Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Lg2ZSuNFKihsVRumjN-lxXgeWHQ.roa
File: Lg2ZSuNFKihsVRumjN-lxXgeWHQ.roa (raw, json)
Hash identifier: W5PW591qNht/jIXTKa73I30Y14dlA2zYqfqnNTlj9M0=
Subject key identifier: 2E:0D:99:4A:E3:45:2A:28:6C:55:1B:A6:8C:DF:A5:C5:78:1E:58:74
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC29A76073961C58C8F6114FE1388F628
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Lg2ZSuNFKihsVRumjN-lxXgeWHQ.roa
Signing time: Sat 23 Sep 2023 15:13:37 +0000
ROA not before: Sat 23 Sep 2023 15:13:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c2:9a:76:07:39:61:c5:8c:8f:61:14:fe:13:88:f6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 15:13:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e0d994ae3452a286c551ba68cdfa5c5781e5874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a5:69:48:8c:f9:e5:02:d2:28:4c:12:13:dd:
83:e0:76:a8:0f:8f:02:37:eb:05:1b:a7:5c:02:52:
f0:82:1f:58:73:72:22:eb:a7:fd:76:3c:06:13:e7:
98:aa:1b:95:51:fe:9d:10:96:b5:7b:5e:18:54:14:
c0:da:63:26:46:d4:50:cb:da:fa:5f:82:1f:d3:1b:
47:d1:ef:7e:4f:4f:b0:90:d2:60:4b:00:c4:d4:4c:
40:29:dd:12:c1:03:04:e1:be:87:55:5d:53:46:bf:
90:4d:90:a6:d3:3e:20:42:1d:f9:8e:4e:9a:3d:02:
15:e2:b9:ec:c1:46:c8:4c:e4:09:7d:38:77:f7:b1:
32:79:4f:08:68:70:f9:bb:c3:17:1d:19:10:5a:33:
4d:c2:c6:3b:8c:66:2a:95:ad:f6:ff:14:f5:bf:d4:
40:cb:9d:8a:cb:d4:9f:15:f3:2c:b8:ad:9a:e6:39:
c8:29:08:28:4a:72:bf:3a:b7:55:e8:d4:dc:b7:49:
f7:be:98:e7:55:54:8d:73:f5:e9:97:5e:1a:44:43:
bf:0b:8d:59:58:32:90:81:25:6f:8a:0e:93:59:56:
a5:a5:b6:07:90:9c:f8:d7:63:f2:8b:e8:d5:bb:25:
15:aa:12:33:76:ed:b0:9d:ff:dc:9c:57:0e:26:77:
c5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0D:99:4A:E3:45:2A:28:6C:55:1B:A6:8C:DF:A5:C5:78:1E:58:74
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Lg2ZSuNFKihsVRumjN-lxXgeWHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:b4:61:f6:5d:1a:b0:be:9b:b9:54:e4:e8:73:e0:20:64:c1:
e4:8d:82:e3:51:ea:b2:81:39:7b:90:cf:94:8d:7e:a1:c6:de:
fd:b7:e8:e8:e2:69:81:54:f1:a5:35:28:57:34:3f:3f:77:c6:
09:f3:53:78:95:28:e5:f5:26:34:2a:36:8d:92:d0:ae:81:97:
cf:eb:f8:c1:0f:cb:f4:80:11:2d:4e:71:d9:78:1a:69:8d:a1:
d0:a1:e5:c4:6c:fe:af:b7:9c:e8:a6:a9:ff:3c:00:87:a7:13:
0f:9f:83:37:54:65:39:56:99:78:f7:af:ff:53:01:0d:ee:61:
57:e5:0f:eb:55:9f:ea:cb:af:20:b9:c8:7c:a0:04:61:d2:fd:
ff:9f:78:1b:2f:4b:2f:49:19:3d:25:27:8a:2b:10:26:f4:42:
eb:71:27:3c:ae:25:f5:67:ee:42:9e:6b:c0:38:da:f9:7d:aa:
4b:a9:60:0a:fb:45:82:7a:bd:dd:c8:54:71:61:03:ce:d9:53:
bf:98:2b:37:81:55:f2:9b:10:2a:76:7e:31:31:96:1b:0a:ba:
b6:63:b9:58:a5:76:ba:ee:a0:51:dd:56:f3:a8:00:d5:46:3b:
16:05:25:fd:ee:15:57:71:94:1a:2e:f7:69:be:8c:af:19:f7:
a5:15:5b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:07:27 2025 by rpki-client