Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Lfc11XAr7NIuahpkA_THeTiQvto.roa
File: Lfc11XAr7NIuahpkA_THeTiQvto.roa (raw, json)
Hash identifier: wrRyJTGU0JUEbnXVDO0aWNXn5vY2APtjlTEEZSx/3aA=
Subject key identifier: 2D:F7:35:D5:70:2B:EC:D2:2E:6A:1A:64:03:F4:C7:79:38:90:BE:DA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B92548B6427D83FD47B61CE8367BAA9EF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Lfc11XAr7NIuahpkA_THeTiQvto.roa
Signing time: Thu 02 Nov 2023 23:18:16 +0000
ROA not before: Thu 02 Nov 2023 23:18:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:92:54:8b:64:27:d8:3f:d4:7b:61:ce:83:67:ba:a9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 23:18:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2df735d5702becd22e6a1a6403f4c7793890beda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2c:3f:6c:e9:aa:b1:b2:af:bc:ec:48:fa:af:
c8:72:44:89:a0:7c:6f:27:ab:42:95:54:99:70:32:
de:14:00:57:0e:47:2c:9b:65:60:fb:da:f8:ae:48:
cb:fa:30:15:a9:f6:5b:5f:d3:fd:2a:53:1f:58:a9:
91:0d:fd:9a:ea:47:33:a3:74:99:8d:c8:f0:44:9d:
d4:90:40:2c:3c:aa:fb:65:14:67:4b:57:7a:f7:b0:
3f:a4:65:b4:89:6a:ba:82:bd:28:58:b0:7a:f4:38:
a1:da:f8:0d:fa:47:20:7b:cd:93:5c:86:b9:2d:58:
5b:4f:03:5a:35:3c:dc:ee:f2:35:78:1d:33:e7:be:
35:a1:0c:fc:27:aa:c9:f5:b0:9d:79:2e:27:af:b1:
71:59:d3:97:de:2d:1d:09:66:e7:49:32:df:1e:70:
43:e3:de:96:64:3d:c8:e2:af:6b:1e:70:4a:a2:46:
e6:50:af:d5:77:d9:b0:30:70:b1:7d:0c:5e:4d:ea:
ea:88:f1:25:0a:f0:e8:1c:52:70:cf:57:bb:52:83:
0b:5e:e8:de:35:93:82:95:e9:91:65:ad:08:51:fb:
84:5f:97:2b:01:92:0a:6d:fa:33:13:cf:6a:b4:ac:
69:74:95:f1:9e:8a:5c:3b:7e:28:ea:64:4b:3a:56:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F7:35:D5:70:2B:EC:D2:2E:6A:1A:64:03:F4:C7:79:38:90:BE:DA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Lfc11XAr7NIuahpkA_THeTiQvto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:a1:60:d2:8d:18:78:ed:f7:a1:99:7a:19:d1:04:83:00:dc:
7b:bf:23:00:fa:95:58:85:ba:c7:20:58:5c:51:80:6b:2d:5b:
91:81:27:bc:e4:d0:3c:6f:a5:18:bf:4b:7b:67:e7:49:58:24:
a5:38:ca:95:6b:ff:6c:89:6e:52:48:ff:ec:41:36:55:e3:0a:
0e:43:a2:c7:59:e0:f1:7f:b4:f0:74:37:9a:09:19:31:d7:6d:
d8:df:1f:c4:95:87:24:74:8a:81:97:c5:0d:92:c4:75:76:02:
bc:f8:33:cc:d7:86:9f:f4:17:09:dc:a6:3e:b7:54:2a:86:da:
09:b7:85:f9:a8:33:55:5b:69:59:f5:55:e7:c0:98:d7:b5:90:
fc:3e:33:d0:55:32:da:5d:17:4b:d0:4b:dc:65:25:4e:e9:0b:
37:ff:b8:ce:36:84:a5:b0:9a:1b:c3:13:78:0c:c5:ea:1b:85:
2b:81:f5:a9:e4:10:1a:78:c8:c2:61:6c:5d:2a:05:16:b6:13:
41:f7:82:1f:f6:df:db:c3:a6:04:53:44:1f:cf:37:3e:04:03:
6e:3c:51:ca:c9:e8:a6:d0:8c:f6:a4:5a:cd:bc:79:0f:04:05:
4f:59:8a:f6:8a:47:78:7c:6f:a8:45:bb:b9:14:a9:fc:02:31:
55:2d:a4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:39:22 2025 by rpki-client