Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ltb-vY5bvb2RzwqkPADrF8e4__A.roa
File: ltb-vY5bvb2RzwqkPADrF8e4__A.roa (raw, json)
Hash identifier: L2jWPzE6hJtvgg5AE8+vXmiXJemRDNh+n2FJl+bNNnQ=
Subject key identifier: 96:D6:FE:BD:8E:5B:BD:BD:91:CF:0A:A4:3C:00:EB:17:C7:B8:FF:F0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B86E9440E8C4E62AF166FC89E56346609
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ltb-vY5bvb2RzwqkPADrF8e4__A.roa
Signing time: Tue 31 Oct 2023 18:05:16 +0000
ROA not before: Tue 31 Oct 2023 18:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:86e8:763f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:86:e9:44:0e:8c:4e:62:af:16:6f:c8:9e:56:34:66:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 18:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96d6febd8e5bbdbd91cf0aa43c00eb17c7b8fff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c9:3d:02:1c:79:cd:95:f4:9a:f3:0c:9f:af:
23:48:2f:a5:a7:b5:51:77:e1:4c:f2:f4:5d:64:ac:
e5:7a:43:bb:63:ec:7f:b7:50:28:78:04:1f:3a:9d:
eb:15:a3:4a:8e:ae:cd:14:65:7f:42:66:c4:5b:8f:
01:5b:bc:d4:f7:35:cd:83:99:7a:f7:ae:8c:07:14:
96:7c:54:2f:6d:95:d7:b0:0a:99:79:c3:e0:05:a9:
3e:91:63:e2:d1:c5:f8:06:d6:7b:66:9c:76:6a:1c:
a1:65:1b:0b:7b:22:f2:db:82:7c:75:dd:3b:44:b4:
31:07:e6:7a:2e:37:a1:b6:cb:71:a7:8a:b4:a8:2b:
54:34:49:b8:93:96:19:d6:ab:51:43:00:ee:b2:99:
80:b0:04:cc:ff:c8:58:55:ed:a3:11:b3:cc:7b:a9:
05:7e:44:a6:86:6e:51:73:1f:29:d0:56:a4:55:25:
37:81:73:05:22:45:5f:80:59:92:24:0e:9f:be:47:
d9:9b:bb:12:2d:ea:0b:32:85:17:ed:60:03:41:ed:
11:b5:78:a6:e0:5d:01:36:08:7c:2b:89:16:f7:62:
be:21:6b:74:c6:0d:ae:ac:7a:23:41:b8:1f:57:46:
5c:73:ab:4c:21:2e:e7:89:8d:1f:ff:1c:32:87:1e:
14:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D6:FE:BD:8E:5B:BD:BD:91:CF:0A:A4:3C:00:EB:17:C7:B8:FF:F0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ltb-vY5bvb2RzwqkPADrF8e4__A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:75:2d:79:e6:98:7e:f3:77:3b:ff:a9:00:de:b7:94:78:a5:
ae:82:b6:ff:fa:c2:db:1c:53:8e:d3:da:cf:6b:59:4a:3d:88:
96:26:3d:9e:f5:91:af:20:b0:ab:09:97:00:65:75:40:c3:ec:
bc:de:59:f9:9e:71:dd:9e:42:40:2f:92:02:72:21:43:53:fc:
fa:59:ad:3a:42:2a:68:f7:5f:e1:50:c6:65:b5:7a:77:84:01:
81:7e:f0:ed:6f:3c:7c:27:a5:34:6a:98:01:f6:e9:7a:6d:d0:
32:a6:dc:58:14:79:ff:70:6b:69:5c:20:03:22:48:bf:45:98:
db:ae:64:b6:36:53:01:18:ec:92:f1:8e:98:1b:aa:89:a4:5a:
32:19:dc:a7:3f:8f:d8:4e:e6:53:95:b2:d6:cc:0b:b9:76:f6:
b4:bf:3f:fb:c0:61:36:74:f4:a8:0f:51:b6:59:21:ae:64:62:
54:6f:22:55:8b:2a:a4:de:de:b7:33:67:07:d1:ff:76:47:dc:
da:4b:fa:3d:cf:7f:94:02:7c:49:75:eb:9e:da:6d:5a:22:af:
bd:18:ca:d9:13:50:64:cc:10:92:f9:97:7b:06:59:bb:96:2e:
91:ed:8a:d1:17:c7:97:d6:5d:b9:9e:bd:04:51:e5:64:2f:5a:
08:63:03:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:07:14 2025 by rpki-client