Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L0aYstDCunlMU6O_QVnzj4QFzLw.roa
File: L0aYstDCunlMU6O_QVnzj4QFzLw.roa (raw, json)
Hash identifier: TpOx0+hG9sp5w5wOgiBCeJUYTkaXjzzNGXjI/P0W5Yc=
Subject key identifier: 2F:46:98:B2:D0:C2:BA:79:4C:53:A3:BF:41:59:F3:8F:84:05:CC:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182C8B364156650E2A7270B5F8A85A7504F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L0aYstDCunlMU6O_QVnzj4QFzLw.roa
Signing time: Tue 23 Aug 2022 03:16:15 +0000
ROA not before: Tue 23 Aug 2022 03:16:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c8:b3:64:15:66:50:e2:a7:27:0b:5f:8a:85:a7:50:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 03:16:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f4698b2d0c2ba794c53a3bf4159f38f8405ccbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:76:7a:63:8c:a4:67:ed:86:5b:88:08:3f:
47:0a:ea:c7:00:ed:0e:27:9d:81:57:13:7b:14:cc:
70:c6:c9:b2:5d:57:14:1f:91:ca:df:14:1a:25:12:
0e:1a:d7:50:fa:44:a8:ac:38:b8:ee:99:d2:df:1e:
3d:77:e1:30:ff:82:dc:94:7b:97:e3:ca:43:b6:59:
97:18:d1:3a:45:b8:6b:ce:84:45:dc:c5:65:3c:a4:
72:cf:d7:e6:53:cc:8c:52:31:ff:b0:f1:5f:9a:9f:
2d:8b:e7:f1:4f:a8:19:33:20:32:fd:bf:03:0e:24:
9f:82:9f:ed:91:70:40:89:2a:5d:31:d5:3f:fe:45:
a3:9e:c5:db:db:b2:27:58:a5:03:1f:4f:5f:1f:f6:
63:ff:48:50:89:92:1d:3a:70:dc:1c:7f:dd:a9:1e:
e7:2c:6c:6d:02:d8:8e:0f:f4:6a:3d:a7:c5:57:f8:
18:53:44:25:3d:49:19:ee:d9:e0:d7:d7:97:a1:e5:
46:54:d2:a6:4e:36:ab:3e:3a:68:2f:d9:14:0a:63:
a6:88:ef:b7:be:2b:87:eb:a3:32:52:4e:2e:44:3c:
22:ba:f2:33:01:b0:bb:9e:2e:50:e9:a1:f6:c6:e1:
d9:ab:57:6d:f9:7f:7b:84:ba:47:8d:be:d8:61:11:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:46:98:B2:D0:C2:BA:79:4C:53:A3:BF:41:59:F3:8F:84:05:CC:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L0aYstDCunlMU6O_QVnzj4QFzLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:a9:f7:9d:04:b7:3a:b8:1d:23:74:84:54:d3:56:f7:3e:23:
d5:d1:dd:c6:6e:63:64:56:e5:5b:f3:89:6e:80:2e:47:88:54:
cf:73:5e:01:98:1d:41:06:5e:45:e0:fd:93:28:cb:fa:47:43:
ce:f6:2e:59:1d:0a:d0:94:a7:00:67:e0:95:15:ca:f1:18:0d:
9c:6a:1d:2e:5b:e7:cd:53:f9:85:5f:dc:6e:01:f8:cc:64:25:
f7:3f:21:ac:88:20:4f:b8:63:9a:23:5d:4e:b2:11:58:b3:5c:
e0:ec:6a:f1:ac:96:cd:f6:31:af:21:1b:82:4b:cc:ae:13:70:
3b:51:09:68:a3:3d:50:09:df:5f:8a:4c:14:4b:0e:c0:d8:a5:
7f:9d:f2:d9:84:aa:33:64:9a:c7:68:ec:94:25:e2:47:51:72:
e2:e3:89:fc:e3:11:4c:94:07:de:2a:36:80:aa:65:65:b5:71:
f9:90:e7:ed:08:6d:17:40:43:13:21:37:ae:ab:c5:9b:75:b3:
78:a4:70:81:4a:42:a2:f9:70:05:fd:2b:8d:af:0a:fe:21:bf:
84:c9:71:05:ee:9b:2e:86:81:1e:7e:11:67:79:bd:ae:64:66:
4b:be:b6:ec:4a:4e:5e:62:18:b5:46:81:8d:5b:bc:ed:37:26:
34:f5:29:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:22 2025 by rpki-client