Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LBfr4hehcX26Ukx5eUgcaQJjwvM.roa
File: LBfr4hehcX26Ukx5eUgcaQJjwvM.roa (raw, json)
Hash identifier: Mc50j4Nji4HFgLnNFPN0k01gShDQVGyhCYaTKyC/r0g=
Subject key identifier: 2C:17:EB:E2:17:A1:71:7D:BA:52:4C:79:79:48:1C:69:02:63:C2:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182F1E83299C6FC8F6D209342FCFB8CB73E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LBfr4hehcX26Ukx5eUgcaQJjwvM.roa
Signing time: Wed 31 Aug 2022 03:18:22 +0000
ROA not before: Wed 31 Aug 2022 03:18:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f1:e8:32:99:c6:fc:8f:6d:20:93:42:fc:fb:8c:b7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 31 03:18:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c17ebe217a1717dba524c7979481c690263c2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d8:3f:95:b3:43:68:67:f0:37:e6:b2:76:17:
71:64:9b:94:bd:9d:13:df:63:78:7e:04:e3:90:74:
2f:0d:cc:2b:1d:ba:99:79:85:6e:dd:22:72:27:63:
d9:bd:3c:06:39:60:d0:34:43:14:13:72:a0:a8:d4:
fd:63:53:dc:fe:69:8c:e5:a0:da:f2:e8:f9:d9:a5:
95:4c:2e:3f:82:16:52:70:b4:ba:1d:ab:12:cb:d5:
20:f0:ab:89:47:19:0f:81:42:30:c3:af:9c:23:20:
94:cf:b4:ec:e0:99:55:47:5a:ec:07:fe:47:bf:6f:
8d:26:99:c0:a9:2e:9f:e4:40:b4:cf:8b:0e:16:df:
b3:a3:9a:b2:f4:19:60:d0:b4:e3:86:57:40:0c:9d:
3a:a7:c1:1d:8a:8e:2f:08:17:37:6e:fd:85:42:d0:
38:fb:6b:21:80:f7:43:67:11:9a:e9:01:9f:87:50:
60:f5:a0:59:90:f6:65:46:0f:3a:a0:15:64:a8:b4:
a6:b0:f1:20:e0:cb:ab:90:46:00:1e:56:8e:1b:7b:
08:29:3e:13:01:d4:7d:d0:b4:81:6a:8b:c4:40:cf:
49:60:5d:b3:eb:48:c4:21:74:84:54:6f:03:f2:d7:
9b:14:b0:ec:05:e6:46:3a:25:fe:89:39:1f:f3:30:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:17:EB:E2:17:A1:71:7D:BA:52:4C:79:79:48:1C:69:02:63:C2:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LBfr4hehcX26Ukx5eUgcaQJjwvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:13:8a:fe:fc:19:5b:e1:4b:01:69:23:41:fe:0f:9f:a0:b5:
79:b6:c8:c4:f3:7c:18:d4:9b:37:8d:e7:1b:67:43:3c:72:d5:
6d:6f:f5:89:d8:ac:d8:c5:8b:12:36:ed:7b:4d:63:ab:dc:9a:
82:ac:57:c7:74:84:3a:45:6f:06:e6:24:64:db:5a:0e:66:b1:
78:d6:5f:bc:4d:3d:52:87:6c:11:78:53:0c:05:55:81:38:71:
1c:78:5e:d6:b0:b5:e8:4a:56:d4:69:99:74:5e:d1:f9:16:cd:
4d:b6:49:45:fb:aa:5a:bd:76:73:14:28:65:45:46:1d:5f:27:
8b:7c:c7:dd:c2:1e:2a:1d:8c:2e:dd:f1:f9:30:c1:85:0d:3b:
9e:1d:0d:3c:23:c8:41:32:c7:3e:c5:5f:2a:99:8a:19:0c:32:
b9:92:3c:69:5d:b7:cf:96:b2:ed:8d:ce:dd:a1:3f:83:e6:3f:
9d:63:af:eb:dd:3c:4d:4d:82:dd:21:5b:07:e6:9f:16:70:eb:
97:76:3b:61:55:ca:53:f8:2a:f8:5e:bd:35:94:42:ef:4e:ce:
e0:49:85:f6:16:2d:9d:5b:e7:3a:12:3d:8f:b9:9a:06:fe:68:
ad:1a:c2:fe:64:61:47:01:13:b3:32:cd:b5:6e:a9:5c:6f:e9:
2b:78:2a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:52:50 2025 by rpki-client