Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/LU7UnKW6l5PMj1Cd_S2pN7hx50s.roa
File: LU7UnKW6l5PMj1Cd_S2pN7hx50s.roa (raw, json)
Hash identifier: AADII3NVHka47tms2rNOcb+aKLkS9Rig+LuOrTCGChs=
Subject key identifier: 2D:4E:D4:9C:A5:BA:97:93:CC:8F:50:9D:FD:2D:A9:37:B8:71:E7:4B
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A57FB584D818157921145BD5AAB5DDD30
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/LU7UnKW6l5PMj1Cd_S2pN7hx50s.roa
Signing time: Sat 02 Sep 2023 22:20:04 +0000
ROA not before: Sat 02 Sep 2023 22:20:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:57:fb:58:4d:81:81:57:92:11:45:bd:5a:ab:5d:dd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 2 22:20:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d4ed49ca5ba9793cc8f509dfd2da937b871e74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cf:d7:fd:c6:71:8e:b7:e8:a5:8e:4d:de:92:
e2:73:35:35:de:c6:85:c7:e5:b4:43:1f:21:f0:32:
36:e7:ea:fa:06:44:09:1e:40:4b:98:da:b9:f4:11:
65:ad:62:1d:5b:13:c4:9d:ce:61:80:80:94:ba:eb:
44:d7:60:0e:9e:f7:c9:29:07:3c:42:5a:0d:89:f5:
17:f5:03:39:37:34:44:52:69:13:46:1a:de:a0:e9:
f5:12:6f:1c:65:87:63:41:be:7c:58:f0:eb:4f:39:
d8:e2:aa:4a:4a:6b:65:6c:21:60:55:bb:6d:44:61:
a2:84:af:1f:9e:59:3b:7b:06:10:64:61:40:a0:2e:
79:c0:d1:c5:b3:72:b4:79:53:89:8d:b9:fe:63:fd:
57:e8:26:e4:42:36:53:08:82:44:4a:02:8f:cd:c5:
b5:ab:90:41:d0:a2:47:b9:b7:84:e9:a2:14:e6:69:
07:5e:db:99:3c:e4:29:83:17:15:5e:fc:cb:30:ad:
c3:10:18:38:b3:c3:d4:73:a8:13:ee:76:46:58:5a:
3c:9a:05:ed:b5:d1:b6:24:6e:4f:7b:94:ae:0b:62:
61:00:6d:86:28:7e:32:3f:cd:f2:c9:3a:94:7a:bc:
ad:6a:fa:01:00:d2:c0:8c:96:7a:99:2a:83:6c:dc:
0c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4E:D4:9C:A5:BA:97:93:CC:8F:50:9D:FD:2D:A9:37:B8:71:E7:4B
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/LU7UnKW6l5PMj1Cd_S2pN7hx50s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:97:ab:2e:82:ab:29:f8:b7:bd:e9:9b:04:2a:6f:06:5b:9c:
db:20:6c:2c:0f:71:17:e9:62:e7:19:f5:f2:c0:e5:cb:6b:3a:
79:5e:02:b8:5e:b5:40:22:c2:6c:94:2c:b8:32:a2:a2:65:20:
ca:89:f8:3b:7d:fe:ca:fd:99:5b:1b:ea:ed:52:ac:64:1b:f4:
6e:79:68:39:f9:3d:66:12:1d:9d:0c:74:0d:05:e0:46:bf:1f:
9e:3f:2c:dd:93:7b:8d:f5:b7:c1:0d:f2:e8:8c:2d:5f:e1:a0:
d1:a1:b6:d7:37:f0:c4:4b:af:44:f9:97:15:1f:78:5a:35:6b:
44:fa:d7:c7:8d:ca:20:5a:ab:b1:a7:ed:4b:dc:3f:8d:ff:7d:
3d:5d:d2:27:7b:85:cc:21:2b:45:4c:ca:04:7c:26:73:bd:63:
99:fa:13:87:71:16:38:91:42:d4:6a:52:64:f0:12:f4:ab:12:
b7:bf:48:ce:3d:90:32:e3:b8:8e:fa:a2:22:1f:9d:c1:e9:36:
19:73:71:c9:b7:02:8c:4d:fa:0b:c2:37:a6:9a:16:fa:2d:e9:
83:14:b9:05:be:da:04:b3:cb:17:a9:7b:ca:f3:72:04:b2:63:
61:74:90:e0:b6:e9:6f:62:a9:a7:2a:f4:39:81:c2:18:01:b3:
de:41:12:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:01 2025 by rpki-client