Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LoxpzibteLsUbqOAZ9KhAJNrv8w.roa
File: LoxpzibteLsUbqOAZ9KhAJNrv8w.roa (raw, json)
Hash identifier: j6VDWHepbmvBVVAEnxl4XhJcoRTVOUp2MvaMVCksvs8=
Subject key identifier: 2E:8C:69:CE:26:ED:78:BB:14:6E:A3:80:67:D2:A1:00:93:6B:BF:CC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C51ED6165A82259ED615D3B806C2977D3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LoxpzibteLsUbqOAZ9KhAJNrv8w.roa
Signing time: Sun 10 Dec 2023 04:12:40 +0000
ROA not before: Sun 10 Dec 2023 04:12:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:51:ed:61:65:a8:22:59:ed:61:5d:3b:80:6c:29:77:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 04:12:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e8c69ce26ed78bb146ea38067d2a100936bbfcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:1c:16:db:f3:35:f8:43:95:c5:1b:42:2a:
c4:03:43:46:fa:cd:aa:4e:6c:93:51:f5:48:2f:7b:
ec:e9:14:5b:d7:53:55:ce:0d:66:2e:00:0f:8d:29:
1a:5d:60:af:5a:03:6b:55:95:78:e5:a4:ff:ba:4f:
1e:4a:71:da:bc:25:f7:f7:de:5b:4d:3f:10:18:72:
08:90:45:2f:db:23:55:64:87:32:38:85:db:e0:04:
8f:2e:9d:46:ef:b6:a5:d6:09:b1:73:2c:c7:12:ce:
8e:ed:7a:0a:35:26:54:db:d1:03:52:1f:cd:84:97:
c9:d7:40:60:14:d1:ec:89:1e:c9:f5:bb:48:54:d3:
e2:72:53:c3:96:d0:f5:d1:64:09:05:8f:b3:2b:a1:
e5:4b:35:ff:26:34:94:ad:a6:01:aa:db:42:95:a5:
6c:f9:f1:9f:a1:8b:c8:79:e1:93:a1:e8:5d:0a:48:
4d:32:b6:89:a0:e9:59:fe:22:50:df:f4:c8:71:e1:
4d:d0:2e:cc:f4:de:49:2b:55:fd:64:b5:07:d9:ce:
a6:f1:b3:23:83:fc:8a:48:8f:85:49:95:45:ef:8c:
11:e7:eb:05:23:66:15:35:bb:6c:fb:df:d2:a3:19:
0d:b0:5c:00:9d:dc:5a:d6:13:18:67:1e:0d:25:63:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8C:69:CE:26:ED:78:BB:14:6E:A3:80:67:D2:A1:00:93:6B:BF:CC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LoxpzibteLsUbqOAZ9KhAJNrv8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:e0:d9:bf:08:f4:a2:24:b1:d7:49:17:2d:f6:07:9a:ea:54:
00:aa:15:04:1b:67:60:ef:94:ba:51:80:0f:6c:36:e7:2f:cd:
a8:df:27:55:f8:30:59:8e:22:e0:e5:ed:d0:39:7b:21:79:d0:
34:3d:4e:66:c8:b4:1a:44:dc:d5:67:12:17:45:38:e5:82:bc:
74:56:fe:2c:a2:24:fc:26:61:72:0a:bf:e0:8d:87:76:d0:e9:
a6:2c:f1:9a:d5:07:2d:4e:77:b2:b7:97:31:ed:ac:be:0e:68:
10:61:b3:06:2e:1c:aa:8b:7d:29:76:4b:e5:55:52:8c:e4:87:
2b:b0:e7:aa:ec:ec:b6:f4:af:35:51:6d:1a:87:83:88:7b:4c:
d9:d6:c7:20:8e:a6:f7:99:19:b4:1f:67:bb:b2:f9:64:82:8a:
35:ac:16:3b:b9:62:2d:f7:4d:4d:ac:5d:7b:c6:64:63:b8:ff:
8a:3c:ac:3a:3c:85:a2:0f:a0:37:6f:48:fc:e0:13:8f:f8:d2:
61:66:f8:e0:73:27:d6:49:71:0e:bb:42:d5:d2:9a:9f:eb:bd:
46:2e:8c:62:ff:c4:25:21:1f:69:4a:dc:c1:fe:41:d7:41:b7:
a1:f4:32:9d:d8:7f:38:01:dc:1d:3c:f2:9b:11:7f:11:16:44:
ee:29:01:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:48:59 2025 by rpki-client