Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LSUTULcW98DSnMVGHVO3WsztAJ8.roa
File: LSUTULcW98DSnMVGHVO3WsztAJ8.roa (raw, json)
Hash identifier: 5ojuqjS9yAX/UFIBJWcx6Jjj4W6t0DPNyU6ITHiWFVw=
Subject key identifier: 2D:25:13:50:B7:16:F7:C0:D2:9C:C5:46:1D:53:B7:5A:CC:ED:00:9F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD767EE72FC74B7EE321C69193DFE4908
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LSUTULcW98DSnMVGHVO3WsztAJ8.roa
Signing time: Wed 27 Sep 2023 16:10:27 +0000
ROA not before: Wed 27 Sep 2023 16:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d7:67:ee:72:fc:74:b7:ee:32:1c:69:19:3d:fe:49:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 16:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d251350b716f7c0d29cc5461d53b75acced009f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:de:1f:5a:83:68:56:8a:9c:74:07:3c:1e:0c:
0d:3f:34:14:dd:de:6f:da:ee:d3:cc:7e:e0:db:7a:
12:38:23:5e:c6:cc:8b:06:a4:90:c7:f5:a0:e5:30:
34:bf:48:4e:6d:72:91:db:9b:02:85:63:58:b8:77:
c3:3d:ae:80:db:4e:7d:93:68:69:f0:43:f1:0d:54:
d1:b1:92:1b:75:3e:a9:53:c8:fc:a6:0a:5e:d1:b9:
29:cc:e3:48:b5:dc:d9:f0:bb:a8:56:f0:5c:c9:fa:
a8:66:9d:29:c7:a0:89:0b:22:d8:d4:f5:01:69:ae:
0a:b6:5a:55:05:5f:83:ad:a3:49:3d:8f:2d:d2:f8:
16:d2:88:20:9c:b2:88:f4:69:e6:1a:e3:a5:c6:1d:
28:92:18:e3:c7:ac:43:c7:00:91:cf:73:35:28:7d:
36:44:df:00:2c:8d:e7:6a:08:01:fc:8b:4d:e6:9c:
66:3f:ef:f9:4d:85:14:2e:09:76:35:14:ab:c9:9a:
ad:f2:7b:af:ab:81:3a:1f:11:a8:c5:f5:b6:99:8b:
21:e3:c1:92:4a:a8:1a:b7:7a:f0:90:b0:23:92:63:
45:d3:44:0e:b2:cb:52:13:b8:36:2b:d6:39:9f:39:
51:5c:e5:ce:38:40:ff:30:d8:6c:6e:71:03:13:70:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:25:13:50:B7:16:F7:C0:D2:9C:C5:46:1D:53:B7:5A:CC:ED:00:9F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LSUTULcW98DSnMVGHVO3WsztAJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:ff:53:30:bf:a1:df:7f:8a:40:e9:76:3e:df:6d:e2:0b:02:
06:5b:2e:cb:8a:4e:70:09:44:82:55:5f:48:83:b3:c3:80:94:
8e:5d:2d:b3:8f:5d:c6:f5:f0:b2:95:ec:00:2c:dc:c7:20:9e:
e3:35:25:b6:11:0d:09:bc:e1:63:21:04:21:84:7d:4f:b1:78:
f0:57:cb:4a:1f:eb:a9:8e:ea:6e:23:40:b5:01:b6:12:9f:2f:
75:75:c6:14:55:db:7e:5d:2f:9b:d3:7a:04:bf:f8:5b:4b:af:
ff:e1:f0:02:87:d6:65:c9:0e:3c:5e:e2:b6:8a:c8:18:62:13:
68:95:e4:20:df:ef:92:f0:b7:4b:ba:86:18:23:64:c8:d1:74:
a4:0e:77:7e:38:37:9b:ac:ce:49:58:17:1c:56:95:90:fb:0e:
6b:c6:4e:b1:d7:f0:e7:f5:e7:7f:33:ca:4a:f2:c0:67:8a:8f:
36:a8:83:00:05:ee:3c:56:a2:0c:a7:3b:68:d5:f7:53:6a:01:
07:7b:5d:bd:7c:7c:92:03:7f:b8:80:e3:03:f7:af:72:03:3b:
59:05:d5:7e:4c:c0:de:75:da:9a:30:36:5d:4d:8e:b2:35:c5:
af:36:4e:be:fb:be:77:88:95:d5:9e:3c:5b:04:5c:1d:07:bc:
37:4c:97:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:54:53 2025 by rpki-client