Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LYGPGw4E45g7BjA69mhreIfEZso.roa
File: LYGPGw4E45g7BjA69mhreIfEZso.roa (raw, json)
Hash identifier: CCr9h9dr0/Nivkq4LdfiZODWGSS//yq8O3OiJTBaKxs=
Subject key identifier: 2D:81:8F:1B:0E:04:E3:98:3B:06:30:3A:F6:68:6B:78:87:C4:66:CA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC34102B9FAEA28B0027AA5C4EA907183
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LYGPGw4E45g7BjA69mhreIfEZso.roa
Signing time: Sat 23 Sep 2023 18:15:32 +0000
ROA not before: Sat 23 Sep 2023 18:15:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c3:41:02:b9:fa:ea:28:b0:02:7a:a5:c4:ea:90:71:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 18:15:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d818f1b0e04e3983b06303af6686b7887c466ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:28:43:10:73:4f:fb:c3:be:7c:1c:60:06:75:
38:a0:d8:86:f2:e8:ee:89:16:ec:eb:a3:aa:50:e3:
5d:21:d0:d8:83:e4:27:5d:a2:2e:3a:49:0a:d1:d6:
45:83:ec:df:ef:fc:7b:12:b0:44:ad:ae:85:e7:d9:
d8:5e:2c:14:34:f2:c3:79:a7:b2:23:45:9d:17:61:
4d:dc:9b:58:38:d1:98:5b:5b:56:2e:f7:8a:5d:40:
af:94:c3:5c:83:0a:a3:3c:4b:c7:86:74:ea:5a:a1:
b6:83:b4:48:1c:76:66:27:87:f5:bd:5d:5e:28:bb:
66:75:e6:d9:de:ea:4e:f8:21:2d:25:84:b6:b5:91:
39:f6:27:42:13:34:02:fa:db:e0:38:8c:0d:96:fe:
6f:87:d5:12:c0:99:f3:32:13:3b:83:fb:88:00:33:
69:cf:60:85:91:7a:f2:63:26:eb:50:14:12:99:cc:
5c:fc:fb:e1:93:f4:60:b7:d2:85:c8:cb:cf:7c:07:
5f:f9:2d:a9:aa:87:71:1f:b2:e5:2d:a2:97:f7:07:
b1:08:13:7a:5a:ec:73:bd:27:29:b2:7a:39:b4:00:
a8:31:28:09:83:8a:03:ec:41:cd:84:7d:0e:c6:6d:
cb:7d:5a:6e:80:f3:3d:26:f8:fd:9c:cd:47:85:27:
7b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:81:8F:1B:0E:04:E3:98:3B:06:30:3A:F6:68:6B:78:87:C4:66:CA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LYGPGw4E45g7BjA69mhreIfEZso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c3:57:aa:57:6d:78:95:e3:1d:4c:c8:c3:f2:31:33:91:3b:5d:
b4:7d:36:17:66:97:20:e6:a6:78:15:fd:13:f6:3a:3b:d3:b5:
76:5a:a7:4b:1e:9d:c1:6a:64:4c:50:a5:77:44:ff:81:e7:7b:
23:fb:98:9a:49:12:aa:2e:06:b9:13:ff:9e:5f:f9:7f:7b:26:
d1:50:0c:e8:ca:91:b7:93:61:c2:68:ef:ef:76:de:0c:94:d1:
cf:22:a4:54:66:65:26:96:bb:33:b6:48:47:2b:ea:e8:8b:8c:
79:f5:22:a1:b5:ae:3f:32:05:46:73:63:46:49:f4:41:83:fe:
a0:90:1b:06:74:48:bc:b5:a6:10:e9:26:60:c4:40:71:4e:95:
18:81:e5:24:fc:13:5e:aa:13:00:31:66:37:51:d6:4a:ba:20:
25:35:b4:14:ad:b7:5c:53:16:55:9b:f5:3d:20:e9:0b:8f:09:
70:77:06:a6:44:e2:07:c2:8f:f0:64:83:81:a5:38:8f:87:6f:
6d:17:25:40:b0:9c:75:56:c1:ae:ba:c6:eb:6d:a7:13:18:04:
bd:e5:47:d7:9e:9b:1e:4e:97:72:42:4a:3c:dd:af:ec:9d:ec:
4f:e4:59:09:3a:36:4b:9b:d6:8a:0c:6c:c0:c6:d6:70:ca:1b:
f0:8d:5a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:19:04 2025 by rpki-client