Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ln-U4yqTlacsS51YBHrLMiIjFQI.roa
File: Ln-U4yqTlacsS51YBHrLMiIjFQI.roa (raw, json)
Hash identifier: OMmY7NFaxSjaMy9LivzXI4EX0YU6PlUfKJ5jONyyFq4=
Subject key identifier: 2E:7F:94:E3:2A:93:95:A7:2C:4B:9D:58:04:7A:CB:32:22:23:15:02
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B894F9579184E2BD70515BF64B3ED4FD2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ln-U4yqTlacsS51YBHrLMiIjFQI.roa
Signing time: Wed 01 Nov 2023 05:16:16 +0000
ROA not before: Wed 01 Nov 2023 05:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:4f:95:79:18:4e:2b:d7:05:15:bf:64:b3:ed:4f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 1 05:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e7f94e32a9395a72c4b9d58047acb3222231502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:63:25:98:0e:67:99:e1:b8:05:12:b2:b9:fe:
19:ea:42:d2:7c:3f:cc:30:bf:ab:09:96:f3:43:7c:
e0:91:69:9d:30:f9:c6:d9:da:95:68:7c:27:25:de:
84:e7:65:33:85:60:d2:bf:b0:7c:f8:25:f4:ef:32:
55:d8:ca:87:db:7a:ee:2c:46:65:c1:e4:81:3a:bf:
48:76:11:41:e7:45:20:de:40:39:33:9c:50:6d:bd:
94:0b:aa:6b:32:d3:44:22:6a:31:3f:f5:85:9b:58:
e4:3f:a0:23:2c:ec:60:a6:8a:4f:2d:59:e9:6d:1b:
36:5b:46:00:03:50:85:8a:69:9e:11:db:75:2d:43:
9d:19:7a:f9:5b:9a:8a:cc:db:f9:a5:eb:de:e7:31:
9a:48:9a:ce:6a:7a:e7:04:93:eb:e4:45:ca:c2:96:
85:8f:79:26:f4:84:3d:43:af:46:f9:88:b7:54:6e:
a6:5f:46:f6:40:73:f7:24:9a:1a:7c:b7:a1:19:90:
c3:14:24:44:f9:aa:fe:f6:b4:8a:bd:e2:31:b2:78:
7a:19:2a:b0:66:5e:51:89:41:36:32:48:3d:2d:b9:
db:e3:bc:d7:f9:0b:86:07:a6:d0:3f:c1:33:27:32:
81:e2:66:9e:6f:e7:ed:93:42:d3:4f:2b:0b:3a:f1:
0a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7F:94:E3:2A:93:95:A7:2C:4B:9D:58:04:7A:CB:32:22:23:15:02
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ln-U4yqTlacsS51YBHrLMiIjFQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:4d:c4:f9:92:93:09:16:cc:c9:cd:60:77:0d:a7:07:7b:00:
cf:86:47:01:22:02:ed:a0:23:b5:7f:8a:21:ea:40:75:be:e1:
f4:d0:d2:b5:f8:8f:d3:c4:ea:b2:a7:f0:3e:7c:73:c9:28:19:
92:70:bd:97:cd:ca:c2:fc:e7:13:86:12:af:13:c5:ff:8e:cf:
c7:92:24:54:90:87:a7:56:2d:64:70:e0:be:e2:66:6c:d8:b7:
b5:4c:cc:2a:0d:d8:e3:c5:51:5b:6b:3a:2a:52:e2:12:51:0a:
26:4c:b4:7e:6d:56:2e:d5:bf:9d:ef:35:5d:7b:1c:bc:44:83:
b7:70:13:00:06:d6:aa:48:73:f2:b1:fe:b0:aa:59:5c:bb:7c:
86:9a:77:b2:75:76:68:e8:01:4a:67:f8:1c:5a:91:cd:a8:19:
fc:f4:f3:c6:5f:b1:31:4f:e3:60:14:a0:7f:1b:ff:ca:d4:83:
ea:27:5b:53:81:ac:99:97:ef:21:06:6f:58:a9:17:76:4b:62:
fc:8f:6e:3d:d4:15:0a:19:a6:29:50:f9:aa:61:a4:7d:4f:4a:
1d:f6:26:12:be:06:61:18:14:aa:57:5e:a0:58:51:31:66:5e:
37:84:68:e8:39:59:1c:cd:42:47:c6:0a:c5:ca:69:ee:7f:97:
60:9f:b3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:59:31 2025 by rpki-client