Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lKJWyl58mt_00jMFkrX78xNNn9c.roa
File: lKJWyl58mt_00jMFkrX78xNNn9c.roa (raw, json)
Hash identifier: OixxQlrNoHt00ZH/F/C4V241QShisNMh9zW/FDqmD5c=
Subject key identifier: 94:A2:56:CA:5E:7C:9A:DF:F4:D2:33:05:92:B5:FB:F3:13:4D:9F:D7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDBAE178B90CF0E191E901B1F3024EB52
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lKJWyl58mt_00jMFkrX78xNNn9c.roa
Signing time: Fri 17 Nov 2023 05:08:21 +0000
ROA not before: Fri 17 Nov 2023 05:08:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:db:ae:17:8b:90:cf:0e:19:1e:90:1b:1f:30:24:eb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 05:08:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94a256ca5e7c9adff4d2330592b5fbf3134d9fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b4:fa:23:8d:02:06:d6:62:4f:fa:5a:a2:33:
c8:d0:12:c9:4b:7d:75:f0:19:da:46:4c:64:4e:00:
4b:86:b0:77:f0:ca:d2:fc:94:42:12:43:37:2a:d4:
9b:71:e8:38:ff:8b:8e:2a:70:b2:ab:9e:1a:8a:41:
78:1b:a0:b2:0e:84:b6:b4:f0:43:75:b8:6e:30:bc:
fa:72:e6:d6:04:d1:bd:22:4d:f8:4f:a8:34:ac:3f:
0b:8c:82:74:54:ee:49:c7:84:28:28:23:f5:9e:ec:
bd:b1:f6:c5:f0:87:97:8c:fc:22:9c:bd:7f:1d:08:
1b:5f:6d:e1:f5:6c:ee:e9:0f:3f:c8:33:b6:e0:2b:
70:fb:c2:dd:ba:99:bd:a3:6c:75:de:a5:e6:c0:35:
92:aa:57:b9:f4:2d:5a:1b:a5:35:31:9c:cf:25:98:
58:76:fc:34:4d:e0:a2:5c:3f:ec:4c:d2:a5:cb:46:
12:95:72:67:ff:06:06:73:d4:21:a2:9b:00:fb:0d:
2b:f6:36:49:f8:3f:42:1c:0f:13:9e:a5:3c:69:10:
c3:8e:81:0d:9e:5f:ba:e2:e3:3c:e6:cf:65:28:cd:
b4:af:88:85:d0:67:7d:09:db:3d:5c:7e:c7:d9:6f:
33:37:d1:b4:8f:50:1d:7b:17:cd:99:5c:44:fa:f1:
61:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A2:56:CA:5E:7C:9A:DF:F4:D2:33:05:92:B5:FB:F3:13:4D:9F:D7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lKJWyl58mt_00jMFkrX78xNNn9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:31:38:fb:48:e8:0b:25:5a:18:7d:5d:7d:a3:be:f6:50:54:
18:39:68:10:bd:af:5a:0c:44:8d:04:6b:9d:87:8f:25:13:19:
2d:69:ea:2d:5c:cd:c9:d3:d9:46:49:7b:f5:ff:e9:5e:6a:2b:
aa:e4:57:db:4a:4e:40:9f:8c:18:2a:e5:36:6d:99:1e:24:66:
c7:cb:9c:a8:75:e8:5e:ef:f3:dc:56:65:f0:1c:96:4e:07:d1:
f0:87:32:18:c2:c5:db:c9:69:03:16:f0:0a:92:58:56:02:35:
76:71:a1:6b:a6:d7:64:9b:ea:7b:04:de:57:9c:d3:1e:9c:9a:
2e:c4:c6:ac:40:de:88:ab:99:d4:aa:a5:23:78:00:1d:69:43:
e1:bd:8c:65:41:ad:ed:05:f3:d2:cd:12:e8:99:0f:0c:1c:1e:
5d:0e:93:d9:86:3e:cb:96:3d:17:d8:da:01:a5:23:6b:f1:b5:
59:23:95:d9:44:f4:0c:f7:ee:5c:24:7b:15:20:37:59:a2:e1:
84:e5:58:25:34:1a:62:c2:48:80:ff:28:4f:6b:00:2f:a7:72:
d8:df:15:fe:25:02:b6:a2:aa:c2:29:26:db:08:b8:bb:65:b9:
d5:f7:7b:40:43:09:81:7b:7d:8b:9e:bf:39:7f:99:29:da:d7:
2c:2e:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:16:19 2025 by rpki-client