Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LgAItbigbeVP-B4wLPn6vvMcQCE.roa
File: LgAItbigbeVP-B4wLPn6vvMcQCE.roa (raw, json)
Hash identifier: bZCxZdsc3fKoWtRzoX/M7PJs1BSEr8MW6OMFjzAxT0k=
Subject key identifier: 2E:00:08:B5:B8:A0:6D:E5:4F:F8:1E:30:2C:F9:FA:BE:F3:1C:40:21
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D5CDD3ED126C0A82476C580EF47ED6CD0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LgAItbigbeVP-B4wLPn6vvMcQCE.roa
Signing time: Wed 31 Jan 2024 00:13:39 +0000
ROA not before: Wed 31 Jan 2024 00:13:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5c:dd:3e:d1:26:c0:a8:24:76:c5:80:ef:47:ed:6c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 31 00:13:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e0008b5b8a06de54ff81e302cf9fabef31c4021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:62:ad:5c:ce:49:39:26:45:5d:66:81:7d:f8:
7b:0a:82:be:b9:6b:d8:8c:c3:cc:34:ee:bd:18:5e:
a6:f1:2c:5e:ff:ec:28:67:5f:9d:4f:55:2e:83:bf:
b9:2b:4d:5e:7d:b0:70:8e:5d:f1:8d:03:e7:a3:14:
3e:55:28:d6:4f:9c:a1:b5:e6:65:3a:44:94:10:1b:
7f:ad:ed:62:3d:ff:94:e4:74:00:33:cb:28:6a:b2:
2e:69:46:e3:a4:10:76:02:ab:c6:d8:b8:48:4e:25:
a9:67:f8:1c:25:64:c5:50:ad:13:81:db:4b:c8:3c:
2e:35:96:2c:c1:0a:d8:47:fe:41:cb:c5:f2:39:e0:
0f:d0:23:c1:72:99:d9:67:85:cb:03:4f:25:7d:68:
50:b4:41:f3:58:ae:ae:7d:08:d6:a9:97:9e:60:e3:
39:da:db:95:84:b5:6b:60:e6:d5:85:44:30:c8:cc:
9c:5c:0d:93:40:aa:41:e3:22:77:26:5f:b7:1f:14:
de:29:9e:da:0f:d1:5b:b5:7d:36:41:b0:00:ee:2d:
8a:39:2e:7d:c9:1f:8b:70:b8:d4:11:45:31:92:6f:
55:09:27:79:f1:6e:7b:52:27:f1:7a:17:82:0f:8a:
64:75:5d:6a:aa:4e:53:06:e8:b2:ee:c4:6f:d3:96:
c0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:00:08:B5:B8:A0:6D:E5:4F:F8:1E:30:2C:F9:FA:BE:F3:1C:40:21
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LgAItbigbeVP-B4wLPn6vvMcQCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:34:a7:f1:bc:0b:ac:7e:b4:1c:1f:c4:4f:e2:c4:06:84:98:
e9:8b:25:3e:5a:a2:93:f7:c3:d5:37:31:20:ff:18:15:29:e8:
3f:10:aa:90:fd:e7:f5:38:9f:a5:7b:e6:53:f8:cb:b6:b5:32:
1b:1e:d1:a8:b6:ae:25:c5:62:ad:ed:e0:ff:3a:09:82:42:83:
78:b3:8c:cd:b9:40:a8:2e:f4:f6:17:4a:7e:20:b3:3d:17:65:
89:2e:68:bb:f7:8c:02:72:62:e3:e8:e3:fb:51:87:27:bf:ae:
3a:98:ce:84:a1:d9:85:52:e2:10:e1:0b:75:34:fb:50:e9:2e:
b8:1a:1e:eb:24:3a:0a:6c:3f:31:0a:de:81:3d:c5:c3:cd:08:
19:df:8b:e4:2b:c2:b2:ee:0e:5f:66:1a:29:b1:2c:93:08:bc:
c7:d6:7a:f7:80:98:ef:d9:b4:13:54:3b:b0:2b:aa:09:5e:7a:
74:c3:9c:02:c7:fa:ba:6a:28:50:cd:1d:83:fc:58:71:2a:10:
77:6e:8e:e7:0f:a1:73:c1:10:3e:64:08:66:19:0b:76:0c:f9:
ce:78:8f:8b:f7:18:aa:5c:0b:a9:ee:e3:67:c6:12:df:61:97:
6f:dd:45:bc:6c:62:1e:57:54:1d:65:36:9e:aa:97:d5:fe:9f:
6a:28:1b:60
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY1c3T7RJsCoJHbFgO9H7WzQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTMxMDAxMzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTAwMDhiNWI4YTA2ZGU1NGZmODFlMzAyY2Y5ZmFiZWYzMWM0MDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWKtXM5JOSZFXWaBffh7CoK+uWvY
jMPMNO69GF6m8Sxe/+woZ1+dT1Uug7+5K01efbBwjl3xjQPnoxQ+VSjWT5yhteZl
OkSUEBt/re1iPf+U5HQAM8soarIuaUbjpBB2AqvG2LhITiWpZ/gcJWTFUK0TgdtL
yDwuNZYswQrYR/5By8XyOeAP0CPBcpnZZ4XLA08lfWhQtEHzWK6ufQjWqZeeYOM5
2tuVhLVrYObVhUQwyMycXA2TQKpB4yJ3Jl+3HxTeKZ7aD9FbtX02QbAA7i2KOS59
yR+LcLjUEUUxkm9VCSd58W57UifxeheCD4pkdV1qqk5TBuiy7sRv05bACQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC4ACLW4oG3lT/geMCz5+r7zHEAhMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTGdBSXRiaWdiZVZQLUI0d0xQbjZ2dk1jUUNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAII0p/G8C6x+tBwfxE/i
xAaEmOmLJT5aopP3w9U3MSD/GBUp6D8QqpD95/U4n6V75lP4y7a1Mhse0ai2riXF
Yq3t4P86CYJCg3izjM25QKgu9PYXSn4gsz0XZYkuaLv3jAJyYuPo4/tRhye/rjqY
zoSh2YVS4hDhC3U0+1DpLrgaHuskOgpsPzEK3oE9xcPNCBnfi+QrwrLuDl9mGimx
LJMIvMfWeveAmO/ZtBNUO7ArqgleenTDnALH+rpqKFDNHYP8WHEqEHdujucPoXPB
ED5kCGYZC3YM+c54j4v3GKpcC6nu42fGEt9hl2/dRbxsYh5XVB1lNp6ql9X+n2oo
G2A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org