Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/L4G-8qhGkC2r-3HlfJddaS4D4tU.roa
File: L4G-8qhGkC2r-3HlfJddaS4D4tU.roa (raw, json)
Hash identifier: kyDyixopQLGidd6CeMb5Vg/0WAswurSPwqTMGKHdMGA=
Subject key identifier: 2F:81:BE:F2:A8:46:90:2D:AB:FB:71:E5:7C:97:5D:69:2E:03:E2:D5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EA67369F93A3B01B69B8DB64AA91C680F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/L4G-8qhGkC2r-3HlfJddaS4D4tU.roa
Signing time: Thu 04 Apr 2024 00:12:45 +0000
ROA not before: Thu 04 Apr 2024 00:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a6:73:69:f9:3a:3b:01:b6:9b:8d:b6:4a:a9:1c:68:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 4 00:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f81bef2a846902dabfb71e57c975d692e03e2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:1f:df:61:02:cb:1f:66:40:fd:4c:2c:77:
7e:02:e1:90:79:b2:bb:90:00:e7:a8:63:a2:a0:38:
b2:c3:a6:1d:ae:f0:26:40:6d:70:5d:ac:79:1c:83:
34:42:b5:3d:15:68:de:a8:e2:ed:33:3d:6b:93:49:
e9:a7:48:e8:23:96:0a:20:a0:a8:c6:fe:5d:40:7f:
22:47:4c:04:9c:aa:2a:03:27:ca:a2:5c:47:c7:93:
ad:71:fc:8e:e6:f9:ea:4d:d6:c3:e0:53:6c:ac:62:
2c:b9:53:43:ff:4d:4c:32:87:07:4b:e2:50:d0:77:
af:18:30:98:1d:39:1e:e9:63:93:b9:78:d3:29:3e:
62:60:31:3a:02:c3:60:40:04:46:5d:be:dd:b1:56:
bf:d7:80:f8:81:18:2c:1c:ed:86:fc:6f:1f:2f:35:
ed:e8:ab:91:4a:ce:d0:f2:f4:57:f0:33:3e:f9:87:
97:38:e7:7b:1b:0f:4a:67:c2:8a:a7:9f:42:aa:95:
ed:f6:b3:5b:f9:0f:85:1e:9e:c1:e9:cc:94:11:85:
60:d5:df:f5:d0:c4:7f:dd:74:60:04:64:d3:05:75:
39:c7:1a:fc:8b:f3:29:a7:f0:57:13:60:56:d4:ea:
17:2f:2c:29:cf:a1:54:6c:8c:c1:b0:61:f7:3f:89:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:81:BE:F2:A8:46:90:2D:AB:FB:71:E5:7C:97:5D:69:2E:03:E2:D5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/L4G-8qhGkC2r-3HlfJddaS4D4tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:a5:b3:10:40:c7:c0:89:3d:31:3a:83:4b:01:ec:62:9b:ae:
ff:19:3a:5f:ab:fd:68:f1:ca:55:6d:bf:1d:7b:f7:ed:96:f6:
6f:64:8d:4f:b4:a2:08:9f:cb:d0:17:fd:07:cd:41:01:9e:50:
c0:d5:74:e2:6c:10:ba:16:30:95:16:f7:f1:17:db:a8:8f:aa:
56:9f:74:81:5e:10:b7:d2:9d:30:cb:ad:b9:e3:82:95:7d:a9:
a0:3f:d5:d3:d6:7d:3a:01:93:73:f0:f6:00:83:aa:99:ea:c1:
ad:4c:c6:c8:82:49:8a:ae:cc:dd:5c:5f:fb:58:8f:fe:4d:e7:
9d:25:03:bf:39:48:e2:18:b2:a0:57:47:f2:63:0a:21:6a:cc:
ac:72:29:67:12:fe:f5:77:61:8e:b1:9f:90:70:9e:25:12:d5:
73:c0:98:6d:71:f5:3b:13:34:82:a3:c1:0b:d9:3f:a9:bb:b2:
1b:75:11:bc:f5:18:e1:c9:57:c0:a5:01:e4:03:70:b3:24:64:
47:6a:7b:82:d4:2f:55:ce:04:33:70:84:fc:73:40:86:57:20:
b4:5e:81:e9:66:46:9e:89:70:14:01:7e:1c:56:09:3e:39:e1:
1f:8f:56:44:58:54:e9:e4:27:53:5d:15:99:a4:d4:26:3e:98:
cd:60:9a:3f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6mc2n5OjsBtpuNtkqpHGgPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDA0MDAxMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjgxYmVmMmE4NDY5MDJkYWJmYjcxZTU3Yzk3NWQ2OTJlMDNlMmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9Uf32ECyx9mQP1MLHd+AuGQebK7
kADnqGOioDiyw6YdrvAmQG1wXax5HIM0QrU9FWjeqOLtMz1rk0npp0joI5YKIKCo
xv5dQH8iR0wEnKoqAyfKolxHx5OtcfyO5vnqTdbD4FNsrGIsuVND/01MMocHS+JQ
0HevGDCYHTke6WOTuXjTKT5iYDE6AsNgQARGXb7dsVa/14D4gRgsHO2G/G8fLzXt
6KuRSs7Q8vRX8DM++YeXOOd7Gw9KZ8KKp59CqpXt9rNb+Q+FHp7B6cyUEYVg1d/1
0MR/3XRgBGTTBXU5xxr8i/Mpp/BXE2BW1OoXLywpz6FUbIzBsGH3P4kbYQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC+BvvKoRpAtq/tx5XyXXWkuA+LVMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTDRHLThxaEdrQzJyLTNIbGZKZGRhUzRENHRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIelsxBAx8CJPTE6g0sB
7GKbrv8ZOl+r/WjxylVtvx179+2W9m9kjU+0ogify9AX/QfNQQGeUMDVdOJsELoW
MJUW9/EX26iPqlafdIFeELfSnTDLrbnjgpV9qaA/1dPWfToBk3Pw9gCDqpnqwa1M
xsiCSYquzN1cX/tYj/5N550lA785SOIYsqBXR/JjCiFqzKxyKWcS/vV3YY6xn5Bw
niUS1XPAmG1x9TsTNIKjwQvZP6m7sht1Ebz1GOHJV8ClAeQDcLMkZEdqe4LUL1XO
BDNwhPxzQIZXILRegelmRp6JcBQBfhxWCT454R+PVkRYVOnkJ1NdFZmk1CY+mM1g
mj8=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:36 2025 by rpki-client