Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LqbEngsoSBAmRwaT8M6gjmNqXUs.roa
File: LqbEngsoSBAmRwaT8M6gjmNqXUs.roa (raw, json)
Hash identifier: Q+xrk3IsjwFgLOiDbR77+yZPVmQMFnXOAU99qaA2G50=
Subject key identifier: 2E:A6:C4:9E:0B:28:48:10:26:47:06:93:F0:CE:A0:8E:63:6A:5D:4B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC5CA31E215458C43493B7CAFB2B2504E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LqbEngsoSBAmRwaT8M6gjmNqXUs.roa
Signing time: Sun 24 Sep 2023 06:04:37 +0000
ROA not before: Sun 24 Sep 2023 06:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:c5c9:eebc/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c5:ca:31:e2:15:45:8c:43:49:3b:7c:af:b2:b2:50:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 24 06:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ea6c49e0b28481026470693f0cea08e636a5d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:d2:0c:0b:31:e5:64:91:da:15:56:8c:46:
07:b3:ff:26:57:4d:ec:bc:a0:bc:99:0e:da:bd:d6:
f1:85:54:29:d2:49:83:76:72:ad:0e:51:1c:8f:79:
11:d2:97:ec:10:8a:25:5f:da:11:f6:3d:33:ef:26:
b8:c5:93:a5:96:46:a1:b9:a9:a9:6a:95:6d:9e:9f:
76:95:fa:04:0b:56:9a:69:b4:d6:23:02:94:f3:c3:
36:ff:f2:f9:74:ab:83:98:9b:19:fb:5b:2d:1f:5c:
c9:8a:39:b1:bc:eb:9d:01:78:df:b0:47:e8:8f:d0:
3a:b1:99:d8:83:9c:ce:8b:4e:7e:b2:b2:7f:0f:3a:
0f:55:4e:db:ad:32:a9:73:81:54:eb:48:f7:7d:f7:
55:08:dc:6f:9b:a6:de:3e:fc:20:66:24:1c:9a:f5:
9b:ce:68:13:e2:bc:64:fb:16:a6:79:e1:fe:b5:0f:
89:d8:60:18:6b:71:16:07:c4:33:c9:90:74:cd:98:
af:17:c4:63:b9:20:99:f8:4d:e9:52:f1:b3:4d:1c:
2f:87:15:a1:e0:e6:32:15:87:ac:3f:9e:e4:68:ce:
30:6a:e3:41:02:3e:67:f0:2d:1a:48:bb:2a:89:17:
e4:6a:d7:2d:10:c4:60:bb:68:33:49:10:df:dc:47:
d7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A6:C4:9E:0B:28:48:10:26:47:06:93:F0:CE:A0:8E:63:6A:5D:4B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LqbEngsoSBAmRwaT8M6gjmNqXUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cd:c0:5c:cc:2a:c8:a4:52:d8:d2:b3:85:b4:59:8a:89:6d:ff:
53:f9:50:98:75:14:1c:eb:07:f5:fb:d8:77:fa:1d:77:e0:20:
f4:b7:6d:33:cd:7c:8f:66:82:eb:e9:10:90:89:1d:00:09:3a:
a1:78:1b:86:fa:f3:c4:e3:c9:d8:fd:a0:e7:f9:d5:57:f1:49:
65:88:21:24:50:34:af:c0:c6:8a:42:fc:e1:71:7a:64:0e:db:
80:1d:73:80:47:51:d5:e3:b9:5b:d7:0b:2f:8f:75:be:ce:1c:
92:5c:7a:90:e8:fa:9f:47:e7:aa:74:c2:26:2d:b0:e9:fe:a1:
30:04:a7:de:23:55:8b:c0:c9:74:54:7c:43:8f:cb:f2:48:23:
15:8e:4f:0e:1f:99:24:13:5a:94:d8:38:1c:24:18:37:03:7d:
be:2d:d2:11:75:96:9a:39:96:47:1a:b3:e0:2a:99:57:e5:9c:
e6:eb:fd:fc:67:9b:24:91:ac:22:5c:cf:a0:6e:e8:6c:de:4b:
e5:4c:c6:72:43:55:26:f4:99:68:ef:5f:19:ae:3b:2b:7f:e6:
3c:a9:bd:a1:f2:71:a8:66:36:fd:29:77:53:d0:4e:f2:03:c8:
8b:fb:83:46:29:a4:78:44:4e:2d:a4:ab:94:b7:5b:04:7d:5b:
ce:14:62:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:35:05 2025 by rpki-client