Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1LAX1946dDftiJ9jbCk2qKsl3gA.roa
File: 1LAX1946dDftiJ9jbCk2qKsl3gA.roa (raw, json)
Hash identifier: N3jBTM2z6lgZotRV8Laz+1IT3v4b4exuyAkcK891zf8=
Subject key identifier: D4:B0:17:D7:DE:3A:74:37:ED:88:9F:63:6C:29:36:A8:AB:25:DE:00
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C8B6F544961A7C101219A5CE70D9FA473
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1LAX1946dDftiJ9jbCk2qKsl3gA.roa
Signing time: Thu 21 Dec 2023 08:12:58 +0000
ROA not before: Thu 21 Dec 2023 08:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:6f:54:49:61:a7:c1:01:21:9a:5c:e7:0d:9f:a4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 21 08:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4b017d7de3a7437ed889f636c2936a8ab25de00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:cd:22:5f:8a:fb:4f:d9:ff:5a:9d:f7:bc:
79:39:80:07:e3:df:26:6e:48:34:22:30:66:54:49:
39:0b:3b:9a:ae:73:79:e9:60:8e:5a:34:7b:98:d5:
c2:5d:81:b2:38:37:bc:1b:1c:8e:bb:38:85:94:51:
a3:e8:32:ca:dd:96:e9:ed:75:d1:13:06:06:22:8e:
d9:e6:a7:65:e6:48:0d:16:8e:52:63:7e:46:aa:c4:
74:af:6f:69:59:79:91:3f:55:11:24:e2:fe:cd:dc:
72:89:3b:d4:84:c3:59:4b:b1:2f:03:e7:ca:87:cc:
da:87:f0:9d:74:22:38:cf:c3:a2:ec:fc:a5:ce:6a:
1e:8d:7e:3b:32:e3:fb:a2:ca:16:45:db:12:00:7b:
c3:eb:bb:94:cb:c1:13:5f:59:9e:0c:82:5c:d1:a7:
f5:62:d5:c8:5b:3a:5b:94:4b:4a:a9:96:28:fe:a6:
5b:f6:3d:7f:bf:e5:94:f5:1a:ed:e5:4f:70:99:e4:
86:9b:d9:7f:08:d7:2f:4f:6b:f9:69:38:5b:56:c6:
32:92:f4:6f:09:12:20:30:ac:8a:89:ad:49:d0:c7:
44:cb:b9:72:c2:91:c7:7d:0b:dd:a7:26:94:c5:b4:
e4:84:9c:81:d7:dd:ad:4a:08:13:6c:2a:20:2b:10:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B0:17:D7:DE:3A:74:37:ED:88:9F:63:6C:29:36:A8:AB:25:DE:00
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1LAX1946dDftiJ9jbCk2qKsl3gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:d6:bd:41:80:6b:99:00:76:09:f4:2e:66:e7:19:68:62:35:
36:2b:b6:64:e5:d3:db:e4:59:56:70:3c:fa:25:c6:37:16:ef:
a5:67:ac:45:31:ef:d6:06:ef:26:53:06:21:0a:fa:c6:ad:72:
b4:e6:bc:e9:1a:d6:1e:f2:0d:40:ef:a6:99:53:18:35:9b:40:
f4:3c:66:38:ce:22:36:6e:92:00:9d:bd:2e:02:25:c2:ff:6e:
13:d9:fa:e1:f4:3c:4f:1c:03:8f:d1:ab:bd:d5:ea:0b:2c:e2:
e6:04:73:02:d5:d3:34:14:d7:8b:53:db:a4:62:87:8b:f3:de:
cb:a7:1d:f9:2d:fd:cc:0f:90:6a:8b:f7:a2:e3:77:3a:2f:e2:
6b:76:f3:4e:45:6c:a4:c2:da:15:86:1e:2a:9d:aa:33:38:ee:
40:a5:70:2a:0f:1a:dc:52:9e:7d:87:ba:ac:e0:7c:62:c3:9c:
f0:31:0c:15:f4:e6:43:2f:af:a5:96:31:d6:85:8b:fc:50:01:
94:13:4a:43:fb:76:5a:88:66:00:60:48:20:14:79:fc:3f:e0:
7a:b1:c0:99:73:ff:3a:f2:fe:9b:8a:2f:7e:0b:4c:a7:0c:37:
45:a6:ff:07:b9:79:65:32:22:9a:b0:d9:29:fc:ec:4b:e9:2d:
9a:ee:05:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:32 2025 by rpki-client