Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LTrtBB3ny0Rh7-PBZdNkKL1eXog.roa
File: LTrtBB3ny0Rh7-PBZdNkKL1eXog.roa (raw, json)
Hash identifier: z3Rkvu/XmqYzvMQwC9PF8ZFcDn+vcjYLYpSa5puI6Tg=
Subject key identifier: 2D:3A:ED:04:1D:E7:CB:44:61:EF:E3:C1:65:D3:64:28:BD:5E:5E:88
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CC3064972FA03533214437C9E7D71659F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LTrtBB3ny0Rh7-PBZdNkKL1eXog.roa
Signing time: Mon 01 Jan 2024 03:16:58 +0000
ROA not before: Mon 01 Jan 2024 03:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:06:49:72:fa:03:53:32:14:43:7c:9e:7d:71:65:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 1 03:16:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d3aed041de7cb4461efe3c165d36428bd5e5e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:c3:5d:f2:9b:01:b8:de:24:27:ea:c2:ff:
4c:50:9c:20:33:80:b4:50:29:cd:58:bf:c5:2f:1d:
ac:80:52:0c:9e:b3:0f:c3:42:33:5a:b4:b1:08:ee:
ef:45:ba:ea:3a:6d:c3:4c:61:16:56:0f:e0:2a:2e:
59:94:18:d9:9d:ee:92:7e:8c:a4:6c:90:05:88:35:
5b:c7:7b:48:32:36:f6:cf:bc:58:10:51:71:32:b8:
7d:f7:cc:b5:5f:3d:53:0b:9d:60:d9:a3:d2:70:b2:
8f:21:c4:37:6b:b8:99:11:18:36:85:62:d2:13:64:
8f:76:ae:74:cb:47:5d:54:fe:72:05:37:45:bb:97:
97:43:db:a1:f0:8a:8a:33:d7:a3:5e:21:bc:d5:97:
86:6f:b6:51:a1:c9:b4:5d:e6:c5:28:63:92:7b:86:
db:0f:5e:67:fd:80:ce:22:7b:bd:8d:9a:97:19:73:
c7:a9:8d:c4:c8:52:e7:3b:be:7d:1e:49:82:bf:c9:
c9:77:4c:8f:ea:32:4e:a9:48:1a:6a:30:a7:b0:20:
f5:25:5b:98:be:d8:d3:11:be:94:f6:e4:39:19:d8:
fa:80:15:b7:1b:9a:c9:03:58:3c:43:75:27:2d:e1:
b8:18:74:8f:c6:a2:81:a3:de:01:0b:f0:60:f9:04:
59:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3A:ED:04:1D:E7:CB:44:61:EF:E3:C1:65:D3:64:28:BD:5E:5E:88
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LTrtBB3ny0Rh7-PBZdNkKL1eXog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:71:ca:14:ba:b6:4a:ac:f8:97:ec:f0:43:61:3e:de:68:9c:
2e:c8:1f:76:af:8c:6c:b3:02:0a:d7:8f:a0:84:cc:f9:bd:ef:
59:8e:4a:13:20:3f:aa:92:ac:fe:88:24:20:a8:47:7f:5b:ea:
23:d6:1c:14:11:10:0a:aa:e8:f5:5b:ce:6f:a5:f3:6b:0b:08:
01:18:b8:13:b5:bf:03:7f:a3:63:af:da:29:bf:4e:f5:b3:fc:
8e:23:54:26:23:25:de:15:87:83:c8:39:d7:3a:35:3d:fa:57:
f8:ca:e3:a4:4b:42:e4:43:4e:04:93:bf:13:ea:8a:1c:8b:c7:
87:6f:ae:f4:e5:c1:5b:1a:14:e1:99:62:7a:5f:2a:92:60:42:
31:8e:d7:17:53:a2:52:9a:eb:f8:e9:72:f2:29:50:bb:31:55:
93:da:33:f8:ad:c7:fd:9b:2e:fa:aa:ed:98:ae:39:fe:88:c0:
8e:8e:83:47:4e:cf:85:9e:6e:ae:ce:74:ba:06:0e:56:00:f7:
7d:b3:ec:db:e5:45:3b:9d:88:5b:97:1b:a3:cf:29:cc:ab:16:
25:68:39:54:5e:73:8d:b2:46:fe:c9:a0:3f:b3:ef:e4:24:50:
a8:8e:96:c8:08:a7:71:b8:7a:68:a3:06:9e:29:4f:7f:6a:a7:
30:8d:9f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:03:47 2025 by rpki-client