Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lcq_HRkBBq2W1hZRHcW22YBNlNw.roa
File: lcq_HRkBBq2W1hZRHcW22YBNlNw.roa (raw, json)
Hash identifier: X5xwqaMbsBf4tql4FBi1dZgQEgHqYcNkDifm+RGbvCI=
Subject key identifier: 95:CA:BF:1D:19:01:06:AD:96:D6:16:51:1D:C5:B6:D9:80:4D:94:DC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6FFA080DB8E0A45A95ADF8B7841D5F9C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lcq_HRkBBq2W1hZRHcW22YBNlNw.roa
Signing time: Sat 16 Dec 2023 00:15:06 +0000
ROA not before: Sat 16 Dec 2023 00:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6f:fa:08:0d:b8:e0:a4:5a:95:ad:f8:b7:84:1d:5f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 00:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95cabf1d190106ad96d616511dc5b6d9804d94dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:49:bb:05:38:d8:6b:0b:85:d9:16:58:5c:c1:
0a:68:17:45:9e:82:a3:3e:96:dc:ea:57:f3:5c:f7:
14:27:91:19:4a:37:4b:0c:ff:4d:ae:35:0d:52:07:
fd:7f:8c:7b:b7:bd:48:7a:df:4c:65:40:1e:e8:8f:
3b:50:b9:c1:8f:bb:36:92:ca:c5:f9:54:33:25:6e:
01:00:28:f0:fe:cf:86:bb:7e:bf:7b:4d:17:43:1b:
38:c4:06:11:18:8d:0a:9d:b4:9e:96:a3:a2:51:cc:
a6:74:0d:63:0e:96:61:6f:89:ae:bd:9a:0d:1e:d4:
82:75:15:bf:c4:9c:7f:59:6f:a0:77:8c:fc:da:c3:
90:d5:cd:33:ae:3b:f2:a3:56:db:50:0f:83:3a:64:
d8:3f:8b:84:3b:7c:db:e4:a9:19:68:0e:dc:11:a3:
39:a1:e3:ac:0c:5d:db:9a:2e:43:1c:e1:1c:09:f1:
c2:ba:ca:41:4b:c3:1f:a3:ab:5b:3b:31:ff:e7:25:
ec:6b:74:94:24:dc:fc:8c:b8:31:04:25:93:c4:9c:
25:f3:a7:40:84:41:16:dc:8d:22:61:e0:f4:36:a6:
df:3b:fb:f0:ce:09:ff:78:9b:63:99:fa:40:07:d2:
36:7b:7f:24:1f:b5:d4:d1:4b:64:76:81:42:4d:11:
4f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CA:BF:1D:19:01:06:AD:96:D6:16:51:1D:C5:B6:D9:80:4D:94:DC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lcq_HRkBBq2W1hZRHcW22YBNlNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:4b:94:7e:e1:8d:0c:4c:8a:35:22:a3:52:68:d3:b6:41:e6:
dd:75:0e:44:ec:af:98:8f:b0:33:23:6b:04:64:78:0f:4b:b4:
6d:72:9b:51:02:2e:01:16:b9:64:e7:89:d0:eb:b9:fc:49:f3:
87:f8:21:b0:88:b2:fb:07:10:66:33:2c:7a:2c:f4:1c:f8:f6:
ae:1f:ad:6c:fe:32:b3:c0:dd:29:a3:6a:4d:d7:8f:df:74:88:
c7:f7:ef:36:1a:6e:7b:27:5d:a5:e2:88:62:18:49:48:24:79:
d5:15:d9:db:45:0b:cb:b0:47:2d:76:09:12:2b:5e:30:8c:33:
30:89:fa:dd:78:02:d7:ce:dc:41:98:7a:b9:4e:1e:61:61:fb:
44:ca:3f:67:55:4a:7e:61:d4:51:c8:d6:0f:1c:da:57:ec:24:
a3:cf:45:2f:60:f5:33:f9:de:8f:ed:1d:22:0e:94:58:6c:17:
30:0d:e3:ca:24:da:75:4a:4f:9d:e3:c2:cc:6a:30:f2:5d:60:
56:15:13:ee:6d:15:2f:af:ea:70:e0:5e:89:0a:ce:d6:84:37:
05:d3:33:00:79:a2:ba:12:53:e8:3a:a7:df:cc:06:28:35:6a:
3e:a4:80:64:21:9c:92:83:16:27:70:54:26:fe:26:14:b8:1f:
56:91:0a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:41:47 2025 by rpki-client