Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LwGap47YK1PmTmWFMYCfKAXBuhU.roa
File: LwGap47YK1PmTmWFMYCfKAXBuhU.roa (raw, json)
Hash identifier: o30RRPL0Syp3qRmAd1m/D9jkT4Pm0W+oSbHP5W6kdqE=
Subject key identifier: 2F:01:9A:A7:8E:D8:2B:53:E6:4E:65:85:31:80:9F:28:05:C1:BA:15
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0C62CE3FCDD380A713B3C1BFDD4319DC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LwGap47YK1PmTmWFMYCfKAXBuhU.roa
Signing time: Sat 07 Oct 2023 23:04:43 +0000
ROA not before: Sat 07 Oct 2023 23:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:c62:5e16/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0c:62:ce:3f:cd:d3:80:a7:13:b3:c1:bf:dd:43:19:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 7 23:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f019aa78ed82b53e64e658531809f2805c1ba15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:af:23:25:d4:c0:17:fe:45:8b:bc:4c:2c:
1b:48:58:96:cf:c4:ee:cc:f1:a1:83:98:00:d4:b6:
d0:82:94:cf:be:a6:25:c8:38:e2:06:6f:63:bf:bd:
36:c8:1d:a7:bf:a5:b8:35:3f:10:1d:8c:21:39:af:
bf:52:32:62:18:42:7c:b0:37:f4:a0:3e:18:21:4d:
62:dc:36:4b:6e:80:dc:76:32:03:24:27:16:1e:9d:
90:84:b5:14:c7:8c:25:f7:9c:68:15:09:ac:9d:2b:
30:ff:39:b8:3e:06:c9:c1:fd:ad:e4:ac:dd:05:cf:
be:a6:7d:e8:a4:80:c4:e7:a1:c8:35:ed:98:5a:aa:
c0:6a:cf:3f:3d:e7:ca:f3:08:33:e7:0d:d5:24:99:
11:6b:09:11:58:5a:c8:46:53:3c:f2:29:09:bf:2b:
5b:1a:1a:00:a2:68:70:94:0a:f5:f0:25:af:6c:80:
0c:f5:53:cb:02:2f:0a:63:67:ac:0b:93:1c:bd:b9:
b8:6b:bb:b8:eb:20:33:63:d8:8c:76:9c:70:d6:38:
94:fa:7d:ca:64:36:b1:fd:d6:71:67:e0:e7:91:2f:
ca:2e:1d:50:ad:40:45:43:a3:6e:8f:1f:10:9e:ee:
f4:74:e7:d6:a6:7b:55:f5:93:e0:a3:4f:30:00:29:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:01:9A:A7:8E:D8:2B:53:E6:4E:65:85:31:80:9F:28:05:C1:BA:15
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/LwGap47YK1PmTmWFMYCfKAXBuhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:5f:f2:26:cb:18:ec:15:e5:fd:b2:7e:b9:81:0e:82:4e:60:
51:78:21:0a:51:e8:ab:53:26:fa:97:09:0b:45:78:ca:70:34:
4a:5b:56:0b:1a:5d:cd:fc:29:3f:0f:11:93:41:1e:f1:2e:4f:
c9:35:cc:6b:a6:6a:4a:fe:b2:30:56:02:a4:28:b4:cf:46:78:
ee:29:26:00:8c:25:7d:79:89:23:91:d4:60:92:0b:c4:cb:79:
cc:82:6f:55:43:84:32:1d:18:e7:36:29:2d:69:e1:d2:22:eb:
32:6f:b9:02:6e:88:a1:df:5b:14:f3:17:f4:ce:98:97:62:85:
30:2c:02:91:36:26:d7:3f:de:b5:e8:30:08:51:0a:1c:61:13:
7d:c5:59:18:18:0e:fb:4f:f2:60:55:99:ff:2f:ed:ed:41:9a:
98:08:80:f0:b1:c4:cd:b5:8b:ad:cc:18:05:ee:0e:8d:47:a3:
15:bb:f4:59:6d:19:f0:37:c5:00:59:9f:6a:75:17:5f:3d:8b:
a9:db:6b:86:54:f4:55:93:b4:43:ab:e1:2f:4c:c2:b7:22:1c:
a0:83:49:ea:e4:a0:63:64:51:82:9a:a7:01:c2:7e:96:a6:c8:
f3:b7:13:ef:c2:6c:a6:6f:cd:c8:9f:6c:2b:c4:5b:c1:ba:74:
21:77:bf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:41:08 2025 by rpki-client