Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LdTXCkA84nTyHVIC_2VGlOPYsas.roa
File: LdTXCkA84nTyHVIC_2VGlOPYsas.roa (raw, json)
Hash identifier: rxQZ1YXPC/icAq1mNi3gvQXq6qdX/1EeQVDpp4u78Ws=
Subject key identifier: 2D:D4:D7:0A:40:3C:E2:74:F2:1D:52:02:FF:65:46:94:E3:D8:B1:AB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EAF74D8372B79FBFC56C51980FA54BE85
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LdTXCkA84nTyHVIC_2VGlOPYsas.roa
Signing time: Fri 05 Apr 2024 18:10:54 +0000
ROA not before: Fri 05 Apr 2024 18:10:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:af:74:d8:37:2b:79:fb:fc:56:c5:19:80:fa:54:be:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 5 18:10:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dd4d70a403ce274f21d5202ff654694e3d8b1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:8d:f0:fb:92:b8:03:1b:2f:c7:20:a0:88:
d7:7f:4d:42:88:c6:79:78:e9:b3:95:b7:35:c4:9c:
1c:07:92:f1:d5:dd:dc:f7:26:0a:a4:f3:2d:c9:ec:
d2:7f:23:76:18:d9:23:e7:a0:7e:0d:08:ec:f3:84:
01:9e:de:8f:4b:6e:1d:be:a6:ef:db:84:6d:f4:e8:
13:cf:1f:5d:3a:04:2f:0f:53:85:1d:ca:36:12:a3:
b9:d4:78:a6:30:4d:9b:cb:f4:f2:e9:d6:56:67:da:
b1:f4:18:b3:c5:a1:50:19:b1:ee:17:e5:70:1f:99:
8f:6b:fc:34:f4:f1:22:5c:55:8a:d2:c9:67:68:87:
bf:cf:63:51:2c:67:ce:0c:0e:6c:c8:90:54:f4:25:
ff:32:94:55:a6:87:09:ac:eb:ca:72:ab:be:84:3c:
14:cc:e5:21:f5:80:66:10:46:64:d1:ca:ea:0a:dd:
95:f9:48:2f:03:b7:84:d6:cd:77:0a:07:f2:77:9e:
a7:74:62:25:2b:3c:de:71:b5:7a:7d:51:24:d3:96:
a4:b3:c1:3a:9d:fb:1b:94:15:07:9c:12:6b:2e:87:
29:40:9d:34:70:3c:5f:da:2f:50:3c:f7:d6:7a:3b:
6f:48:38:e6:7e:43:9e:19:93:f5:c8:09:00:a1:58:
2e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D4:D7:0A:40:3C:E2:74:F2:1D:52:02:FF:65:46:94:E3:D8:B1:AB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/LdTXCkA84nTyHVIC_2VGlOPYsas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:c5:10:8a:85:ee:ad:9a:87:00:9b:32:e9:3e:d1:43:2b:7b:
bd:37:31:0a:15:fa:6d:de:c1:7c:83:62:fa:c9:9d:43:3a:46:
2e:e6:ca:df:e2:17:8f:90:4a:89:ec:62:8a:5e:ff:11:d8:30:
6a:af:f0:42:8b:24:e3:a1:f0:bc:f6:8b:56:cb:53:97:ad:87:
db:30:de:e9:3e:0f:84:45:e1:a2:9b:20:ea:3c:8c:6d:5c:7d:
e1:f9:d0:79:75:5c:4e:86:26:b7:87:55:42:9a:ba:20:c7:ac:
57:db:fa:68:bc:89:31:72:66:b2:90:ee:23:a1:d4:02:74:bb:
08:58:71:0b:5b:24:4f:ba:c3:d5:76:01:fe:42:66:30:cf:99:
d4:da:ec:30:e2:83:6a:b3:92:b6:a6:69:91:fd:18:ac:a3:93:
4c:27:9b:ed:b7:86:bf:96:8c:52:a5:69:77:e0:e9:c7:59:72:
d3:31:3b:e4:e3:1a:da:66:1e:78:48:d8:4f:6d:21:9f:19:d7:
a0:2f:62:c6:fd:07:16:13:c9:9c:c6:42:16:ce:d8:71:de:03:
40:43:47:11:72:bb:d1:ed:58:15:95:4c:85:e9:45:c9:e8:b4:
fa:0a:cc:77:9c:a5:00:8b:5b:12:35:8a:55:b6:cb:e4:1a:33:
b6:80:5a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:53:45 2025 by rpki-client