Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LPjGocaJtfR-sLPsBCH_2t3Pg3c.roa
File: LPjGocaJtfR-sLPsBCH_2t3Pg3c.roa (raw, json)
Hash identifier: N9KqUb/0eIDfyfLdn6WPJjtYrHg3naVt4HUUg45SQ14=
Subject key identifier: 2C:F8:C6:A1:C6:89:B5:F4:7E:B0:B3:EC:04:21:FF:DA:DD:CF:83:77
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CC860D4E014BA3BD0DCB4F53933288D3F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LPjGocaJtfR-sLPsBCH_2t3Pg3c.roa
Signing time: Tue 02 Jan 2024 04:13:58 +0000
ROA not before: Tue 02 Jan 2024 04:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:60:d4:e0:14:ba:3b:d0:dc:b4:f5:39:33:28:8d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 2 04:13:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cf8c6a1c689b5f47eb0b3ec0421ffdaddcf8377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:41:b6:76:e9:1e:5e:87:66:d8:2d:c9:c6:
c2:00:d1:4b:44:01:ec:25:88:ea:0e:bf:0b:82:03:
cb:aa:26:01:f1:2f:c4:3b:8b:ad:d9:d5:f1:d6:6c:
60:e3:92:5e:a0:50:e3:25:eb:f9:29:ec:5c:27:05:
d8:5c:e9:19:6c:66:ef:a1:68:78:fc:84:15:76:72:
5b:c4:b0:fb:42:a6:cf:54:81:ce:67:a0:d4:75:d5:
10:5f:a6:c9:e3:e6:3c:51:2c:fd:7c:fb:37:b8:e2:
d6:41:40:92:79:60:ef:2b:d1:37:82:e4:41:e8:f0:
7d:d8:df:be:ff:6d:25:98:54:58:03:e3:fe:9d:92:
57:aa:1b:49:eb:37:19:dd:76:22:e9:aa:67:5e:d5:
3d:2e:1f:ce:d8:ae:3a:c4:28:6e:8a:2e:f2:c0:47:
cb:27:21:f6:35:5a:b2:75:0c:cc:c5:2b:ab:45:b3:
5f:8c:30:99:72:6c:2d:44:a9:31:a4:39:f0:5c:19:
a9:36:c3:03:c2:43:41:2c:6d:8f:1e:b3:16:a7:cd:
4c:1e:f7:f0:f6:61:d0:90:e3:53:11:63:cc:96:bc:
64:8c:9a:cd:6c:52:c0:f8:a9:5f:71:d7:5b:ff:6d:
ea:5d:0d:44:97:d2:24:fc:63:36:6b:64:26:1e:97:
8a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F8:C6:A1:C6:89:B5:F4:7E:B0:B3:EC:04:21:FF:DA:DD:CF:83:77
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LPjGocaJtfR-sLPsBCH_2t3Pg3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:fa:0a:24:02:a0:21:c5:9c:d3:9c:d9:4e:6a:fb:b5:69:f9:
09:a8:85:f8:5c:03:73:08:56:b5:9c:94:29:26:e1:5f:13:b6:
af:82:67:79:da:f0:4f:41:8a:86:3a:d5:4a:c0:65:88:22:34:
03:32:47:34:3d:26:3e:53:92:26:32:e4:6c:c7:11:df:f3:c5:
a1:ac:fd:1e:36:44:5c:9b:31:e3:11:60:79:25:8f:9b:fc:04:
6a:15:2c:1b:23:9c:f6:30:c7:bb:80:5c:05:84:05:cf:8d:ba:
15:5b:c0:1f:a9:83:2f:c1:b7:12:a4:ad:06:d6:30:d6:d4:ed:
3e:db:cd:a7:95:b0:af:5b:ba:40:1b:ff:b6:8a:45:ff:25:d6:
4e:4f:d9:49:34:f4:80:1b:92:eb:1b:75:7b:12:a3:7e:99:26:
96:dc:c8:9a:56:74:ad:bb:13:84:f8:fb:3b:10:12:85:fd:44:
f2:6c:1c:8e:5f:77:ea:eb:77:40:91:29:6f:fd:13:11:75:6e:
07:de:86:0a:74:bd:ab:b0:31:37:e8:7c:9b:23:6e:98:4c:b4:
ea:7e:7f:27:0c:8d:47:83:42:1f:33:e2:fe:ba:17:87:ca:fc:
53:65:46:0a:d3:6c:b2:74:47:d6:df:e9:31:85:96:0e:ad:be:
e9:2e:2f:e8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzIYNTgFLo70Ny09TkzKI0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTAyMDQxMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2Y4YzZhMWM2ODliNWY0N2ViMGIzZWMwNDIxZmZkYWRkY2Y4Mzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRNBtnbpHl6HZtgtycbCANFLRAHs
JYjqDr8LggPLqiYB8S/EO4ut2dXx1mxg45JeoFDjJev5KexcJwXYXOkZbGbvoWh4
/IQVdnJbxLD7QqbPVIHOZ6DUddUQX6bJ4+Y8USz9fPs3uOLWQUCSeWDvK9E3guRB
6PB92N++/20lmFRYA+P+nZJXqhtJ6zcZ3XYi6apnXtU9Lh/O2K46xChuii7ywEfL
JyH2NVqydQzMxSurRbNfjDCZcmwtRKkxpDnwXBmpNsMDwkNBLG2PHrMWp81MHvfw
9mHQkONTEWPMlrxkjJrNbFLA+Klfcddb/23qXQ1El9Ik/GM2a2QmHpeK/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCz4xqHGibX0frCz7AQh/9rdz4N3MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTFBqR29jYUp0ZlItc0xQc0JDSF8ydDNQZzNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGD6CiQCoCHFnNOc2U5q
+7Vp+QmohfhcA3MIVrWclCkm4V8Ttq+CZ3na8E9BioY61UrAZYgiNAMyRzQ9Jj5T
kiYy5GzHEd/zxaGs/R42RFybMeMRYHklj5v8BGoVLBsjnPYwx7uAXAWEBc+NuhVb
wB+pgy/BtxKkrQbWMNbU7T7bzaeVsK9bukAb/7aKRf8l1k5P2Uk09IAbkusbdXsS
o36ZJpbcyJpWdK27E4T4+zsQEoX9RPJsHI5fd+rrd0CRKW/9ExF1bgfehgp0vauw
MTfofJsjbphMtOp+fycMjUeDQh8z4v66F4fK/FNlRgrTbLJ0R9bf6TGFlg6tvuku
L+g=
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:10:30 2025 by rpki-client