Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LelYwNgetBbfiLWmC3cWqt_CQ6U.roa
File: LelYwNgetBbfiLWmC3cWqt_CQ6U.roa (raw, json)
Hash identifier: l8ze1D5ued9TIbXRpgFht1zSY9Gv7gyAQvwjWFElW+4=
Subject key identifier: 2D:E9:58:C0:D8:1E:B4:16:DF:88:B5:A6:0B:77:16:AA:DF:C2:43:A5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2360EA03EFC8EC05D9F49601149B9531
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LelYwNgetBbfiLWmC3cWqt_CQ6U.roa
Signing time: Thu 12 Oct 2023 10:13:55 +0000
ROA not before: Thu 12 Oct 2023 10:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:60:ea:03:ef:c8:ec:05:d9:f4:96:01:14:9b:95:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 12 10:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2de958c0d81eb416df88b5a60b7716aadfc243a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:ed:04:0e:38:c3:ed:6c:0b:f1:9d:ed:5b:
a9:06:2c:b2:88:25:df:07:6f:7f:1d:37:36:6d:13:
61:ef:38:0c:95:8b:e5:d2:f4:1e:19:9b:f5:69:65:
5f:34:c7:48:d1:0a:94:cf:f7:d1:bb:0c:0d:4f:9d:
1b:62:2f:78:73:fe:17:ba:59:e7:2e:c7:0d:bf:18:
19:b5:3f:f4:c8:97:7a:2b:5c:74:3b:de:d5:25:d6:
69:9a:a5:f4:1b:ac:f2:18:a3:e3:ed:ee:f6:7b:9f:
c7:58:b2:a3:a1:8d:d7:12:15:3b:b2:b9:b2:c5:1d:
1d:1b:fe:56:15:d3:e9:5e:b7:c2:a3:14:4f:a2:f2:
42:e2:7e:eb:7f:f1:8e:c8:c9:05:00:ec:a4:9f:7d:
37:b1:1e:da:09:e9:69:02:43:56:cc:97:49:bf:be:
36:e0:32:56:00:0a:63:cb:5b:17:2d:0a:04:26:92:
35:71:e1:a4:5f:f5:da:fd:29:05:8f:ac:29:e5:b8:
6d:9c:13:d4:6d:34:aa:41:fa:7e:2c:8d:fd:2b:9a:
e7:ec:9e:c7:6f:b8:04:e7:88:6a:f4:8b:49:d8:3b:
43:7f:6c:64:e8:62:22:91:0c:f5:ec:8e:a8:2a:1f:
8b:92:95:80:66:a4:ad:a7:db:46:a8:36:c2:d6:59:
82:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E9:58:C0:D8:1E:B4:16:DF:88:B5:A6:0B:77:16:AA:DF:C2:43:A5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LelYwNgetBbfiLWmC3cWqt_CQ6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:55:b7:0c:ed:1a:72:29:be:b6:9b:76:22:c1:21:17:80:4b:
45:d6:b5:80:13:30:01:8d:c5:be:f7:bd:c5:70:8c:66:f5:6e:
01:22:ac:1a:73:2a:83:75:43:e6:d2:7c:b3:e7:55:7a:93:d5:
07:e9:e6:ca:b7:5b:97:c1:f6:27:20:c8:ba:0b:81:7f:88:83:
ac:9c:8e:50:02:82:6f:ac:6c:3e:0d:e3:55:29:04:57:78:5b:
83:5e:e5:d5:2b:54:9c:ba:26:68:43:47:53:c9:57:a0:54:af:
31:46:73:8c:ec:a2:38:22:33:6d:6c:80:05:0e:d0:0e:e7:9c:
0f:ea:3c:b2:0e:09:4f:8b:cb:42:84:66:cb:8d:d3:e6:01:bc:
17:e5:8f:b8:e9:2b:5d:76:4c:bb:df:85:14:8f:5c:ce:64:8c:
5b:d2:ab:4b:56:78:dc:79:91:d5:c4:0e:56:44:59:30:47:0f:
ff:8a:31:b4:54:31:1b:0a:5b:60:7c:17:b5:ac:1b:ac:1c:0b:
24:e4:77:51:0c:b5:54:16:01:52:03:2d:47:cc:c2:3a:c8:bd:
4f:12:55:f3:10:5f:81:bb:7c:32:dc:41:1b:3a:42:c2:71:ad:
30:f9:98:4a:97:ef:e6:97:e2:7d:a4:05:ec:14:96:9d:36:9e:
e8:82:11:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:06:35 2025 by rpki-client