Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LNerFi7SFhVLKyqZIOephfA1vWU.roa
File: LNerFi7SFhVLKyqZIOephfA1vWU.roa (raw, json)
Hash identifier: 7+XtePub71zTTuehELrYBcOkbiB1BRSWgFUSiV1v3S0=
Subject key identifier: 2C:D7:AB:16:2E:D2:16:15:4B:2B:2A:99:20:E7:A9:85:F0:35:BD:65
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0BC640AE600EAF992FBB859E5EC49D2D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LNerFi7SFhVLKyqZIOephfA1vWU.roa
Signing time: Sat 07 Oct 2023 20:13:43 +0000
ROA not before: Sat 07 Oct 2023 20:13:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0b:c6:40:ae:60:0e:af:99:2f:bb:85:9e:5e:c4:9d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 7 20:13:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cd7ab162ed216154b2b2a9920e7a985f035bd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:21:d6:56:ff:e0:a5:45:7e:fc:b9:75:2f:
58:80:0f:88:53:04:7f:bf:e6:ab:3d:15:a7:de:28:
ea:ac:db:03:97:ca:d7:ab:d2:62:ed:53:64:ed:6a:
42:57:e7:76:e2:a6:c5:7c:bc:c1:5e:ea:8f:2b:27:
3b:55:59:a3:f2:1f:69:8c:af:18:58:5d:07:19:8d:
4f:ac:7f:a2:d8:40:45:b2:7a:96:c5:26:80:a9:12:
d0:8a:84:d6:bf:1d:bc:a3:5b:37:e6:0b:d8:69:ea:
71:dc:12:e1:6b:b1:24:b9:7a:1e:5b:85:5d:9a:48:
d5:d5:d7:03:1d:dd:fa:28:4e:01:e7:f0:1c:68:ef:
af:ed:41:35:d8:21:4c:01:e3:7f:c5:b9:65:71:50:
25:6c:33:7d:d7:4e:63:d0:6f:2b:7e:cf:b2:da:77:
e2:93:82:20:8a:15:c4:8f:e5:17:e7:07:9d:e1:98:
77:c9:bf:61:d9:81:da:52:0d:31:14:77:2d:32:8b:
ff:72:32:df:91:54:bb:c4:78:49:c9:b7:4b:9d:9f:
8c:d4:42:df:bd:18:b9:e5:5c:27:9a:4e:9b:d4:3c:
07:c5:44:c1:33:9d:0c:d0:59:26:32:ca:c6:26:80:
b1:c1:7f:f4:23:00:05:19:ae:29:04:4b:58:ce:29:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D7:AB:16:2E:D2:16:15:4B:2B:2A:99:20:E7:A9:85:F0:35:BD:65
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LNerFi7SFhVLKyqZIOephfA1vWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:29:fe:ca:7b:a9:d3:73:c0:f1:0e:24:b7:f0:67:82:f0:e4:
b5:22:ec:c1:79:e0:17:c2:39:e9:8b:c4:7a:4f:52:e7:2d:d6:
9a:1e:b2:38:cd:8b:f4:d7:ef:1d:a6:39:48:4c:be:63:04:61:
54:24:8f:45:61:46:c0:37:cd:fc:90:fc:1b:1d:5c:fe:d2:b7:
ac:3d:95:b4:89:93:17:ba:52:fe:76:a9:7d:1e:f1:3c:73:83:
f7:0c:38:8e:c2:43:e8:6c:25:44:ef:1c:38:ba:fa:30:0e:bb:
d3:90:7a:f8:ce:24:65:9b:eb:66:13:83:0b:bd:86:57:7b:d6:
90:4c:5b:35:6b:c0:78:60:47:81:8e:28:27:3e:51:22:44:b0:
a6:0d:5b:91:f6:7e:ce:ad:97:ff:da:a6:f2:02:89:76:92:49:
9c:5a:54:c2:90:83:64:bf:7e:10:3a:35:e1:3a:3c:f6:73:87:
0b:61:c3:3c:85:e7:09:e8:64:dc:0a:76:1b:b2:17:c4:db:6a:
ff:fe:14:ff:1d:71:07:eb:64:40:05:35:92:b3:1b:96:a8:d9:
83:7e:07:24:af:5d:a4:35:14:63:de:17:1f:c4:d0:12:b9:07:
c8:92:5e:57:4c:f5:51:1e:95:28:54:26:07:f5:17:f1:d7:73:
0e:8e:74:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:51:40 2025 by rpki-client