Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LqZNm3xps5NReFpsrfon2NRaolA.roa
File: LqZNm3xps5NReFpsrfon2NRaolA.roa (raw, json)
Hash identifier: DgdFkw8szz6MOwTa0Iis6QefaUVcdANqP6IvZ/wld1Y=
Subject key identifier: 2E:A6:4D:9B:7C:69:B3:93:51:78:5A:6C:AD:FA:27:D8:D4:5A:A2:50
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B91E4D9FE578BE70D743E1D7DBA094180
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LqZNm3xps5NReFpsrfon2NRaolA.roa
Signing time: Thu 02 Nov 2023 21:16:16 +0000
ROA not before: Thu 02 Nov 2023 21:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:91:e4:d9:fe:57:8b:e7:0d:74:3e:1d:7d:ba:09:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 21:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ea64d9b7c69b39351785a6cadfa27d8d45aa250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ef:9d:65:09:0a:bb:b6:40:5b:f2:01:d5:c8:
c1:a6:1c:81:fe:de:01:4b:93:f9:bc:3d:0a:56:50:
8d:a7:c6:c5:8a:36:9f:a0:36:13:87:3e:a5:dc:13:
75:13:ab:34:6b:d6:04:fb:70:a9:11:d4:be:0a:40:
98:26:6f:47:b1:9b:b5:ae:cd:7f:c1:58:cf:4b:48:
60:ba:a3:88:0d:e7:5f:87:bd:35:0e:64:f3:a9:4a:
48:47:c7:1e:cf:17:b5:4f:51:18:1c:ca:ae:b1:76:
e2:63:ca:0e:76:98:03:63:56:b6:79:24:27:5a:9e:
c5:15:59:7f:75:0b:7e:88:e0:3b:7b:8b:4b:e1:6c:
e0:db:c1:c4:e3:8e:00:61:38:22:1f:29:38:54:45:
2a:6f:0d:1b:3e:a1:be:a2:4e:0f:b0:40:e3:33:30:
e8:84:dc:89:ae:6d:ad:ec:fb:91:40:02:c9:fe:fc:
a9:c0:00:a2:ee:9f:27:24:88:8b:df:3a:65:8b:ec:
fb:49:fc:11:5c:df:d9:dd:8f:4c:e1:59:b9:fd:19:
16:1a:64:54:86:d3:e9:4d:27:a4:cf:d2:27:6f:4d:
91:ea:27:48:a1:a5:3e:b4:be:1f:6c:4d:d8:c1:45:
fb:eb:c1:b5:96:8e:ec:b9:6c:ee:35:51:bf:73:fb:
99:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A6:4D:9B:7C:69:B3:93:51:78:5A:6C:AD:FA:27:D8:D4:5A:A2:50
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LqZNm3xps5NReFpsrfon2NRaolA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:75:06:85:55:60:5c:e6:57:b0:97:b8:cc:c1:53:62:b4:71:
ca:33:3c:ea:14:87:90:24:16:a6:b6:2f:c9:7f:1b:48:55:e2:
56:1e:01:73:25:ad:25:08:c1:75:7a:17:1e:03:e9:fe:66:50:
e9:fc:10:8a:c8:aa:96:21:b4:3e:59:3d:3f:24:a5:27:34:f4:
00:12:3d:a3:0e:d6:36:49:1e:e6:26:81:3f:ff:43:3f:4b:4a:
3f:0a:7d:7d:90:e5:16:82:7d:6e:08:4d:f6:d1:00:bd:c4:cd:
a6:a6:4a:c9:a4:ce:88:d0:15:3d:71:56:d9:12:7b:e9:7d:73:
90:aa:f8:c3:5e:f3:51:e8:4c:f8:cf:da:8b:ad:12:5f:ef:3c:
a2:54:d1:3e:8b:42:73:28:79:0a:a3:f9:0a:8c:18:76:8e:94:
88:c2:da:1d:aa:67:64:34:c9:64:bc:65:a3:16:eb:bc:70:46:
6f:17:c7:51:4a:8f:60:6a:c3:30:4d:b2:b8:9a:8e:71:35:90:
49:be:32:86:06:55:bf:41:06:9b:74:fc:f1:c5:dc:58:0d:f9:
58:d1:1c:f3:b5:4f:d0:9e:4c:4b:e8:89:33:ea:fa:68:97:3d:
e2:50:15:9b:7b:66:8d:47:a0:95:04:48:6e:8f:eb:30:e7:48:
2d:af:7c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:01:44 2025 by rpki-client