Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tL-LMyWYDKAirQYN7qFHI7SRHbo.roa
File: tL-LMyWYDKAirQYN7qFHI7SRHbo.roa (raw, json)
Hash identifier: lryvqSxgcHVjbqGvqsQTYtW65LJW7dRAJNlUlDJhXsI=
Subject key identifier: B4:BF:8B:33:25:98:0C:A0:22:AD:06:0D:EE:A1:47:23:B4:91:1D:BA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B654311C136FEDC9DBFB5053A1F8CB478
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tL-LMyWYDKAirQYN7qFHI7SRHbo.roa
Signing time: Wed 25 Oct 2023 05:16:15 +0000
ROA not before: Wed 25 Oct 2023 05:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:65:43:11:c1:36:fe:dc:9d:bf:b5:05:3a:1f:8c:b4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 25 05:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4bf8b3325980ca022ad060deea14723b4911dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d6:06:30:e1:fe:0e:a8:ec:1b:26:98:5c:40:
98:85:01:de:67:77:28:a0:d0:c9:53:f9:13:84:47:
13:5f:67:0c:83:ba:13:0f:f9:ed:e5:08:bf:29:3b:
21:08:21:47:ec:e9:45:9e:f2:b9:ff:86:1c:e8:49:
54:87:ce:c2:76:01:52:1e:c5:d7:a0:c8:f8:c7:d8:
bc:5b:2f:a2:bb:46:a4:5f:2a:14:e9:bb:0d:a2:ac:
06:62:8d:30:99:9b:b2:1b:c9:44:ea:8f:42:ae:f5:
5d:95:f0:81:f0:82:d6:d1:d0:94:bb:8e:f3:89:fe:
44:90:b0:d7:45:96:55:58:ae:17:bc:8d:0e:29:69:
79:f7:35:06:11:17:7f:8f:0d:37:81:92:79:cd:82:
ba:da:40:c4:0f:bf:59:e1:16:dd:d3:17:bb:f2:93:
61:1f:30:ff:1a:1d:31:12:f0:4f:09:c7:49:d4:4e:
70:d0:e2:40:62:32:2c:a2:ea:d4:0f:3c:0d:23:53:
2f:17:6e:52:4f:fb:c8:db:6f:e4:30:69:15:ca:c9:
f1:57:dc:9c:20:3e:ad:8e:96:17:a7:95:b4:11:d2:
86:ef:74:3c:95:a4:59:2b:83:50:6e:38:6c:ff:c4:
91:c3:db:3d:cb:da:13:7f:57:e0:a0:91:b0:aa:8e:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BF:8B:33:25:98:0C:A0:22:AD:06:0D:EE:A1:47:23:B4:91:1D:BA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tL-LMyWYDKAirQYN7qFHI7SRHbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:2b:67:f8:f0:62:ba:1e:5a:29:bc:39:aa:31:e4:68:88:07:
32:58:c2:e8:52:9d:4c:d0:ff:1d:ec:71:89:bc:7b:09:e6:c7:
f1:37:91:5e:a3:3b:d0:f1:24:30:47:ed:37:10:19:71:b0:f6:
2a:ca:72:fa:a4:51:53:9c:cc:55:72:87:b0:48:8b:44:4f:0d:
4e:44:72:67:6f:14:84:3b:42:04:41:51:d8:4f:41:dd:8e:99:
67:c0:d9:c8:00:0b:d6:6a:49:3e:83:4c:ed:73:c8:ed:7d:f3:
d0:f0:32:b6:80:14:29:86:4b:be:62:0d:62:8d:36:21:f2:17:
58:81:bc:6f:44:08:38:be:b0:24:fe:2f:f2:3f:f0:32:fb:2c:
45:ad:5d:78:73:88:5c:97:69:6f:b5:24:10:ee:61:b6:81:09:
d2:70:ff:24:d4:7c:85:64:dc:25:35:5a:ba:ac:d1:62:3c:46:
ad:65:63:24:10:1d:14:c3:41:c2:f3:6a:32:82:93:01:08:1a:
b5:75:dd:38:57:68:ba:01:70:27:6e:bf:24:48:bc:08:91:69:
12:66:7b:20:29:4d:e0:a6:f3:99:57:8e:b8:94:c4:b3:17:04:
b8:90:8d:7b:bf:67:e5:28:b0:6f:6d:60:88:32:d8:a5:cc:a9:
02:b4:a8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:12:04 2025 by rpki-client