Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LUyBMXrLlLNRA-kVUAJOPwz2bDU.roa
File: LUyBMXrLlLNRA-kVUAJOPwz2bDU.roa (raw, json)
Hash identifier: VnWO804/DT5rcjf5PuIgz+FFvyqhWyhyD2dnZS6Kn9E=
Subject key identifier: 2D:4C:81:31:7A:CB:94:B3:51:03:E9:15:50:02:4E:3F:0C:F6:6C:35
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B78FBCAF8481C43E359B31E2BE62B8E90
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LUyBMXrLlLNRA-kVUAJOPwz2bDU.roa
Signing time: Sun 29 Oct 2023 01:10:49 +0000
ROA not before: Sun 29 Oct 2023 01:10:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:78f6:607/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:78:fb:ca:f8:48:1c:43:e3:59:b3:1e:2b:e6:2b:8e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 01:10:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d4c81317acb94b35103e91550024e3f0cf66c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:83:eb:44:7a:ad:83:67:77:9d:36:cb:a1:
3a:e0:a6:91:fa:d7:6a:d3:08:cc:34:fb:b4:fc:5c:
17:dc:78:24:ee:fc:88:8e:68:73:bb:19:83:2f:2a:
68:fa:24:e6:21:e2:f4:d2:79:01:81:eb:8e:21:b7:
31:e3:fe:36:13:34:a5:4b:1f:d0:8b:7a:9b:7e:10:
73:c0:bf:fc:74:73:f3:f2:1f:41:6c:10:2f:48:b7:
18:c4:ac:7c:e4:d2:65:4d:24:21:4a:c7:63:4a:75:
7a:02:7b:25:fa:3f:6a:c3:a4:80:ab:04:fb:e6:e3:
20:21:63:09:a6:d6:5b:fd:f4:67:00:94:e5:86:74:
03:35:10:2f:30:b4:17:8b:cb:e3:ba:9c:25:0b:61:
e3:6c:5b:77:c9:75:4e:7c:41:b1:39:ac:9f:68:64:
67:44:7b:ee:4b:16:56:39:76:4a:2e:a3:16:df:eb:
e0:a7:f1:6f:19:45:69:53:ef:eb:30:6d:75:69:6f:
76:60:ff:76:ac:14:d6:8f:a3:0c:75:f7:48:d8:80:
40:3c:e8:38:58:8d:72:1a:91:17:22:5a:2e:4d:35:
31:0e:5f:91:f1:76:7e:90:c1:63:65:3d:a4:3e:e9:
0f:d2:31:76:e5:03:8b:17:57:ee:bd:99:fc:97:0e:
52:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4C:81:31:7A:CB:94:B3:51:03:E9:15:50:02:4E:3F:0C:F6:6C:35
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LUyBMXrLlLNRA-kVUAJOPwz2bDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:07:69:c6:51:7e:52:0f:dd:86:6f:80:83:fd:65:b8:a0:5b:
04:a4:57:d6:35:8d:b1:3b:2b:45:6e:d9:6c:e9:0f:df:31:f7:
ec:42:57:24:b0:e4:2d:a3:02:ea:9e:bf:a2:97:28:69:d7:f7:
ff:8b:45:94:2b:aa:9e:20:75:57:fc:73:3e:43:bd:35:30:85:
e0:ec:b4:96:e8:cb:ef:86:6f:06:15:05:9a:6f:4b:97:a5:e4:
80:18:d7:6f:bd:18:65:b6:bb:93:b4:c3:34:75:03:e0:cf:ed:
33:a0:f1:7b:d6:d9:58:3b:72:fe:79:85:74:e3:3a:56:05:bb:
6f:02:a3:63:df:94:4d:f9:8e:e4:11:8d:4a:a0:e8:b8:08:69:
bc:89:68:9d:34:82:ef:34:a2:d5:24:0f:d6:03:ae:fe:cb:6b:
9f:56:3e:ea:12:bf:29:44:08:90:31:83:f1:f7:61:6e:bb:08:
8f:5b:96:fb:2d:e7:1b:cd:b8:6b:85:86:d0:14:c1:6d:c8:58:
79:ab:31:69:02:14:f5:21:22:2c:e5:d8:9b:da:cf:63:8a:11:
c1:5e:42:24:fd:c8:95:b9:db:f0:16:d7:74:ad:be:3f:08:7c:
42:a7:3e:3c:0d:51:53:cc:53:e5:49:be:dc:41:7a:34:7f:27:
19:e2:9b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:17:01 2025 by rpki-client