Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LEW8pBoahjZoqhseY71-9675fhQ.roa
File: LEW8pBoahjZoqhseY71-9675fhQ.roa (raw, json)
Hash identifier: qvAKGZTC+SqzImi0UFSxCFC6SAkaaU6exoU/8U5sF9k=
Subject key identifier: 2C:45:BC:A4:1A:1A:86:36:68:AA:1B:1E:63:BD:7E:F7:AE:F9:7E:14
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADA9EFCE59736E901C3338927FECF6996
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LEW8pBoahjZoqhseY71-9675fhQ.roa
Signing time: Thu 28 Sep 2023 07:09:27 +0000
ROA not before: Thu 28 Sep 2023 07:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:da:9e:fc:e5:97:36:e9:01:c3:33:89:27:fe:cf:69:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 07:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c45bca41a1a863668aa1b1e63bd7ef7aef97e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4a:f7:03:a3:c5:a8:bb:9d:88:90:6c:be:3b:
b0:17:72:70:f3:24:d1:ff:49:69:0b:57:df:ba:a2:
3e:03:79:97:27:82:29:f0:c0:e1:5b:49:19:66:76:
ba:09:fd:ce:1a:d1:77:bd:f5:68:49:db:64:a1:42:
af:70:7b:38:05:9a:53:1e:1e:78:a5:d8:c9:1c:40:
34:8c:ad:9a:ea:51:0c:c8:4c:97:33:15:78:e5:49:
51:ff:2c:00:e8:dd:06:cf:1f:cc:01:7b:8b:49:af:
ea:e2:2e:54:1e:83:a3:20:d3:85:90:c2:60:4d:6a:
75:ad:f9:b8:ff:cd:aa:01:38:ec:81:6c:02:54:c1:
fc:f0:78:dc:ec:d1:3d:54:79:32:21:be:37:f6:1b:
1a:a1:db:da:28:98:52:b7:68:57:45:c2:8f:6f:cc:
0d:53:49:c6:27:69:ad:3b:18:b7:e4:e7:e5:a5:56:
68:7f:18:54:bd:72:aa:c7:b7:05:59:a8:b1:92:88:
39:04:b8:a2:24:07:2a:d3:e5:ac:a0:5f:4f:44:aa:
7d:9a:4c:96:c9:8c:dd:27:08:df:fe:89:51:f2:3a:
c7:92:1d:1e:26:14:0a:9c:ee:d0:00:21:0d:17:af:
a9:1c:7e:4e:0a:1a:12:5d:bd:fe:a6:1d:4e:62:d9:
30:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:45:BC:A4:1A:1A:86:36:68:AA:1B:1E:63:BD:7E:F7:AE:F9:7E:14
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LEW8pBoahjZoqhseY71-9675fhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:68:ad:03:23:73:eb:1e:be:42:27:63:83:24:08:de:3e:df:
3f:4c:c4:f4:b3:b8:ba:bc:43:8a:19:50:e4:29:5a:99:a6:01:
12:be:fa:61:6f:12:0c:d8:cd:34:aa:31:79:52:a9:7e:9e:78:
35:74:e3:80:07:75:40:e0:7e:41:e8:fa:de:26:08:66:b9:8d:
f5:ba:40:5d:9b:58:a0:d7:30:52:91:76:be:30:6a:e5:38:8a:
cb:56:9f:92:7a:ba:32:f7:62:46:f0:af:52:4a:77:a5:a3:b1:
48:bd:de:d4:aa:98:01:8f:5e:2e:3a:20:42:cb:0f:0d:3e:c0:
65:d4:a6:4f:ed:f9:03:9d:ea:45:85:b1:5c:5f:e5:be:16:7c:
67:0e:35:b9:58:ef:4c:90:f8:6e:5d:28:4f:c2:bf:5f:16:cb:
70:05:2e:cf:fc:81:7c:b4:1b:f9:fe:46:c2:69:dc:0b:20:6d:
78:bc:eb:a4:1a:8c:3a:ca:54:0c:5c:58:bb:be:90:8c:8a:2d:
88:ad:f3:17:17:d1:f4:b2:f6:7c:20:29:4a:d7:3a:5f:ba:9d:
3c:20:10:13:52:a2:ef:80:04:6e:50:2b:e6:04:65:60:62:e2:
df:5e:83:c8:62:96:7d:6e:a3:d1:bc:26:e3:62:7d:7e:32:f5:
11:a2:37:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:24 2025 by rpki-client