Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LzQT-ACx6W2u5GGPMkSfvaw7HFE.roa
File: LzQT-ACx6W2u5GGPMkSfvaw7HFE.roa (raw, json)
Hash identifier: xn+sIinpM0di6If0gAvxug0Lxwo55a1oeIE58DRhNZg=
Subject key identifier: 2F:34:13:F8:00:B1:E9:6D:AE:E4:61:8F:32:44:9F:BD:AC:3B:1C:51
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ABEF63D26630F9C1106EE209832EB1529
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LzQT-ACx6W2u5GGPMkSfvaw7HFE.roa
Signing time: Fri 22 Sep 2023 22:15:23 +0000
ROA not before: Fri 22 Sep 2023 22:15:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:be:f6:3d:26:63:0f:9c:11:06:ee:20:98:32:eb:15:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 22 22:15:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f3413f800b1e96daee4618f32449fbdac3b1c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5a:6b:41:b9:01:16:3c:75:dd:98:fd:c8:0a:
80:8e:c7:7c:de:9b:7c:da:a1:a1:64:df:76:78:8c:
1e:1d:18:15:05:59:67:7b:fb:68:40:3f:9a:06:41:
1d:fb:2c:cc:1f:61:d2:5a:f1:50:4b:a1:87:e7:23:
99:48:62:d7:b9:55:8b:54:81:38:3f:12:75:4c:90:
18:36:a7:47:8a:1e:fa:ee:08:5c:28:44:d9:dd:d5:
ff:5f:b4:3e:a4:e4:37:b2:bb:d0:c1:08:5b:ea:eb:
84:65:30:c5:0d:2f:3b:9c:ab:a9:0d:76:7c:40:2c:
c3:6b:c4:be:64:f4:ff:f9:9a:b8:96:98:7e:9d:0b:
e0:f3:bd:3d:29:4c:c1:db:14:a6:02:c0:99:1b:13:
dd:a4:61:87:11:56:58:ef:10:c4:b8:c2:93:c0:44:
b5:48:76:8b:19:b7:81:db:76:29:7b:4b:61:07:22:
ed:2a:6d:7f:97:80:04:86:a3:e7:83:07:a1:c8:4d:
21:27:f0:95:c3:f4:57:b7:84:73:52:f1:34:f9:4e:
a7:39:ff:f1:4b:1a:bc:67:c2:e8:88:c5:33:11:9c:
b9:dd:96:a6:8c:da:a6:61:07:66:06:09:df:0f:f9:
4d:a6:21:e4:f8:9a:7f:f7:4e:ad:ca:3b:11:2b:b9:
ff:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:34:13:F8:00:B1:E9:6D:AE:E4:61:8F:32:44:9F:BD:AC:3B:1C:51
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LzQT-ACx6W2u5GGPMkSfvaw7HFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:2d:10:51:56:e5:21:44:2f:49:0b:5e:08:73:77:8d:07:96:
3a:68:5e:a6:e3:da:07:d7:33:f3:71:45:99:c0:5a:00:3a:76:
c6:44:44:1a:c8:d6:56:07:7f:f3:6d:6f:ec:2b:4a:16:b4:31:
d1:f4:7b:a1:39:38:9a:c2:af:1e:96:1c:e8:1d:84:19:a1:e6:
65:b7:58:7d:21:b0:d4:dd:97:6a:29:99:bc:2c:60:f4:09:0d:
5a:00:b0:69:f6:87:aa:31:0c:f6:8d:da:92:14:9e:35:b2:74:
2c:77:09:5a:1e:f6:54:93:d7:8d:bb:c2:86:d2:81:98:19:f4:
09:aa:56:d1:96:c4:94:6a:ff:2a:d0:77:9d:f0:72:8b:4e:e0:
6c:fb:e3:ac:82:ea:7b:d1:fc:e2:dc:89:a0:b3:dd:1f:59:c0:
bc:9b:56:9e:9a:8d:60:cd:11:6c:9c:a0:05:a3:97:19:24:89:
53:b9:f0:c0:92:00:1d:f6:e9:d3:b9:f6:c5:82:33:72:f4:71:
e0:c3:fd:b9:7f:23:46:c7:72:9a:4d:9d:3b:58:08:0d:ee:9e:
0d:c0:83:5b:de:3e:bb:54:79:95:f4:2a:d7:30:1c:86:82:96:
be:ca:15:7a:f9:55:c2:d5:14:10:51:e4:b7:e8:41:04:c8:0a:
c0:6c:29:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:59:23 2025 by rpki-client