Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LTyfYlpChdo6obO1KkXSk6LNc1M.roa
File: LTyfYlpChdo6obO1KkXSk6LNc1M.roa (raw, json)
Hash identifier: PSTrR7t/shPdp8jQ4GID+flsk4mjNdmJZDJzA3csXvM=
Subject key identifier: 2D:3C:9F:62:5A:42:85:DA:3A:A1:B3:B5:2A:45:D2:93:A2:CD:73:53
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B85E1984AFF7BBBEBA3B12FB23F157E3E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LTyfYlpChdo6obO1KkXSk6LNc1M.roa
Signing time: Tue 31 Oct 2023 13:17:15 +0000
ROA not before: Tue 31 Oct 2023 13:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:e1:98:4a:ff:7b:bb:eb:a3:b1:2f:b2:3f:15:7e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 13:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d3c9f625a4285da3aa1b3b52a45d293a2cd7353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:be:4d:15:12:00:e5:f3:72:1a:d0:cd:ac:
b3:94:c9:c5:50:df:9d:95:3a:48:b6:09:14:90:78:
36:86:92:b2:05:99:f5:7a:50:9c:91:c8:01:cf:c6:
75:c3:d5:27:fe:dc:3e:9f:25:e6:67:68:c4:57:16:
7c:6b:41:0f:c2:b4:56:dd:64:3d:40:94:01:11:f1:
0a:e7:aa:ec:ea:3a:70:19:51:b9:e0:91:c8:6e:a5:
bb:cc:22:24:3c:39:0a:50:97:04:95:1a:11:55:f4:
e6:de:bf:a9:e1:43:65:8e:ea:90:e3:8a:3f:eb:b0:
63:10:db:4a:7f:95:b0:1f:4f:20:0b:46:8e:6d:c7:
7c:a4:53:5a:e3:d1:5e:9e:26:b9:79:4f:af:98:db:
de:47:a9:1f:3e:5b:3c:ab:cf:f7:00:72:92:e3:fb:
96:13:a8:38:a3:01:1a:bf:eb:a0:bc:60:25:ef:7e:
6a:48:28:cc:4b:a2:d2:28:cc:2a:22:49:8c:d1:af:
15:05:b0:b3:f0:48:85:a2:d7:d8:99:fa:4a:b2:48:
2e:63:ec:6b:23:73:47:45:75:95:b8:c7:6b:f5:fc:
70:58:23:82:e3:20:74:89:ed:d5:6c:87:b2:8a:61:
dc:9e:6c:38:62:1e:37:09:34:d8:1a:d9:be:89:55:
a2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3C:9F:62:5A:42:85:DA:3A:A1:B3:B5:2A:45:D2:93:A2:CD:73:53
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LTyfYlpChdo6obO1KkXSk6LNc1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:0c:39:63:64:2b:4a:01:ab:b8:c2:e7:71:0b:ea:cc:8e:de:
6a:3f:94:03:d7:3e:be:bc:28:22:36:b8:a1:49:fa:a6:42:2e:
da:97:dc:f9:e1:52:95:46:cb:89:68:b3:5e:8a:5c:1b:09:23:
86:88:fc:f4:ff:07:88:67:42:50:7c:94:7b:cb:e5:b1:ea:25:
6b:a4:64:39:82:99:6d:29:c8:ab:d6:84:49:e5:78:36:5d:21:
5a:97:fa:a9:4a:65:e0:12:a2:de:0c:4e:81:5a:48:44:80:e7:
3a:41:35:9f:2b:5b:62:81:a1:52:25:4b:4a:d6:f2:14:9d:02:
12:e1:44:5b:71:1f:45:f5:66:e1:67:d0:39:7b:93:7d:bb:c8:
78:d8:99:b6:62:b4:25:d2:eb:74:09:89:61:84:78:50:90:4a:
ab:00:a5:76:19:3f:18:fa:65:d2:0a:a4:b0:8a:a7:d2:54:8a:
e8:9a:80:cb:40:21:13:83:36:34:b8:b0:46:c0:58:a9:25:17:
1a:ca:88:05:6e:d8:32:75:11:f3:b3:29:3f:ad:76:4f:21:89:
40:44:25:48:99:cf:cc:3b:34:60:71:19:f1:2f:2d:5a:42:a2:
73:6b:46:52:11:23:c1:20:cc:21:b2:f1:c7:53:a0:99:83:a8:
30:77:01:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:18:11 2025 by rpki-client