Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LO39-LPu4iNVzXFZMsWmlsf1Ng0.roa
File: LO39-LPu4iNVzXFZMsWmlsf1Ng0.roa (raw, json)
Hash identifier: JQBQ8UHG7kKK1ofhw31i1iCFWw1bB1tt/FKFk1wG68I=
Subject key identifier: 2C:ED:FD:F8:B3:EE:E2:23:55:CD:71:59:32:C5:A6:96:C7:F5:36:0D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCDF4D852328666935736AABF62F297CB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LO39-LPu4iNVzXFZMsWmlsf1Ng0.roa
Signing time: Tue 14 Nov 2023 13:10:57 +0000
ROA not before: Tue 14 Nov 2023 13:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:f4:d8:52:32:86:66:93:57:36:aa:bf:62:f2:97:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 13:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cedfdf8b3eee22355cd715932c5a696c7f5360d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:94:9c:f6:0e:1e:19:63:60:72:3d:7a:08:b4:
c9:05:3c:0e:e3:5c:c1:1e:91:ae:06:21:d8:da:c0:
ef:d1:c7:96:ca:e0:2d:04:11:91:4d:f7:d2:4d:6d:
2a:29:c9:3c:6b:9d:90:ce:bb:fa:1d:47:1d:58:ff:
b4:1f:24:2e:54:d4:d8:8f:6f:5b:c3:89:ca:54:56:
d5:62:b0:fb:29:e5:f5:6d:5f:e9:28:e2:e7:32:0d:
02:4a:31:74:c6:ee:0e:09:a3:d1:d4:fa:42:ef:ee:
e0:34:a6:8a:96:c8:40:27:04:b0:f8:e4:76:89:3d:
3a:ec:df:0a:12:60:e5:83:0f:a1:a3:1b:68:7f:0a:
31:22:65:cc:aa:bb:96:6d:eb:57:ad:65:ad:c1:67:
eb:f4:b9:94:c6:61:82:45:64:7f:1d:c8:c9:98:09:
12:19:72:bb:ee:40:1b:fb:06:7d:18:6b:f7:78:cf:
9c:74:0c:50:3f:d0:4d:a3:a2:ce:84:7b:e9:f3:f7:
a6:fd:d7:dd:be:34:bc:2d:20:91:05:a8:4b:fc:45:
58:0d:85:f8:cc:ec:8e:7b:e6:11:e9:c2:37:ec:2f:
08:d0:3f:b1:c3:6f:29:1d:59:23:3d:2e:a0:4d:41:
a2:10:75:a7:e6:b9:19:67:81:04:ec:0b:e9:6b:d9:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:ED:FD:F8:B3:EE:E2:23:55:CD:71:59:32:C5:A6:96:C7:F5:36:0D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LO39-LPu4iNVzXFZMsWmlsf1Ng0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c0:2c:d9:05:94:7d:ff:ec:19:89:22:76:7a:11:4c:e4:b7:a4:
cd:e2:a3:01:f0:c1:27:ef:d5:e8:33:5f:6c:3a:4d:77:89:74:
0b:9c:e6:9a:99:d1:43:4d:30:eb:d1:c1:bc:98:1c:89:c6:b3:
e8:db:e9:fd:71:59:b2:a1:91:c5:6d:5f:5f:a2:e2:c7:49:ef:
66:a5:32:e2:69:55:3d:c6:ee:c9:6c:f9:b2:7e:ad:05:d7:f0:
aa:d7:94:49:30:98:68:d1:bb:6e:61:9d:1d:ff:20:56:58:9e:
eb:d8:53:b6:7b:29:ad:59:9e:3d:07:f0:06:a3:89:04:8c:93:
01:f4:ef:64:a0:15:47:f5:54:94:4e:3a:2d:11:a9:8c:60:ce:
60:8d:26:9e:94:8f:59:a6:1d:f3:bb:67:38:df:cb:68:9d:0d:
51:31:a0:a0:b2:2a:80:e1:31:08:37:44:cd:e2:6b:ca:7c:02:
61:e2:b5:44:90:bc:eb:1b:42:17:6a:f9:0d:e4:d9:d5:50:89:
4e:7a:28:4c:e1:28:9f:ad:3c:85:58:21:f9:8e:47:2c:04:88:
26:8f:e4:da:ac:72:e2:12:d8:51:0b:6b:6e:ea:83:de:b4:a2:
fb:eb:25:d4:8c:fc:30:50:d7:38:30:97:09:1a:6a:c4:2d:54:
5d:ca:3d:2b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvN9NhSMoZmk1c2qr9i8pfLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE0MTMxMDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2VkZmRmOGIzZWVlMjIzNTVjZDcxNTkzMmM1YTY5NmM3ZjUzNjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpSc9g4eGWNgcj16CLTJBTwO41zB
HpGuBiHY2sDv0ceWyuAtBBGRTffSTW0qKck8a52Qzrv6HUcdWP+0HyQuVNTYj29b
w4nKVFbVYrD7KeX1bV/pKOLnMg0CSjF0xu4OCaPR1PpC7+7gNKaKlshAJwSw+OR2
iT067N8KEmDlgw+hoxtofwoxImXMqruWbetXrWWtwWfr9LmUxmGCRWR/HcjJmAkS
GXK77kAb+wZ9GGv3eM+cdAxQP9BNo6LOhHvp8/em/dfdvjS8LSCRBahL/EVYDYX4
zOyOe+YR6cI37C8I0D+xw28pHVkjPS6gTUGiEHWn5rkZZ4EE7Avpa9l6HwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCzt/fiz7uIjVc1xWTLFppbH9TYNMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvTE8zOS1MUHU0aU5WelhGWk1zV21sc2YxTmcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMAs2QWUff/sGYkidnoR
TOS3pM3iowHwwSfv1egzX2w6TXeJdAuc5pqZ0UNNMOvRwbyYHInGs+jb6f1xWbKh
kcVtX1+i4sdJ72alMuJpVT3G7sls+bJ+rQXX8KrXlEkwmGjRu25hnR3/IFZYnuvY
U7Z7Ka1Znj0H8AajiQSMkwH072SgFUf1VJROOi0RqYxgzmCNJp6Uj1mmHfO7Zzjf
y2idDVExoKCyKoDhMQg3RM3ia8p8AmHitUSQvOsbQhdq+Q3k2dVQiU56KEzhKJ+t
PIVYIfmORywEiCaP5NqscuIS2FELa27qg960ovvrJdSM/DBQ1zgwlwkaasQtVF3K
PSs=
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:53 2025 by rpki-client