Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LCLXmwTtxM3qx1kMjcNunitAwxg.roa
File: LCLXmwTtxM3qx1kMjcNunitAwxg.roa (raw, json)
Hash identifier: 6DB2G/Fqa7WNtTK6racgHYrTUjFRUKfigOaeBtXfoPI=
Subject key identifier: 2C:22:D7:9B:04:ED:C4:CD:EA:C7:59:0C:8D:C3:6E:9E:2B:40:C3:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7E71ABFF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LCLXmwTtxM3qx1kMjcNunitAwxg.roa
Signing time: Mon 25 Apr 2022 18:10:42 +0000
ROA not before: Mon 25 Apr 2022 18:10:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121378815 (0x7e71abff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 25 18:10:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c22d79b04edc4cdeac7590c8dc36e9e2b40c318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:ab:06:09:22:87:03:bc:40:ed:7d:d4:4f:
72:55:79:0b:55:ff:44:f4:a4:bd:67:b4:be:40:d2:
db:66:f7:f5:7c:4c:38:11:34:89:5a:d5:cc:e3:ab:
57:cb:10:58:e0:79:d5:ac:34:62:ba:cf:22:d3:77:
c0:f8:cf:0e:26:53:46:bc:40:7c:9d:6d:a9:98:e2:
71:84:9e:a8:98:1a:19:2d:18:59:ea:e6:7b:56:34:
7c:e6:ab:e0:c5:38:42:48:95:18:73:1a:70:03:58:
99:4c:af:d2:51:f9:9a:26:45:25:f5:7d:04:c2:3e:
3b:0c:81:91:23:f9:6b:d5:05:08:c9:7a:c8:fc:40:
e1:cd:d2:9e:ee:c8:eb:a8:de:e7:8d:69:39:df:f9:
77:0a:a0:56:f1:80:24:90:4d:ab:10:fe:7f:12:56:
6e:bb:2b:af:13:66:77:c4:93:43:46:00:51:90:48:
7e:25:13:4a:e6:7e:91:7e:a7:40:9f:76:34:19:9c:
ce:72:5b:f2:0f:e8:72:42:4c:15:05:4c:c5:01:8d:
5d:0d:9f:41:f6:2a:11:72:c5:9d:67:92:4f:38:a6:
c2:12:9e:09:a7:1a:79:41:73:c8:26:ae:1f:9f:cb:
37:60:42:6a:1e:d6:6c:55:d1:e9:ca:36:a9:ac:fa:
71:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:22:D7:9B:04:ED:C4:CD:EA:C7:59:0C:8D:C3:6E:9E:2B:40:C3:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LCLXmwTtxM3qx1kMjcNunitAwxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:24:30:98:22:7e:ea:0e:b3:21:03:4c:38:ca:0b:d6:f0:23:
94:80:65:a9:4a:0f:61:02:fc:e9:a1:82:54:29:f9:6d:bd:70:
01:22:e5:8e:e4:dd:95:53:57:6d:81:f1:43:8b:1f:60:c6:87:
46:03:47:a0:f0:da:44:b1:66:82:a5:e1:e2:bd:ce:07:3b:16:
f9:70:1d:68:c7:3e:3b:79:58:38:32:dd:4e:e2:ed:65:14:c6:
a8:fe:27:de:9d:17:7e:b1:1d:24:1f:e1:6e:56:8c:34:24:1e:
69:2d:cb:6a:7d:00:71:2f:27:c4:85:ee:b6:0a:54:28:7a:eb:
8a:05:cb:98:fd:ff:e8:c0:6b:84:64:c7:e2:41:b0:45:d9:12:
ea:b9:c8:af:85:65:2b:52:4f:d4:60:a3:03:7d:82:fc:d1:2f:
e4:e5:c8:63:9e:66:fe:bd:b5:12:c2:48:db:56:09:31:3f:b0:
c0:47:27:83:08:45:26:61:3a:ac:08:39:8b:45:1a:c5:33:8a:
9a:cd:8f:bf:52:ab:73:9f:d1:e5:52:ce:f2:b6:e0:b5:a4:d5:
5a:f9:f0:94:45:53:1d:e6:fe:c3:32:a1:32:4a:2c:1a:4b:47:
10:ed:88:19:51:63:92:1d:a0:3b:81:fb:e9:cc:eb:dc:bf:01:
56:f7:28:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:25:46 2025 by rpki-client