Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lPztbT9iwttS8TY2MIfoUwhO3RI.roa
File: lPztbT9iwttS8TY2MIfoUwhO3RI.roa (raw, json)
Hash identifier: h0Y/Vpm6TbY5SCUr8Dcfq71Lx9rFn7jDXCVFAoPnmGI=
Subject key identifier: 94:FC:ED:6D:3F:62:C2:DB:52:F1:36:36:30:87:E8:53:08:4E:DD:12
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE2FB991F86D235025164FDBBBC2378F4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lPztbT9iwttS8TY2MIfoUwhO3RI.roa
Signing time: Sat 18 Nov 2023 15:10:21 +0000
ROA not before: Sat 18 Nov 2023 15:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e2:fb:99:1f:86:d2:35:02:51:64:fd:bb:bc:23:78:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 18 15:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94fced6d3f62c2db52f136363087e853084edd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:65:3d:62:18:80:50:1a:33:9b:0e:9e:47:b1:
5d:43:b7:62:40:f6:5f:c6:8d:76:49:1d:55:19:c6:
3e:21:e9:ce:e9:8a:c5:f8:64:ba:d1:9b:0d:63:24:
bc:4e:72:44:6a:98:77:02:38:62:a0:66:85:02:bc:
12:01:49:55:a8:e8:8d:29:62:b3:df:1c:bc:98:22:
2d:be:6f:ba:4f:1c:a3:f2:7a:6a:46:22:12:3c:13:
06:20:c6:e2:c5:52:81:42:80:48:87:bc:72:38:77:
b4:e2:a0:5c:a6:e1:22:68:88:30:03:dc:33:49:3d:
e6:f0:b8:51:fb:11:97:e8:b8:5c:a0:e4:29:49:d7:
50:f3:c7:72:ad:95:13:19:cb:ed:35:f4:04:a1:12:
6e:b0:b4:ed:6a:db:ff:13:c0:a0:ee:1c:88:82:3c:
83:17:6d:50:73:bb:64:7c:fe:7d:f1:e3:0b:98:db:
83:13:fd:73:41:88:e1:cc:6c:0b:6f:bd:57:62:92:
e9:0b:10:ae:89:3e:ea:fe:97:0c:db:7c:e8:50:2d:
c8:26:fd:13:dd:56:85:7c:e8:16:9c:83:bd:49:7b:
e8:8d:79:5f:4f:8f:73:a3:0b:12:ac:c1:d1:45:ec:
6b:d8:61:1b:7a:5d:65:f3:18:64:9f:ea:5c:e2:b5:
cf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FC:ED:6D:3F:62:C2:DB:52:F1:36:36:30:87:E8:53:08:4E:DD:12
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lPztbT9iwttS8TY2MIfoUwhO3RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c6:c3:40:32:b3:5f:eb:6d:54:00:59:d6:03:83:8d:6e:a3:43:
b3:9a:2c:12:b0:4b:8d:a5:4c:1b:cb:0a:3d:36:2e:de:e5:5f:
8b:d4:d8:cf:96:a5:98:d5:83:55:7e:20:ad:de:e0:9f:13:22:
19:1f:4e:bf:3e:52:e9:bc:ac:f9:65:8e:0b:fa:80:32:47:94:
3e:be:8b:fb:dc:5e:0d:e8:ca:b5:f2:4a:63:9d:00:b9:87:de:
44:66:bd:21:8a:50:0d:33:b7:96:7f:92:37:18:ff:db:68:5c:
8b:24:5b:32:0b:47:b1:a0:cb:4b:e4:d8:71:46:c1:54:b0:af:
4e:18:50:ce:16:5f:42:4f:ef:49:27:88:98:89:a3:bd:aa:cc:
02:98:3d:83:0a:d8:ea:fc:38:4c:47:a1:71:cc:87:ea:19:05:
bf:1d:fd:d9:95:a3:e9:28:5f:6c:dd:cd:9e:46:3a:ca:e5:07:
ec:ca:bd:1c:48:36:62:34:83:f5:db:40:2f:d1:26:a7:ba:fd:
1c:c0:d9:59:9b:dc:12:37:cc:a3:df:27:84:b2:5d:7d:af:e3:
b6:f7:f5:e7:51:df:7b:e6:75:63:65:2c:11:cc:cd:25:0b:7c:
3a:dd:3e:b2:d4:5d:82:41:0f:31:20:fa:a8:51:c6:ad:f3:69:
3b:98:3f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:30 2025 by rpki-client