Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LB1UaPzifPwfOQ_SCxr7PYq4V8k.roa
File: LB1UaPzifPwfOQ_SCxr7PYq4V8k.roa (raw, json)
Hash identifier: zL06nHTetVi1JbkISMkNxd0NLlmLIgo95GP1n5A6ax0=
Subject key identifier: 2C:1D:54:68:FC:E2:7C:FC:1F:39:0F:D2:0B:1A:FB:3D:8A:B8:57:C9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186507D95F1AEBE65DF39E4ADCD20B2E22A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LB1UaPzifPwfOQ_SCxr7PYq4V8k.roa
Signing time: Tue 14 Feb 2023 15:14:12 +0000
ROA not before: Tue 14 Feb 2023 15:14:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:7d:95:f1:ae:be:65:df:39:e4:ad:cd:20:b2:e2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 15:14:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c1d5468fce27cfc1f390fd20b1afb3d8ab857c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:a7:b7:43:95:94:34:d5:ad:94:22:80:81:
1d:e1:f8:e5:7b:e6:0d:43:51:0a:2f:d4:ce:4b:60:
39:3a:de:ac:c5:f9:07:3e:08:0e:8c:64:84:09:e0:
80:ea:88:b8:ce:97:97:fa:b9:5c:73:81:ce:05:27:
64:57:c2:f0:7f:86:06:be:dc:ab:f6:82:d8:3f:b4:
c1:1a:19:75:8f:4d:66:1d:90:25:c8:15:ec:43:3d:
cc:fc:ed:50:11:f3:80:6a:74:5c:ea:45:78:34:e8:
fb:7f:47:33:0e:68:16:37:14:52:7e:bf:30:bb:8a:
a4:0f:77:5f:67:67:ad:40:4e:4c:95:81:b4:36:80:
ae:f5:2f:bd:5f:92:89:7b:cc:0f:01:f2:fe:e1:63:
96:83:61:4a:84:ce:ad:8e:4d:df:b9:d7:52:6d:8d:
1f:5a:65:60:c9:06:bb:bb:ca:44:0b:1f:b4:28:bd:
d1:06:1c:e3:7c:73:c1:52:2c:68:a9:e0:84:82:76:
94:df:09:d7:cf:57:14:34:c7:5b:f0:f3:b2:79:fe:
1a:44:92:9b:d3:70:9a:a8:5f:b9:4a:d1:89:3e:0e:
56:72:c4:25:ea:0d:8f:6b:05:33:f2:0d:67:3e:30:
50:39:d2:14:0c:6a:d2:4e:f4:ae:9e:d0:7e:fc:31:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1D:54:68:FC:E2:7C:FC:1F:39:0F:D2:0B:1A:FB:3D:8A:B8:57:C9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LB1UaPzifPwfOQ_SCxr7PYq4V8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:cb:36:c8:3e:34:af:f0:ee:e6:97:5b:56:c2:80:34:16:9c:
7f:3a:64:f4:c4:dd:89:87:2d:6b:da:88:4f:83:b1:42:c8:c6:
34:a5:5e:f9:d2:66:0b:52:c9:74:b1:f1:98:85:d3:49:32:94:
97:4e:a7:eb:8d:a0:ba:a1:57:44:cc:8f:af:4e:0f:9b:a0:f4:
ac:40:22:83:0d:63:cb:b5:7d:51:5a:88:82:3a:6e:cb:99:c1:
9d:da:a4:1c:f5:2f:11:59:d6:cd:ea:35:a2:0a:e6:7b:9e:3f:
1d:af:65:4c:f9:52:15:02:89:43:64:8d:10:31:af:cf:89:0b:
65:2a:1d:3c:a9:f8:cc:4d:60:66:58:c9:ce:54:2e:94:2f:93:
96:09:9b:62:06:5f:8c:97:94:2f:9a:a7:59:c4:13:2a:49:24:
d7:ee:f7:a0:20:1d:b1:a8:df:c9:84:84:7a:5b:0b:1a:a6:ed:
bc:ae:cf:cc:fa:b4:d4:a6:6a:0a:61:5d:9f:6c:ce:b5:4b:f9:
9b:a6:9f:32:5b:0b:7f:58:fc:6a:cb:d5:26:85:bf:51:62:cf:
28:1e:05:62:94:ba:71:f2:3e:f4:18:4b:6e:2c:6d:98:10:9b:
42:57:78:51:f5:53:85:09:54:2f:3d:1f:dc:c6:91:43:79:4d:
55:e6:15:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:35:12 2025 by rpki-client