Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L5aS6FGAhqBZ2rKy7L2qUhJ5_lQ.roa
File: L5aS6FGAhqBZ2rKy7L2qUhJ5_lQ.roa (raw, json)
Hash identifier: RG4LEc1yuH+sxS/k5JOyG6AhTlfBQLRtjttBLLBozsU=
Subject key identifier: 2F:96:92:E8:51:80:86:A0:59:DA:B2:B2:EC:BD:AA:52:12:79:FE:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01848FCEA77D7EDE9D291B5DDCC79AA9F326
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L5aS6FGAhqBZ2rKy7L2qUhJ5_lQ.roa
Signing time: Sat 19 Nov 2022 12:13:15 +0000
ROA not before: Sat 19 Nov 2022 12:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8f:ce:a7:7d:7e:de:9d:29:1b:5d:dc:c7:9a:a9:f3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 19 12:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f9692e8518086a059dab2b2ecbdaa521279fe54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c0:db:cd:d7:ba:a6:ea:32:27:e4:29:66:24:
f6:5b:d8:11:d8:ff:49:a8:36:e3:f9:6a:c6:c0:91:
89:c3:b5:5a:35:5e:95:a5:7d:2c:bc:31:b2:8e:a9:
1a:e9:b0:ce:40:09:90:85:3f:31:8b:1b:30:14:7c:
26:56:20:a1:f9:69:c4:51:7f:ac:d9:6d:a0:42:b1:
e2:3e:1b:97:5a:33:22:f9:ae:3a:05:e3:e6:ff:a3:
38:40:60:0a:65:f2:51:aa:fc:05:b5:be:0f:1e:ae:
ff:20:f9:83:86:f4:6d:21:7e:2e:22:61:be:e5:b5:
9a:da:e6:47:0f:b2:81:db:33:69:31:f1:d3:05:73:
26:ed:89:c8:df:11:ba:a7:5d:ee:83:6b:49:1c:fc:
e5:37:af:9a:bb:85:35:53:6f:4b:75:a1:e0:77:ae:
3e:f7:5a:d6:0f:08:e0:28:8d:13:2e:d0:c0:a3:37:
4d:91:c8:80:50:d5:33:b5:e2:66:5c:35:85:4c:92:
6f:08:ab:44:46:76:25:5a:32:bc:f5:e1:64:8a:13:
ef:e8:40:66:22:93:39:de:82:30:72:76:a0:59:79:
20:d7:5a:ef:bc:dc:d9:3d:98:be:9d:f0:34:cc:3d:
ce:0c:d7:ae:12:a3:bd:56:94:57:68:07:18:1e:b8:
38:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:96:92:E8:51:80:86:A0:59:DA:B2:B2:EC:BD:AA:52:12:79:FE:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L5aS6FGAhqBZ2rKy7L2qUhJ5_lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:9b:6e:de:eb:37:0e:55:46:43:c1:41:1c:0c:95:10:17:f9:
db:90:c2:b9:43:50:01:e6:c7:81:e3:b3:55:1b:2c:8b:d4:ee:
57:25:f9:d1:96:34:86:79:54:5f:12:ce:cf:b3:1e:38:77:e8:
95:ac:58:3c:cd:cd:4d:19:4d:da:d2:73:77:96:92:d3:af:43:
4c:f5:23:cc:ab:64:6e:23:5a:a1:17:47:b8:3e:b0:4f:34:7d:
15:be:d6:ef:0e:bc:17:99:07:58:a1:e4:e8:9c:fc:c3:61:25:
fc:ea:27:37:ba:1a:bd:75:38:77:06:af:e5:b9:dc:49:96:63:
ee:e7:c8:02:d3:98:11:5c:d6:c2:d8:0b:0c:82:c9:5a:90:4b:
40:35:f1:51:35:92:49:e0:b7:58:cf:a5:ee:55:89:63:f8:93:
13:07:36:0a:89:31:3a:ae:e6:85:76:e0:85:ab:4f:45:c0:0d:
33:fb:d9:fb:9e:46:d5:24:d4:fa:17:21:2b:f3:84:36:b4:40:
fd:76:fd:34:a7:cd:f7:e2:1a:3a:ca:6e:73:61:df:22:89:52:
6d:db:59:94:30:01:12:96:a2:24:42:24:bb:f9:2b:69:a9:21:
a5:a4:61:7d:43:ec:da:93:98:a9:37:4c:fb:33:64:a8:87:39:
2a:db:ce:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:29:43 2025 by rpki-client