Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Lh_5h_qMM91D1xF2BqkC1k2gD2s.roa
File: Lh_5h_qMM91D1xF2BqkC1k2gD2s.roa (raw, json)
Hash identifier: s4B0L1/kwfx6USeD8V61cXdglS+JZC13fwDS5C/TykQ=
Subject key identifier: 2E:1F:F9:87:FA:8C:33:DD:43:D7:11:76:06:A9:02:D6:4D:A0:0F:6B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2BBD6AFE8880AC3D9290FD9CF14CE843
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Lh_5h_qMM91D1xF2BqkC1k2gD2s.roa
Signing time: Sat 14 Oct 2023 01:11:55 +0000
ROA not before: Sat 14 Oct 2023 01:11:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2b:bd:6a:fe:88:80:ac:3d:92:90:fd:9c:f1:4c:e8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 01:11:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e1ff987fa8c33dd43d7117606a902d64da00f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:ce:19:d5:3d:e6:02:7a:13:1c:75:00:8f:
57:e7:23:d3:42:eb:2f:41:6b:d0:13:c9:05:9e:a9:
94:ac:76:f0:3e:4d:ff:76:34:17:42:37:57:67:4a:
d9:de:e1:66:8a:a9:48:49:32:10:b2:8b:3b:12:c0:
51:58:be:95:47:e0:a4:38:44:7a:7d:83:8a:3a:51:
51:0e:05:88:13:39:27:49:b1:6b:43:c1:c2:42:ba:
a8:5e:98:9d:0b:ce:ff:ac:c7:c6:7d:d8:21:71:81:
0f:af:43:e6:0f:5d:7a:e4:4e:cb:d0:e6:bd:1d:5b:
f9:fc:30:e9:80:70:53:50:03:ef:fa:4b:fc:e0:0f:
71:b0:0b:60:e1:51:98:09:6b:de:6f:55:a4:97:ea:
11:db:d0:69:7e:31:b5:c1:24:84:92:74:e5:6c:bd:
84:0c:a3:9d:ee:bf:82:ac:b9:d3:1c:ee:78:f4:d7:
4c:4f:7b:b3:84:d2:5f:7f:bf:30:1e:1e:fb:f3:86:
c2:6e:ae:2c:15:f9:b2:6b:d6:8c:fa:2d:65:cb:6e:
a2:a2:e6:55:54:0c:de:79:02:3c:06:0e:0b:8d:b1:
9a:f4:74:b4:72:db:bb:c2:14:78:e8:14:de:b2:0d:
91:1e:43:7a:4e:8e:e7:db:df:cd:1a:3a:bd:5d:63:
43:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1F:F9:87:FA:8C:33:DD:43:D7:11:76:06:A9:02:D6:4D:A0:0F:6B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Lh_5h_qMM91D1xF2BqkC1k2gD2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cb:74:c3:76:bc:94:62:ae:1b:fb:6d:29:d6:3c:f8:2f:8b:5d:
dc:cc:12:53:de:d5:e1:91:76:71:3b:f9:dc:e2:fd:7a:8b:60:
ea:c6:bb:ee:f8:34:a8:2e:b9:7e:25:92:8e:1a:e5:c6:19:8c:
cc:f3:13:f8:25:68:84:08:88:cb:b2:9f:87:8c:9a:41:da:ff:
d7:8d:13:33:b4:40:8c:40:6a:4a:d8:60:ff:86:da:20:4f:29:
21:89:95:00:15:71:05:5e:85:3f:ce:0a:4a:e1:1f:44:63:d9:
04:2f:83:91:12:fa:bb:aa:21:cc:03:b6:9a:57:46:63:c2:32:
60:a5:c2:f6:6a:ec:dc:e1:f4:a4:8d:c1:d5:fc:aa:b2:d8:b0:
37:bc:28:d9:cc:fe:d0:d1:f8:e2:a7:bd:28:e5:db:8d:35:91:
48:da:95:a1:24:a1:96:c4:51:21:08:21:59:72:99:3b:4f:e5:
a0:35:7e:f1:f9:d4:7f:de:3f:07:d1:d3:2e:a8:ef:ff:27:5f:
d1:bb:85:73:7b:8f:56:41:69:93:65:78:df:8b:1d:2d:1d:04:
45:81:65:68:0e:ce:97:1c:01:6e:f7:9b:4c:d1:64:1b:80:13:
7c:05:1d:5c:04:c7:5e:52:f9:af:2d:5b:37:aa:80:fd:8f:bd:
83:ca:0e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:12:49 2025 by rpki-client