Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LDPMOSjyorXBJGnbAoIn2f4y92o.roa
File: LDPMOSjyorXBJGnbAoIn2f4y92o.roa (raw, json)
Hash identifier: Vw16Rl7nDbUAbFDF2cLNDSfswpYOgsn2FFLOV3vBOkk=
Subject key identifier: 2C:33:CC:39:28:F2:A2:B5:C1:24:69:DB:02:82:27:D9:FE:32:F7:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3304AE9F460B51247A4CD478597CD5FD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LDPMOSjyorXBJGnbAoIn2f4y92o.roa
Signing time: Sat 26 Aug 2023 18:04:19 +0000
ROA not before: Sat 26 Aug 2023 18:04:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:3304:9a79/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:33:04:ae:9f:46:0b:51:24:7a:4c:d4:78:59:7c:d5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 18:04:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c33cc3928f2a2b5c12469db028227d9fe32f76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7c:1e:10:0d:91:16:ca:02:3a:22:10:0a:a8:
94:1f:fc:fc:2a:1b:74:e8:d9:08:b8:82:5b:28:a7:
90:8b:b8:02:fb:b2:1d:30:c5:ec:6c:e5:d4:bf:65:
d3:c7:88:ab:29:15:4e:01:a6:66:a7:83:cb:4e:00:
91:aa:b8:b8:b5:b7:fc:92:c5:f3:59:9e:b4:d5:23:
8d:14:2f:b8:ff:c2:af:af:5e:1e:99:6e:ae:42:d8:
88:46:d9:ed:0b:2d:83:46:de:58:d9:ff:d7:4f:8c:
1b:a7:b8:0f:45:7f:f8:fb:d2:26:36:76:0a:65:e2:
ef:22:ef:27:74:f6:44:7b:1c:cd:97:e3:2a:0c:13:
1e:ca:bd:c7:d1:1f:0b:ed:60:1a:ce:d0:9c:89:9d:
09:61:d5:f5:34:65:05:19:fb:ba:5b:d8:e6:89:5f:
c1:8e:01:fe:d3:41:f1:c0:83:bb:1a:69:1d:1f:96:
98:e6:06:25:b1:c0:d3:0b:38:a7:d0:a0:9f:11:b5:
25:9d:a3:77:e2:0f:29:2b:e1:7c:79:40:18:fc:a6:
17:9c:bc:83:1a:bf:10:0f:1a:17:1b:ed:05:46:30:
32:e4:c6:cd:a5:ef:a2:2b:12:57:11:22:f7:e7:69:
16:3b:c0:cb:de:43:f1:87:08:6b:ec:7c:26:d7:15:
64:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:33:CC:39:28:F2:A2:B5:C1:24:69:DB:02:82:27:D9:FE:32:F7:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LDPMOSjyorXBJGnbAoIn2f4y92o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:8e:9d:15:cd:63:e8:e8:5a:58:da:47:9d:b2:86:b6:cd:f6:
07:e0:5a:59:e8:4d:84:52:35:e1:56:9d:62:bc:21:df:12:22:
da:4b:e7:c2:48:90:32:0e:7c:06:e3:6b:9b:6d:5b:46:6c:f8:
ec:ed:fd:ed:d9:07:41:87:cb:5f:da:db:7d:f7:3e:34:c4:a2:
ab:1c:99:7a:c4:8e:84:77:87:e9:89:a0:3b:28:88:1e:11:ac:
16:ec:e1:20:9f:75:2d:a4:93:16:e1:eb:3e:8f:80:40:e2:47:
aa:15:86:a7:5c:04:51:9d:51:67:ea:0b:fd:a0:3c:37:7d:98:
cb:68:cf:35:09:af:89:8e:be:2d:f7:dc:3b:ad:79:87:52:b1:
c5:2b:c0:b9:69:2e:fa:ef:f8:90:7b:1c:a5:2c:83:9c:4e:8c:
d5:8c:cc:6b:28:40:f0:66:0b:f4:c4:62:e8:ce:87:45:ec:c5:
bf:bc:c4:a7:a7:99:f9:ca:86:60:f1:f1:5a:12:35:ec:65:b9:
a2:29:06:99:ba:f4:b6:23:58:49:95:a5:fc:4e:4c:ac:44:89:
81:e3:ef:fc:a5:0e:81:61:d5:d0:e8:4e:2e:8d:a8:29:5a:8d:
ac:c3:07:9f:25:a8:2f:32:fa:b1:bc:b9:4e:e5:cb:04:fc:f6:
92:e8:7c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:11 2025 by rpki-client