Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LPHoyC95hwOPsxmH-VHtYDVKUGM.roa
File: LPHoyC95hwOPsxmH-VHtYDVKUGM.roa (raw, json)
Hash identifier: dsUaz0bf3UXktHura2vtLeQSlAOrMJo+3UhkfefraoQ=
Subject key identifier: 2C:F1:E8:C8:2F:79:87:03:8F:B3:19:87:F9:51:ED:60:35:4A:50:63
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B33E6A63BFFFBC2521312B09A20566A1D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LPHoyC95hwOPsxmH-VHtYDVKUGM.roa
Signing time: Sun 15 Oct 2023 15:13:55 +0000
ROA not before: Sun 15 Oct 2023 15:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:33:e6:a6:3b:ff:fb:c2:52:13:12:b0:9a:20:56:6a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 15 15:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cf1e8c82f7987038fb31987f951ed60354a5063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:e9:31:4f:eb:be:80:c6:35:53:8d:e9:97:
09:09:7b:e3:70:a8:65:42:4b:a3:e9:37:4a:7a:c2:
7b:04:e6:fb:7e:0a:47:e9:d6:12:f2:30:c1:c6:cb:
f1:62:39:4d:70:c0:25:7b:a1:7f:2e:e4:fb:42:13:
db:05:2e:6f:35:00:2f:6f:5e:49:f6:b3:58:25:bd:
ba:13:15:27:f0:3b:18:05:8a:f6:2c:02:fe:85:57:
af:aa:09:63:64:ec:50:da:33:19:08:6c:35:01:73:
02:de:a4:43:1c:f0:ed:fb:09:cf:11:3c:d7:7b:77:
b1:04:43:37:bf:26:54:67:87:4d:7e:56:f9:51:95:
a4:3a:f6:f8:61:5f:98:dd:0c:31:a5:0f:99:39:10:
bb:53:56:41:f5:a1:ba:d5:bc:fa:2a:f5:d9:8d:28:
c2:7e:65:4b:1e:84:aa:c0:6d:72:a9:a4:60:da:4a:
10:9f:b1:07:88:7d:24:ae:bd:8d:ee:4c:37:91:af:
50:27:a4:13:b0:f7:d5:51:b7:ed:82:81:90:a2:a5:
f4:29:db:54:a0:ba:c4:d6:c8:84:50:0a:4e:48:c8:
28:13:63:78:65:a4:a3:13:f6:69:72:3b:d4:9c:93:
c1:50:f0:c7:fe:03:2f:84:fa:cb:dc:8a:98:c4:56:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F1:E8:C8:2F:79:87:03:8F:B3:19:87:F9:51:ED:60:35:4A:50:63
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LPHoyC95hwOPsxmH-VHtYDVKUGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:82:b5:3a:7e:1e:84:ee:08:f0:cf:19:1a:0d:50:78:9e:88:
3d:6f:f3:1e:eb:29:67:55:96:ce:2b:19:de:36:29:5b:96:45:
1e:2a:b8:18:b9:c3:2c:b8:ab:50:15:5f:8e:0d:e3:65:03:48:
63:c3:0f:0e:cc:e3:ec:d7:05:87:a7:0f:da:ff:c5:d5:bb:73:
e2:7d:b4:3c:98:32:ce:b0:49:f7:27:36:e8:53:85:28:ac:77:
3a:92:9d:ab:58:f0:7a:99:5e:29:ea:25:a6:9b:4b:74:0f:77:
2f:ce:e8:94:d9:13:e2:0f:c6:92:89:0a:01:52:54:a7:06:33:
b7:71:9b:61:13:30:ee:d6:74:3a:f3:b0:50:d6:56:6e:9d:e6:
14:be:83:33:be:17:e2:7f:c6:be:ac:dd:34:b2:ab:f9:24:2d:
fa:09:a0:a0:a5:b7:14:89:98:89:50:dc:cc:f7:31:83:88:b6:
4d:d1:9b:15:89:e5:0e:65:35:9b:79:bf:11:95:73:72:df:00:
7a:4c:63:a2:17:20:c0:18:79:d3:4e:4f:0a:89:6e:48:06:27:
c9:66:16:77:6a:d1:46:4d:e0:d6:57:3d:b8:b9:75:68:84:4b:
be:6b:a9:0f:1f:98:42:81:97:9b:1f:04:d8:e4:3d:2d:06:1d:
01:80:b2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:56:12 2025 by rpki-client