Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LmlNitjt76YEsuDJMGaApfjAuU4.roa
File: LmlNitjt76YEsuDJMGaApfjAuU4.roa (raw, json)
Hash identifier: SbAkx+T6zEJwc7kX2awtk6vTPfBKCcycWXnpxpdZMKU=
Subject key identifier: 2E:69:4D:8A:D8:ED:EF:A6:04:B2:E0:C9:30:66:80:A5:F8:C0:B9:4E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF685E1688664BAB474AAA64E9645AA96
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LmlNitjt76YEsuDJMGaApfjAuU4.roa
Signing time: Tue 03 Oct 2023 17:11:23 +0000
ROA not before: Tue 03 Oct 2023 17:11:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:85:e1:68:86:64:ba:b4:74:aa:a6:4e:96:45:aa:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 3 17:11:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e694d8ad8edefa604b2e0c9306680a5f8c0b94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:dd:74:f3:fa:64:97:77:99:d5:50:64:40:
ac:f3:7f:e5:9b:cb:1a:0f:f2:9b:d8:2d:72:75:1d:
f9:4b:45:6b:97:90:4e:dd:35:22:7a:3b:7c:5d:17:
c9:28:92:31:c2:28:6d:1e:02:d7:3e:4e:ca:24:9f:
f2:a7:41:92:d9:b1:28:b3:69:b1:e6:94:d9:01:6c:
20:a6:a2:5d:c8:13:bb:51:cc:de:ad:2e:0f:47:ac:
24:97:cb:05:a1:12:59:9f:60:54:97:3d:8f:ff:3d:
f4:87:a7:ae:bc:c2:36:f4:28:bb:bb:90:b8:d2:fc:
ab:b6:5a:32:4c:3a:be:99:b5:80:2c:7a:f8:6f:5a:
a2:2f:18:4d:2d:d8:20:10:88:37:ae:3b:df:d3:4e:
7f:76:3f:09:b5:9c:8f:bd:4e:c3:5d:2f:4b:e5:a2:
5e:2a:36:86:cc:60:16:c1:21:82:cb:a1:b8:2f:4c:
4b:9c:eb:05:d4:bd:59:06:8e:bf:6a:32:ee:f2:0e:
65:b4:3e:7b:2d:28:79:73:6d:a8:d8:3e:05:67:85:
77:0f:e2:de:66:73:a2:ab:e7:88:ad:ea:5d:3c:24:
11:b3:d7:5d:3d:6e:83:4c:32:cb:45:2c:ea:e0:6a:
24:f7:3b:1e:5e:04:95:a3:86:18:1e:04:18:d6:52:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:69:4D:8A:D8:ED:EF:A6:04:B2:E0:C9:30:66:80:A5:F8:C0:B9:4E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LmlNitjt76YEsuDJMGaApfjAuU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:0b:e2:55:79:a8:da:cc:29:da:8c:d8:9e:f0:22:a6:ba:c9:
c6:8f:b5:92:25:4b:5d:66:1d:c9:14:a1:6d:77:f1:0c:1c:40:
57:3b:06:6a:e6:81:cc:a1:28:43:84:bb:a2:12:01:d3:ed:5d:
15:c8:ac:c8:69:34:bf:aa:8c:78:c4:70:3b:c8:de:c5:1a:6a:
cb:19:80:c7:7b:3b:09:89:7a:52:67:30:1d:c2:84:8f:98:79:
49:b1:73:a7:ca:86:8f:a7:9b:1b:f5:95:30:46:9f:e8:53:18:
b6:03:61:03:8c:ac:25:34:56:67:02:b6:ad:5b:7a:98:87:53:
69:58:b3:b5:21:d2:4c:6e:a2:fa:ba:d7:b7:cd:65:e6:b0:62:
bb:9e:e9:69:f2:85:50:7e:d7:1f:ec:c5:5b:25:57:03:c1:9f:
1f:21:66:c7:4b:f7:e4:9b:ee:39:4c:6c:7e:2a:27:b0:40:3e:
4a:0f:cd:13:af:96:05:9b:0f:34:1a:76:c9:95:bd:16:dc:70:
d7:66:f2:e8:52:2e:a9:58:91:3a:19:f8:35:ee:db:05:53:9d:
07:db:23:99:2d:c1:f7:36:2a:ae:56:92:7e:18:09:c4:c0:da:
92:48:67:7a:99:73:ee:cd:a8:b8:b0:13:72:ae:08:c8:63:51:
b6:0a:de:bd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYr2heFohmS6tHSqpk6WRaqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDAzMTcxMTIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTY5NGQ4YWQ4ZWRlZmE2MDRiMmUwYzkzMDY2ODBhNWY4YzBiOTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCvddPP6ZJd3mdVQZECs83/lm8sa
D/Kb2C1ydR35S0Vrl5BO3TUiejt8XRfJKJIxwihtHgLXPk7KJJ/yp0GS2bEos2mx
5pTZAWwgpqJdyBO7UczerS4PR6wkl8sFoRJZn2BUlz2P/z30h6euvMI29Ci7u5C4
0vyrtloyTDq+mbWALHr4b1qiLxhNLdggEIg3rjvf005/dj8JtZyPvU7DXS9L5aJe
KjaGzGAWwSGCy6G4L0xLnOsF1L1ZBo6/ajLu8g5ltD57LSh5c22o2D4FZ4V3D+Le
ZnOiq+eIrepdPCQRs9ddPW6DTDLLRSzq4Gok9zseXgSVo4YYHgQY1lIDyQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC5pTYrY7e+mBLLgyTBmgKX4wLlOMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvTG1sTml0anQ3NllFc3VESk1HYUFwZmpBdVU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI0L4lV5qNrMKdqM2J7w
Iqa6ycaPtZIlS11mHckUoW138QwcQFc7BmrmgcyhKEOEu6ISAdPtXRXIrMhpNL+q
jHjEcDvI3sUaassZgMd7OwmJelJnMB3ChI+YeUmxc6fKho+nmxv1lTBGn+hTGLYD
YQOMrCU0VmcCtq1bepiHU2lYs7Uh0kxuovq617fNZeawYrue6WnyhVB+1x/sxVsl
VwPBnx8hZsdL9+Sb7jlMbH4qJ7BAPkoPzROvlgWbDzQadsmVvRbccNdm8uhSLqlY
kToZ+DXu2wVTnQfbI5ktwfc2Kq5Wkn4YCcTA2pJIZ3qZc+7NqLiwE3KuCMhjUbYK
3r0=
-----END CERTIFICATE-----
Generated at Sun May 11 17:10:53 2025 by rpki-client