Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LJGp5IENIgMagyL7XRH4LksWqMI.roa
File: LJGp5IENIgMagyL7XRH4LksWqMI.roa (raw, json)
Hash identifier: yx1ylopcgXoxj4Feu/ijzuFbMnn3yU94F5GLVdWXIfw=
Subject key identifier: 2C:91:A9:E4:81:0D:22:03:1A:83:22:FB:5D:11:F8:2E:4B:16:A8:C2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E095A5E9DA7F76420FABEDB867C560A98
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LJGp5IENIgMagyL7XRH4LksWqMI.roa
Signing time: Mon 04 Mar 2024 12:05:01 +0000
ROA not before: Mon 04 Mar 2024 12:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:95a:1cae/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:09:5a:5e:9d:a7:f7:64:20:fa:be:db:86:7c:56:0a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 4 12:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c91a9e4810d22031a8322fb5d11f82e4b16a8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1f:f1:7b:43:e4:df:24:e7:2d:4d:d5:e4:75:
eb:8e:9c:dc:7b:e2:52:6c:27:64:24:df:fa:4a:f1:
2f:21:e2:1f:0b:ec:07:6a:a0:c3:94:a2:a2:a4:d0:
f9:06:4f:68:75:82:e5:67:0b:43:57:b4:bc:a0:e7:
96:b3:16:c3:0b:52:5e:7d:76:d4:8c:ac:94:bc:e4:
6d:88:a9:8d:5c:5d:6d:18:cd:65:5f:99:8a:c2:42:
2c:93:4e:43:24:17:04:63:d7:7b:10:b4:28:0b:de:
1b:02:4c:73:e1:f1:83:66:8f:b9:21:f5:f4:83:3a:
a3:d3:4b:e5:2a:80:d3:37:60:ec:4e:1f:8f:38:92:
40:59:de:c9:4b:01:10:47:e8:b4:99:e9:7a:ed:09:
99:99:66:04:e1:ff:3a:5a:53:0d:4f:5c:9a:d1:c9:
a4:15:80:21:30:c2:e6:06:f3:89:b7:ad:30:0c:0f:
91:d7:45:73:9c:0e:66:f8:e1:89:e7:e9:e5:3e:92:
d0:46:7c:70:1c:ef:9b:af:5c:51:44:a6:f4:5d:5d:
1e:25:d1:63:7f:50:74:1f:b6:db:8d:ed:4e:74:c7:
ec:54:36:be:8f:c6:e2:6a:c8:9c:dc:31:52:35:a9:
53:3a:12:4a:d3:98:85:c4:cf:52:f1:e8:a2:2e:44:
9b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:91:A9:E4:81:0D:22:03:1A:83:22:FB:5D:11:F8:2E:4B:16:A8:C2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LJGp5IENIgMagyL7XRH4LksWqMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:09:12:7c:62:05:5d:55:64:45:96:03:57:93:41:d4:a1:58:
8a:ed:a6:25:dd:0f:7b:f5:7d:3f:00:07:eb:47:30:f1:55:87:
9e:11:80:e8:bf:0c:33:c8:c8:7a:f2:08:50:c9:05:9e:f2:b8:
eb:27:85:e1:82:89:aa:0c:47:29:29:12:45:5b:af:4a:99:a6:
4d:d0:29:c6:40:31:d6:42:90:c5:bf:61:b2:06:d8:6c:86:3a:
e7:47:2b:34:73:55:40:dd:05:0e:49:c3:77:44:2c:8d:07:29:
f0:2e:fd:8d:1b:1f:07:eb:8d:08:13:b6:9e:d4:19:dc:03:78:
bc:74:87:c2:52:3e:89:98:73:ae:55:e7:15:99:61:04:d3:1c:
4d:82:36:c3:5d:8f:a1:3f:da:a4:d2:56:55:04:7a:47:8d:e7:
ce:3c:46:33:07:37:73:9e:43:42:8a:d3:08:fc:0d:4f:35:29:
0f:f2:c7:11:e2:35:fa:f1:13:32:a2:8c:7c:f7:ad:89:48:68:
80:25:f9:d3:a1:f1:6b:ef:19:9d:ea:6c:7d:40:bc:c1:42:a9:
9f:af:24:00:f6:89:a5:6d:8a:6b:4c:ac:50:0c:96:a0:c4:07:
54:4d:27:00:94:1e:38:58:f5:56:4c:c2:d0:33:c1:03:96:bd:
b9:b1:4b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:55:22 2025 by rpki-client