Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LgKMzYNEzzrdJ2V4fQELrujuQjs.roa
File: LgKMzYNEzzrdJ2V4fQELrujuQjs.roa (raw, json)
Hash identifier: QhuXJtZk9VwBQ7M7pqvy2NQ9V/0CWU5xdeAnHvjOJwc=
Subject key identifier: 2E:02:8C:CD:83:44:CF:3A:DD:27:65:78:7D:01:0B:AE:E8:EE:42:3B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D18CF3E8514A311BA73CD3FB703AB6F70
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LgKMzYNEzzrdJ2V4fQELrujuQjs.roa
Signing time: Wed 17 Jan 2024 19:04:11 +0000
ROA not before: Wed 17 Jan 2024 19:04:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:18cf:3831/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:18:cf:3e:85:14:a3:11:ba:73:cd:3f:b7:03:ab:6f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 17 19:04:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e028ccd8344cf3add2765787d010baee8ee423b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a5:15:1e:5b:3e:5c:1d:4b:3b:48:fc:43:ea:
4c:a0:4f:5b:12:5f:b1:93:db:4f:cb:42:13:c9:1b:
e6:0c:4c:65:59:1f:e7:b4:6c:24:f9:2e:2d:26:7a:
bf:94:3c:cb:ba:f4:47:4c:65:11:85:12:90:f6:39:
01:b7:1e:59:31:2f:ae:0e:9a:ac:e8:44:06:e2:43:
61:1e:86:49:0c:80:22:5a:86:75:c6:43:2d:cb:2f:
5c:f0:7e:11:80:3d:8e:f9:32:9e:66:e2:0e:b5:fd:
a0:d9:87:bf:3c:d3:96:64:e8:a6:d9:0e:0f:86:bf:
cc:75:d3:6c:df:8f:dd:55:b2:60:63:3e:6b:07:4c:
5a:80:25:60:a7:10:c0:2a:f0:47:fb:3a:1d:5d:04:
87:99:95:44:3c:50:a5:9f:ac:72:9c:25:a6:79:34:
0a:e4:d7:b7:36:8e:79:3a:df:44:1c:88:47:ef:4a:
af:65:72:e0:02:c8:5e:86:e3:f9:38:29:c5:b0:3f:
e3:1f:42:92:28:e8:36:85:e5:9a:ee:ae:e7:9b:9a:
59:8b:39:94:71:75:b0:cd:7b:23:f6:5b:30:21:dc:
09:36:ff:77:ac:ba:df:1a:e2:4d:4a:79:91:c2:ae:
a9:75:c9:65:b5:e1:f2:ce:1c:6d:72:47:cf:40:7e:
87:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:02:8C:CD:83:44:CF:3A:DD:27:65:78:7D:01:0B:AE:E8:EE:42:3B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LgKMzYNEzzrdJ2V4fQELrujuQjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:4a:ef:ed:82:47:6d:f1:14:a8:3f:fc:be:52:fb:f0:99:a0:
6a:26:e0:49:e2:3e:f4:45:8c:e1:16:d3:f2:33:8b:1d:e8:2c:
f3:f7:f8:b6:f2:07:f8:95:6e:80:5c:c6:21:a5:be:33:a9:4f:
95:84:82:d2:c9:b0:2b:3b:ea:8d:98:62:46:4b:45:a6:7d:1f:
25:c0:4f:37:3a:23:3f:f1:2e:d3:46:40:13:cf:b5:37:12:b6:
d5:7f:02:c0:f5:68:6b:8a:52:4f:a1:47:f6:8d:40:66:a7:b1:
2e:f8:d3:92:66:92:59:1a:d1:61:80:f7:03:6b:d7:a0:b7:d6:
2f:2d:cf:64:9f:f1:21:d8:b1:e8:72:de:27:20:ad:ab:00:a5:
7f:e6:66:b3:4f:ad:8e:37:af:52:b1:da:41:87:a0:fb:5a:48:
4f:dd:6d:9b:b3:12:a1:7c:8d:1b:05:c0:12:9f:3b:73:80:10:
0a:d0:ea:23:6a:24:89:2f:04:34:e3:93:fb:b3:bf:a4:0f:55:
15:b1:f5:8a:ac:51:e8:e2:4d:65:a0:36:ca:4a:3d:04:cd:0a:
fc:8d:a9:ec:b6:77:43:82:3f:14:2d:f0:58:44:8c:62:01:e9:
f4:51:b4:c5:39:02:dd:21:40:50:91:cb:c0:b8:d9:cc:17:71:
13:42:7d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:41:05 2025 by rpki-client