Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LwjO8vtrQO0WlOgaBO8QGIJAFR0.roa
File: LwjO8vtrQO0WlOgaBO8QGIJAFR0.roa (raw, json)
Hash identifier: hj1PsoZJaoR7LSGlR2fIAr5siuK8WtFHRsJDwYQqrfE=
Subject key identifier: 2F:08:CE:F2:FB:6B:40:ED:16:94:E8:1A:04:EF:10:18:82:40:15:1D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B34C34B9486EA496144DF73559C9CF84A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LwjO8vtrQO0WlOgaBO8QGIJAFR0.roa
Signing time: Sun 15 Oct 2023 19:14:55 +0000
ROA not before: Sun 15 Oct 2023 19:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:34:c3:4b:94:86:ea:49:61:44:df:73:55:9c:9c:f8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 15 19:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f08cef2fb6b40ed1694e81a04ef10188240151d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:3b:d1:2c:38:b6:1e:23:86:c9:06:56:1d:
d0:65:16:ca:56:c3:d2:ac:71:e1:dc:c6:a0:d5:78:
7a:9e:0b:e7:11:ca:0a:02:04:de:09:53:4b:cc:e5:
e1:e7:ab:1e:97:64:3e:42:7f:25:17:7c:40:f3:13:
fe:28:ac:b3:f6:2a:e1:43:b2:01:72:ba:c9:4c:d3:
af:21:65:51:a8:ea:2a:ce:f7:28:bf:5a:31:96:cf:
55:a1:fb:0d:00:74:f7:dd:d2:dd:de:95:45:d0:7d:
2b:b9:ba:e2:b3:2e:52:9d:ec:0b:aa:38:32:d0:45:
a9:04:ea:f0:c7:35:74:b8:ce:96:6e:34:ca:4b:11:
00:97:89:9b:03:46:44:99:00:e0:70:b8:34:85:4b:
ad:f3:19:a5:74:e2:0b:c7:10:bd:c4:96:06:a6:b2:
a0:93:1b:81:47:0e:46:fd:e2:46:af:98:30:9c:6c:
4c:45:e0:e9:cf:57:1a:21:6d:7f:cd:3f:4f:84:38:
73:0c:e7:df:3f:05:6a:8d:7f:95:20:92:c5:2c:7d:
7f:e1:cf:c6:5d:67:88:d4:73:20:f5:f3:a5:e5:37:
aa:45:2c:ea:b0:57:39:0a:13:c0:12:1e:a5:ec:5f:
64:44:87:5b:59:02:07:7a:8a:78:43:ac:f1:58:28:
24:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:08:CE:F2:FB:6B:40:ED:16:94:E8:1A:04:EF:10:18:82:40:15:1D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LwjO8vtrQO0WlOgaBO8QGIJAFR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:c6:92:1f:d0:7d:23:44:3e:8b:7c:20:ce:0a:2e:30:61:2d:
f9:d3:bc:78:12:13:ff:9c:11:48:1e:dd:d2:4c:81:e2:9c:97:
19:0b:0b:c5:07:a3:8c:35:0f:f6:1b:fd:a8:01:ff:1a:49:23:
34:e1:6a:1f:35:ad:3a:74:ca:10:06:c6:70:29:bc:87:9c:77:
c8:0f:66:a3:ae:74:a8:d2:a1:c9:20:c3:b7:7e:20:b0:68:8c:
b1:9c:07:e2:2a:c5:d3:a0:16:84:39:0a:98:f8:0c:36:b2:3e:
52:49:09:84:35:8e:49:b6:7b:f9:4a:be:1f:1b:09:34:de:c8:
a1:4a:c2:aa:43:b9:39:e0:6e:9c:ac:48:8a:7a:7d:44:bb:7d:
ba:8d:ad:d0:b3:11:bb:bd:5b:53:78:ad:ef:4b:d8:75:61:7b:
5e:04:19:5c:95:ad:8d:d5:0a:ec:22:96:a6:ee:db:ed:bc:a4:
b4:20:7e:11:02:f7:a8:69:34:cd:d4:3e:55:b4:dd:ba:da:c2:
97:77:2f:9c:a0:9a:17:fe:94:85:29:7d:b0:35:7e:9a:ce:fd:
1b:3a:49:76:9d:d6:31:18:89:db:dd:f8:7b:f6:bf:ee:ca:68:
0d:d4:ce:bc:97:3d:61:90:8e:d7:82:e8:e0:f6:cd:25:bd:cb:
67:aa:e8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:53:57 2025 by rpki-client