Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/10LCBR9_GyhXWfX3IZDjnYX6BP0.roa
File: 10LCBR9_GyhXWfX3IZDjnYX6BP0.roa (raw, json)
Hash identifier: XttbevUpWCNIPy52H5eFIjpyMvw/6d/BhqWmM4Q/tKc=
Subject key identifier: D7:42:C2:05:1F:7F:1B:28:57:59:F5:F7:21:90:E3:9D:85:FA:04:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183E48F2AECC40C4B032D66E21C5CB0379D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/10LCBR9_GyhXWfX3IZDjnYX6BP0.roa
Signing time: Mon 17 Oct 2022 06:08:51 +0000
ROA not before: Mon 17 Oct 2022 06:08:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:183:e48b:4742/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e4:8f:2a:ec:c4:0c:4b:03:2d:66:e2:1c:5c:b0:37:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 17 06:08:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d742c2051f7f1b285759f5f72190e39d85fa04fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:d7:1c:ec:e6:c1:9b:ee:a2:22:df:18:70:
22:f5:49:f7:2e:9f:f8:6b:a8:41:43:0f:f7:07:21:
c8:e6:0f:d3:83:8d:b4:0d:12:26:0c:5b:36:05:27:
74:7b:f6:51:9a:0b:5e:b6:e4:cc:4b:a7:5c:3c:dd:
e4:d0:f6:fb:11:25:bc:73:f7:a8:ca:6a:2d:28:05:
1b:a3:74:45:c7:9a:a1:40:7d:97:84:03:f9:1b:c6:
22:b3:2d:31:47:29:bb:de:c0:ac:40:6b:01:db:35:
77:95:a9:c7:88:0a:74:fa:11:d2:f1:2d:fb:58:9b:
f6:e8:c6:06:0a:c0:25:9f:ca:05:8a:18:48:ab:67:
0b:ea:a3:43:3c:91:38:2e:13:4d:6c:f7:da:e4:c9:
2c:69:97:69:50:51:1d:f4:26:c4:d6:5f:6f:c7:10:
d1:4d:63:3a:0b:bc:19:7d:c1:4c:56:08:e9:ea:19:
86:fc:0c:4c:46:42:d7:d5:c8:89:72:45:a5:fb:48:
d5:3d:63:9c:0a:00:b4:20:bc:b9:79:24:e0:65:da:
67:48:9f:a4:ec:e2:7e:05:8e:9b:5a:f9:e2:d1:c3:
ce:d4:c2:23:d8:6d:c4:4a:24:44:21:98:b9:1f:6b:
26:0c:9d:bc:87:d9:b8:5b:a4:45:31:2f:66:92:ee:
7a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:42:C2:05:1F:7F:1B:28:57:59:F5:F7:21:90:E3:9D:85:FA:04:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/10LCBR9_GyhXWfX3IZDjnYX6BP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:26:10:73:88:da:5d:80:95:85:6e:bf:3d:47:88:45:eb:3a:
80:9b:4b:11:78:93:14:cd:f6:d9:47:85:5a:d5:39:72:2f:80:
19:a2:ee:f9:77:90:e1:2d:e9:02:04:5f:31:a5:16:e2:16:e2:
c9:cb:19:5e:64:7c:d8:2c:7f:fd:8e:d5:9b:d5:a4:79:ad:45:
fa:b7:be:03:08:28:76:1a:3f:65:06:2b:9d:c4:eb:62:8a:7f:
04:b9:2d:d9:bf:dd:f6:17:e6:e6:78:45:99:1f:a5:38:27:db:
09:7a:df:f6:8a:d2:b4:b3:03:a5:bd:40:45:1f:7a:a1:44:db:
56:9d:57:be:42:1c:2f:dd:8f:8a:33:5f:b4:b7:a7:87:50:0a:
d9:14:77:33:a0:48:2c:2a:15:23:68:97:4c:50:1f:a4:89:8d:
fd:e6:5f:03:00:46:2c:f8:b7:2f:8e:35:b7:f4:dd:17:9a:ae:
e2:4d:48:2e:05:89:a3:a5:86:a8:b2:d4:ee:99:66:c5:6f:d2:
ed:c3:15:28:b0:d5:aa:e6:c0:e0:96:2c:72:03:e7:4c:8e:c4:
a6:c8:8f:98:72:71:a7:4a:08:a5:df:44:eb:f5:6c:d3:72:91:
3c:43:6c:0a:e0:18:13:0c:36:82:af:6c:f3:88:a3:72:aa:f7:
c8:36:ba:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:05:52 2025 by rpki-client