Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LzeVwi7nIh7GWLze285H1bIytd4.roa
File: LzeVwi7nIh7GWLze285H1bIytd4.roa (raw, json)
Hash identifier: a2XJoTFDE4DRZu3IL9aNxgOK6QKIzzrkNYGY1mZg1/s=
Subject key identifier: 2F:37:95:C2:2E:E7:22:1E:C6:58:BC:DE:DB:CE:47:D5:B2:32:B5:DE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B359F04CF15A4A13527121583582F8E69
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LzeVwi7nIh7GWLze285H1bIytd4.roa
Signing time: Sun 15 Oct 2023 23:14:55 +0000
ROA not before: Sun 15 Oct 2023 23:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:35:9f:04:cf:15:a4:a1:35:27:12:15:83:58:2f:8e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 15 23:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f3795c22ee7221ec658bcdedbce47d5b232b5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:11:03:c9:75:ad:fc:da:44:37:1e:69:ab:
af:eb:b0:7f:64:8e:c9:64:dd:69:6c:f5:ce:af:3a:
92:15:bf:87:38:f1:56:05:85:80:2b:91:ca:87:5a:
3d:23:58:15:7e:f1:d4:c6:03:2f:f3:c9:69:46:1f:
4b:79:19:c6:78:ff:f4:f6:ea:f0:0d:ac:97:56:07:
80:72:8c:9c:d2:6f:e4:a8:d6:d7:2a:08:de:43:37:
d1:f4:f7:dc:e6:8e:9a:ca:1a:13:c6:04:a9:3b:fe:
9e:b9:aa:5f:10:5b:08:9b:1a:a3:ac:b2:91:a8:ac:
cd:c9:48:09:e3:05:2b:c5:a3:70:ba:fa:4f:88:b2:
0b:0e:8d:90:a9:dc:17:07:61:bd:99:1a:6a:df:b4:
f4:85:36:f0:c5:32:b2:b7:1d:de:c7:6c:f5:40:8a:
a8:2c:5a:9a:0e:91:d9:99:27:98:2b:8c:cf:45:09:
25:cc:f2:57:25:37:4a:f3:ff:62:18:d4:27:9f:c5:
e4:c3:c9:db:02:03:e2:df:4e:43:46:af:f6:68:d5:
ac:fb:f0:51:98:19:f2:86:39:e4:45:ee:61:4c:a3:
40:7e:44:38:14:97:33:0f:4c:f9:65:af:dc:94:da:
34:7c:51:53:8d:0f:00:e1:fa:84:a7:a9:d2:4d:d1:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:37:95:C2:2E:E7:22:1E:C6:58:BC:DE:DB:CE:47:D5:B2:32:B5:DE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LzeVwi7nIh7GWLze285H1bIytd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:13:e8:e2:a8:36:ed:58:0f:97:b6:a1:d9:05:e6:67:f2:51:
e8:d2:fd:8f:67:9f:62:89:a1:6c:da:82:74:01:58:25:14:51:
9a:9c:08:26:2a:bb:20:5c:ce:46:fe:18:82:54:78:92:9f:70:
95:7d:64:9d:74:4b:05:a9:f7:70:6a:99:00:96:2b:00:6f:29:
21:c6:3b:8c:5c:e7:43:f6:77:d0:75:9a:16:dd:65:c5:80:ef:
c8:50:1b:a3:0f:0f:df:5b:ce:4e:02:81:54:d0:90:4a:65:97:
b8:88:dc:51:04:0d:d3:2b:4c:07:40:30:9a:e8:18:1b:d1:33:
5f:19:ee:68:19:9d:54:4c:59:55:93:03:c9:96:83:82:e5:58:
43:6f:3d:5a:28:7a:0e:b0:25:6a:97:9a:96:88:6d:21:a1:f9:
93:e4:75:9f:91:4c:e9:0c:46:6c:4d:30:71:d9:b0:81:16:73:
e1:ab:40:9e:fd:de:ff:ee:fb:4e:76:0f:7a:95:f8:5f:62:94:
8f:f0:04:bc:cb:c6:57:49:f4:2f:bf:85:b2:44:d8:9a:89:bd:
93:76:2d:67:5b:d6:39:f9:5b:e1:67:6a:2c:97:13:53:14:1d:
f1:cc:0a:e5:f8:99:0f:20:1d:79:7a:3c:97:c6:00:d1:99:5d:
4a:c4:42:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:45:35 2025 by rpki-client