Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lmlB8Kl5Y-3P3HbYMtTZYt1JZ7A.roa
File: lmlB8Kl5Y-3P3HbYMtTZYt1JZ7A.roa (raw, json)
Hash identifier: RTUKkYecAurPTJSGF155ciL5iBYVP0gSzM3iJt2tkmo=
Subject key identifier: 96:69:41:F0:A9:79:63:ED:CF:DC:76:D8:32:D4:D9:62:DD:49:67:B0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC828C663E6A164C806D0CC074FD16133
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lmlB8Kl5Y-3P3HbYMtTZYt1JZ7A.roa
Signing time: Mon 13 Nov 2023 10:09:57 +0000
ROA not before: Mon 13 Nov 2023 10:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:28:c6:63:e6:a1:64:c8:06:d0:cc:07:4f:d1:61:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 13 10:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=966941f0a97963edcfdc76d832d4d962dd4967b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:e4:e4:7a:c2:2d:5b:15:94:26:85:95:7d:
b0:ba:96:40:32:5e:d1:4c:1c:ee:2f:6d:6e:96:53:
79:0d:e0:67:47:39:49:61:fe:e6:1c:6d:01:e9:db:
7a:1a:1b:2e:51:ca:eb:7b:3e:f9:88:93:ee:7a:90:
fb:b2:19:a0:0f:b6:1b:4e:27:b4:93:85:83:92:2b:
91:15:9f:fb:9c:e4:c2:25:da:97:1a:b1:f8:ea:fe:
8f:15:0d:ce:4f:63:ea:58:b1:9c:53:9d:4e:a9:55:
19:6b:9c:52:c8:76:9f:83:af:f4:bd:3b:05:da:9a:
c6:80:c4:e0:ab:49:8d:e8:88:ad:96:94:96:08:e5:
cb:06:90:f9:97:2a:ab:c1:aa:38:7a:f9:97:e1:fe:
6b:75:0e:a7:0e:90:62:0d:dc:e1:81:49:82:6d:bf:
07:5d:bc:da:bf:95:08:64:ee:a0:92:da:9a:17:3a:
24:17:bc:6b:69:c8:c2:06:d1:20:53:d7:ef:05:b8:
ba:c9:4f:54:22:83:0f:a2:58:79:6b:b0:cf:f1:be:
12:f4:60:ee:54:c5:e3:40:3c:dc:da:79:d0:21:ac:
34:59:e5:0c:26:67:09:88:8e:b2:e6:16:9e:44:28:
42:86:ca:4a:4e:a4:f0:11:dd:fb:56:58:3b:61:52:
5a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:69:41:F0:A9:79:63:ED:CF:DC:76:D8:32:D4:D9:62:DD:49:67:B0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lmlB8Kl5Y-3P3HbYMtTZYt1JZ7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:a0:8a:b9:e5:ac:a2:db:22:f6:d2:24:a0:5f:dd:ee:f4:68:
32:6c:3f:38:b1:66:72:31:aa:1b:09:32:ec:f9:ce:96:dd:99:
8d:19:f3:b6:96:47:1b:e9:7c:c2:cd:cf:a2:26:1a:a7:47:4a:
50:94:a6:f5:86:53:c2:6b:4c:b7:a1:89:fb:1a:0e:51:1e:20:
76:aa:98:bd:be:2d:86:a8:d9:cc:fb:e5:ae:1e:24:35:7c:69:
09:77:ae:e0:2a:28:9d:f9:6a:e8:36:74:e4:19:ba:e0:d1:d5:
63:7f:9e:77:f9:e1:a3:9f:a4:7f:05:96:b6:79:b3:1c:cc:68:
db:35:28:6a:e2:d6:b7:78:71:8b:a9:9a:84:ea:61:94:58:1a:
fc:02:77:f3:97:35:ca:f1:72:a9:5c:af:38:4e:76:c7:88:0a:
9d:52:c8:1b:08:79:6a:f2:12:21:f2:1a:17:b9:8d:9c:d1:a3:
07:17:9b:4f:5f:84:26:b3:e6:f5:f9:fd:4c:97:6b:a1:15:28:
b5:17:20:55:5f:2e:2f:63:9e:a1:9d:74:ae:bd:91:b4:65:6a:
64:ac:a9:53:3b:e6:54:bd:57:70:1c:2b:03:74:34:41:fa:b8:
08:21:bb:f4:1f:70:28:df:eb:fb:22:3c:f4:ab:e7:7d:4c:61:
e1:70:f2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:53:51 2025 by rpki-client