Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LGLcn-uimnzoc2zCqc35mkC4RTs.roa
File: LGLcn-uimnzoc2zCqc35mkC4RTs.roa (raw, json)
Hash identifier: cBrqESQEV2weofe93NG2cCi8gDSK/kptxzpSV95kXrY=
Subject key identifier: 2C:62:DC:9F:EB:A2:9A:7C:E8:73:6C:C2:A9:CD:F9:9A:40:B8:45:3B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C442AA60DBA491D4CCEDE552975D7EA3F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LGLcn-uimnzoc2zCqc35mkC4RTs.roa
Signing time: Thu 07 Dec 2023 12:04:54 +0000
ROA not before: Thu 07 Dec 2023 12:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:442a:7787/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:2a:a6:0d:ba:49:1d:4c:ce:de:55:29:75:d7:ea:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 12:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c62dc9feba29a7ce8736cc2a9cdf99a40b8453b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:da:5d:e8:3f:ef:b0:6a:f1:eb:07:cb:e1:67:
35:fc:c1:b5:04:12:c4:67:f5:6c:20:02:fa:7d:9d:
74:d5:8a:87:25:cd:1e:5f:09:6e:65:d9:57:41:d1:
41:f4:20:9f:d2:b7:09:68:3d:3f:2e:75:a6:95:6c:
ac:3c:15:cc:2e:05:b9:27:49:97:48:d7:54:06:83:
22:19:56:a5:7c:f8:0b:bf:ea:ec:92:30:df:05:eb:
9d:bf:50:2f:b2:d1:e7:d0:a6:20:62:92:fa:52:45:
38:2c:d3:22:91:f1:6a:c7:31:a3:45:ef:7f:16:b5:
80:3d:9f:ca:0e:a2:45:b5:d6:83:7a:21:4a:ff:50:
84:11:f3:32:53:c6:ab:b8:11:e3:82:2c:c5:35:e2:
de:b0:b1:9b:7e:dc:29:08:b4:0b:3e:05:69:9c:e7:
e1:e9:51:76:0b:ba:58:ac:8c:ac:e4:55:17:4f:e2:
ee:36:bc:23:38:ff:5c:df:69:d2:80:a5:6e:d1:d8:
60:0b:58:81:76:fd:39:ac:5b:53:0a:3d:83:11:bc:
ca:e3:b7:e3:1d:0d:c2:db:bd:f9:b3:84:a8:91:82:
5f:20:c4:4e:d5:eb:79:e9:83:72:5c:f1:7c:77:9d:
a0:99:4c:42:1c:d6:34:9d:09:70:4e:de:77:b5:51:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:62:DC:9F:EB:A2:9A:7C:E8:73:6C:C2:A9:CD:F9:9A:40:B8:45:3B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LGLcn-uimnzoc2zCqc35mkC4RTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:e2:7f:2d:c8:f7:9d:af:8c:ea:9c:d0:41:10:df:ad:ba:64:
60:00:c6:e3:02:7c:f7:3a:59:01:5d:6f:b2:91:15:2b:96:0b:
71:19:1e:b3:0d:c4:22:8a:bf:83:38:a3:ff:a3:41:27:c6:d3:
a2:53:8e:dc:f1:7d:25:25:38:6b:76:92:c5:e8:c6:5c:d6:3c:
3f:71:38:ea:7a:23:6e:c3:5f:79:ba:58:84:df:65:48:02:e0:
d4:c6:0e:a0:b2:e9:ac:bc:c8:f5:55:a5:83:b2:b0:5d:95:61:
f5:29:92:03:e1:02:2c:23:9a:ff:a5:a1:8c:74:5d:97:94:2c:
4b:c8:e8:53:ba:27:2b:46:85:88:57:2c:e2:54:6e:84:4e:9b:
5a:e1:22:c4:29:fe:b7:27:63:4b:8c:98:b8:ac:b7:7a:19:d1:
21:ad:d1:a7:7f:2c:60:46:ca:f1:fa:ff:9a:44:2e:9d:95:eb:
89:0d:24:ef:6d:e5:d6:6c:84:a9:26:ff:40:85:67:28:94:ff:
09:38:11:de:83:4c:88:4e:93:b7:94:79:0f:1e:7f:22:2f:73:
dc:b7:b1:51:52:10:c8:cd:4b:e7:38:a4:d3:d7:30:45:38:97:
d4:d8:2e:32:0c:d2:3f:fb:ac:3e:e5:29:99:b4:d9:83:2f:a8:
36:af:bb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:46:52 2025 by rpki-client