Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lxdtuSGTEpqBqtMxi1WOSTBbBII.roa
File: lxdtuSGTEpqBqtMxi1WOSTBbBII.roa (raw, json)
Hash identifier: wbIe6BRtkHN0NnQSk8y9aRAYbFC2ohi1/uRKJzbxtVU=
Subject key identifier: 97:17:6D:B9:21:93:12:9A:81:AA:D3:31:8B:55:8E:49:30:5B:04:82
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B04A94490D97479129AD612CE3CEFAB69
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lxdtuSGTEpqBqtMxi1WOSTBbBII.roa
Signing time: Fri 06 Oct 2023 11:04:43 +0000
ROA not before: Fri 06 Oct 2023 11:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:4a9:740/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:a9:44:90:d9:74:79:12:9a:d6:12:ce:3c:ef:ab:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 6 11:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97176db92193129a81aad3318b558e49305b0482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:37:36:eb:31:6f:92:0f:1a:7e:e6:2a:38:bd:
71:d0:50:f5:16:a0:a0:66:bd:f1:e9:6a:cc:10:8a:
5b:74:de:de:6c:00:6a:b7:b5:02:5c:53:cf:31:a3:
ed:8c:73:f4:35:8c:d6:2e:2e:82:7f:cc:15:98:05:
37:de:07:bd:b1:2d:ab:d9:e4:79:c3:06:3a:65:b4:
4a:91:de:3e:86:9a:ef:37:20:97:cf:6a:e7:6e:9a:
68:75:d3:d0:1b:85:b2:54:53:fb:35:1b:ae:ae:bb:
4d:ea:a4:21:17:42:85:e8:b3:6c:cd:db:36:82:3a:
33:f7:3c:cc:4c:bc:0d:d9:e5:b0:22:ed:b8:98:e6:
98:7b:b9:4e:a5:b7:52:22:65:05:e5:91:35:fc:91:
42:f2:38:ba:da:8a:7e:7f:ea:f9:58:f5:12:5a:53:
21:12:c7:5d:ea:98:94:12:20:04:71:f7:a4:7e:c1:
fa:b0:cd:7d:af:15:f0:0f:4d:06:16:2d:b7:26:9c:
aa:d3:85:90:75:5e:d0:d7:df:e2:83:9f:13:06:dd:
7f:35:66:b1:85:69:51:7e:61:3d:e0:75:d6:c5:47:
8d:86:f1:5f:93:7a:2e:03:a9:a4:b9:a5:b5:bf:ca:
0c:48:21:d0:e0:1c:92:62:e0:ab:da:9d:b5:87:3e:
96:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:17:6D:B9:21:93:12:9A:81:AA:D3:31:8B:55:8E:49:30:5B:04:82
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lxdtuSGTEpqBqtMxi1WOSTBbBII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:58:3d:df:9a:de:9b:ec:d1:80:7a:13:19:92:a2:43:85:db:
21:37:19:01:c5:42:5a:0f:41:05:96:fd:e7:cf:33:45:d1:38:
e8:16:cf:e8:93:90:22:53:f5:a4:13:ca:6e:37:10:c6:16:51:
60:4d:af:de:c8:e6:39:ac:21:21:6d:37:25:43:db:dc:3a:e9:
ef:04:1d:5c:d9:59:a9:4a:a3:c0:df:d6:80:bc:12:a7:e1:05:
90:7a:f2:0c:a3:2e:fa:6b:cf:b4:30:01:22:e4:db:1c:75:da:
3d:12:76:15:b9:1b:5c:b3:e2:bf:10:41:9e:0e:b1:c0:e2:0d:
2f:2f:2a:8f:06:d4:fb:8d:de:f7:b6:b9:40:f9:c4:04:03:e0:
b1:04:a9:0d:5f:ec:c4:a8:c7:ec:e0:78:57:d2:78:2d:c3:e1:
06:dd:b6:39:ad:94:97:27:10:6a:fc:0f:5d:56:ed:56:7e:8e:
32:88:e9:1b:27:43:be:90:bf:cf:48:5c:88:85:14:16:0d:76:
7c:ef:c5:d9:89:b6:26:71:a2:b2:4b:d9:6c:7f:fc:bb:39:e9:
4b:35:b4:c5:01:75:6b:2b:80:d7:96:9b:4b:25:61:11:fd:b0:
61:46:66:24:e5:22:07:a3:6a:8a:8c:4c:ce:ba:fa:73:f4:2f:
fa:da:61:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:39:49 2025 by rpki-client