
5e:f1:4f:4b:3f:b1:7e:d1:0d:78:ef:c4:dd:d1:1e:34:26:59:
5e:e4:2e:05:f7:27:54:73:0d:83:4f:0d:73:b2:92:9e:f4:ca:
48:45:e1:00:25:60:d1:2d:ba:9f:a5:81:bd:32:0c:3b:cb:5a:
8a:85:99:bb:b0:31:5f:af:4a:28:eb:ec:ea:1b:7c:82:20:bc:
e7:0e:0d:34:14:25:fa:a1:7c:97:93:e2:ac:5d:0e:d8:08:d2:
1b:77:6e:e6:8b:9c:1e:81:25:f3:fc:df:c8:e6:c2:d6:87:8d:
db:10:1c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:26:37 2025 by rpki-client