Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LHk5DVNdcq3B4TNO4LMWJ6ZclUQ.roa
File: LHk5DVNdcq3B4TNO4LMWJ6ZclUQ.roa (raw, json)
Hash identifier: iECP7DyHxFsP2LXYhaaeLyXk7M1GR+sqrDOheJL/3JU=
Subject key identifier: 2C:79:39:0D:53:5D:72:AD:C1:E1:33:4E:E0:B3:16:27:A6:5C:95:44
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CA0DD2B3DEAF0918EC923A75ABF5DFE36
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LHk5DVNdcq3B4TNO4LMWJ6ZclUQ.roa
Signing time: Mon 25 Dec 2023 12:04:58 +0000
ROA not before: Mon 25 Dec 2023 12:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:a0dc:879c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a0:dd:2b:3d:ea:f0:91:8e:c9:23:a7:5a:bf:5d:fe:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 25 12:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c79390d535d72adc1e1334ee0b31627a65c9544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:b2:5a:e0:d2:86:9c:69:47:ae:39:bc:77:
3a:6a:79:1e:1f:76:08:b0:7f:5c:6b:86:e5:a0:b6:
3d:09:e2:d0:ed:4f:c5:55:6d:f2:79:91:32:8a:5f:
04:d5:62:25:93:fb:38:fe:82:57:42:5c:6a:6d:b9:
9f:e0:c9:21:28:20:79:57:29:d8:2c:f0:d9:6e:cd:
86:c3:08:d5:f7:91:4d:c0:1f:c7:00:89:14:80:7d:
62:96:d0:49:ce:ae:cb:7f:c6:5f:b7:6d:08:40:d5:
ab:bb:19:3d:0a:0a:c5:4d:97:58:a1:d4:8c:a6:6b:
38:36:2b:45:bc:ad:03:ef:84:7d:63:55:0e:8f:69:
27:96:6f:ad:15:9f:91:5c:95:a6:8a:46:33:6b:9d:
b0:5f:00:9e:08:de:23:e4:c1:65:6b:7b:10:49:11:
d0:c6:93:c5:88:62:da:07:e5:b5:b8:7f:5a:38:ac:
1e:e8:d8:0e:2f:fb:6b:f6:2e:0b:11:36:fc:56:c1:
c8:26:68:83:1f:52:37:92:56:52:b1:52:c5:72:31:
e7:62:de:1d:c8:b5:8f:b3:7d:1d:1a:de:71:02:54:
52:9a:17:cd:62:1c:fc:f8:24:1d:21:1f:d9:8c:4d:
b8:67:9f:5c:de:db:05:bb:6e:b9:b5:b5:2b:02:6b:
54:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:79:39:0D:53:5D:72:AD:C1:E1:33:4E:E0:B3:16:27:A6:5C:95:44
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LHk5DVNdcq3B4TNO4LMWJ6ZclUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:9b:40:97:38:9c:31:86:80:d7:9c:75:d8:73:f4:73:6b:b8:
e9:7b:bc:ce:e3:81:8b:bd:b4:76:a7:e8:df:55:e6:59:88:e0:
ec:86:3c:8b:72:9a:21:c9:76:1b:53:c5:a4:e9:df:a6:e2:a4:
09:ce:a3:ed:6d:22:34:a2:5b:9b:d9:e2:3a:96:6d:e6:da:06:
6e:cc:b6:4c:ae:ec:3b:e6:bb:ba:db:81:4e:cb:56:52:ad:5c:
3c:95:77:f7:a9:5a:11:cd:d1:56:2a:a3:82:1c:b4:0d:f7:f9:
74:ae:97:83:ac:55:db:1a:ba:aa:73:22:ba:ee:6d:d8:3e:40:
5f:b2:c4:4e:68:f3:38:be:a5:6f:a0:17:b4:3a:67:e5:ba:58:
c8:9f:35:d6:50:24:d6:01:e7:ab:d3:3b:bc:91:7b:dc:4e:05:
45:28:5e:4e:24:3e:1a:54:62:c4:ab:58:d5:4d:d5:11:2f:6c:
49:6b:40:92:55:21:38:40:df:d7:5a:ff:bd:7c:45:e7:08:4f:
03:84:a0:80:52:ae:7d:53:7d:b5:1a:a5:0e:1d:20:f1:64:6a:
22:50:38:55:e3:f7:f8:79:9d:d9:2f:ec:74:bc:96:23:47:7f:
9f:13:aa:c7:81:3c:05:7b:eb:c7:26:fa:40:25:a8:9b:3b:80:
02:2e:bd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:04:54 2025 by rpki-client