Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LauAfUShBFLvO7q5Jea0rzbIogU.roa
File: LauAfUShBFLvO7q5Jea0rzbIogU.roa (raw, json)
Hash identifier: 8bkXmV7sIbvb+A/KVuQR4phXT9+4t3gV8QJDQbpi98w=
Subject key identifier: 2D:AB:80:7D:44:A1:04:52:EF:3B:BA:B9:25:E6:B4:AF:36:C8:A2:05
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF67F793A614705D267DE1419A5C77600
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LauAfUShBFLvO7q5Jea0rzbIogU.roa
Signing time: Tue 03 Oct 2023 17:04:23 +0000
ROA not before: Tue 03 Oct 2023 17:04:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:f67f:68bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:7f:79:3a:61:47:05:d2:67:de:14:19:a5:c7:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 3 17:04:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dab807d44a10452ef3bbab925e6b4af36c8a205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:82:b3:8b:55:de:39:66:f3:08:90:e6:15:
e7:f8:26:87:66:d8:56:9c:2a:73:2f:2c:72:90:b7:
87:ed:6c:08:51:e7:d0:fd:6d:2b:13:61:fa:41:13:
53:21:9a:65:5b:ec:67:39:76:90:53:7e:1e:10:62:
39:50:1f:bc:8b:c8:0b:ea:f1:22:62:e6:de:09:1b:
77:c3:2a:4c:69:27:99:f1:ec:a8:55:71:ee:0f:2f:
39:60:9d:42:fd:c1:cc:1e:dc:9b:1a:7f:f5:ec:fc:
14:95:0c:0d:88:76:9a:a5:7c:9b:ab:37:d0:53:5e:
19:ca:9d:a9:04:06:fe:bf:ad:8d:fc:56:f8:7b:37:
4c:e0:72:02:0e:fe:b0:29:19:1d:2b:91:10:5c:2d:
70:a2:55:c5:b5:ef:ee:73:64:97:d7:69:42:34:a7:
3a:ea:50:f8:4a:cc:23:89:1e:c5:bc:80:f8:30:69:
47:e0:d9:b0:d0:86:4f:10:9e:b6:0e:52:ae:36:b9:
05:40:53:23:45:78:12:56:0b:15:24:e1:5b:64:dd:
c2:72:19:a4:65:70:34:47:25:6d:b5:ac:a7:3b:c2:
69:54:83:6d:e3:eb:6e:ee:06:a2:7a:05:f5:b0:b6:
69:82:61:67:43:d2:39:9e:58:3f:5c:e3:93:0f:7e:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AB:80:7D:44:A1:04:52:EF:3B:BA:B9:25:E6:B4:AF:36:C8:A2:05
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LauAfUShBFLvO7q5Jea0rzbIogU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d0:b7:e2:2f:c4:67:64:79:87:5e:65:df:04:87:00:d4:75:21:
a1:cb:e6:5f:76:32:0f:f8:4d:42:78:ea:e1:04:f3:e8:b8:21:
39:49:b6:39:f5:00:72:03:dd:84:04:6c:30:c2:d9:2c:73:7e:
64:73:0d:58:f5:ff:38:15:46:3e:96:74:97:f1:b6:a6:73:b9:
4f:e5:e1:73:0f:17:ab:18:23:86:63:35:52:07:a6:48:d4:a7:
8f:59:4d:33:15:44:b4:60:83:86:75:3d:51:da:89:3a:ef:7e:
1c:17:38:7c:04:4e:5e:47:6e:ac:2b:c0:2c:37:8a:42:6b:f5:
ef:be:7e:1e:72:58:63:3a:4a:a9:62:01:d6:a5:00:ef:20:51:
e8:55:2e:08:f6:54:5c:34:3b:a2:7d:c4:0b:ff:8d:b0:7c:95:
9a:c0:f8:55:e8:5d:1c:68:d5:3a:79:8e:20:26:82:5b:0a:fc:
dc:22:fa:71:26:f1:f2:78:dd:bb:46:1f:f2:57:98:7c:71:3c:
50:4b:5f:9f:29:67:f8:4a:b0:a7:d6:e8:b2:6d:62:05:01:b7:
bc:c2:bd:f0:20:09:dd:e1:35:c6:d3:8d:44:7e:88:67:4f:5d:
ae:5b:55:13:04:15:7b:1c:8d:07:10:2e:e0:62:63:21:1d:f8:
1a:a7:ac:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:40:50 2025 by rpki-client