Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LGlakmou8qMGws8RNARrZY591tE.roa
File: LGlakmou8qMGws8RNARrZY591tE.roa (raw, json)
Hash identifier: jPoP05sgDg7DWY8TN3aTTvsUoFFfR1d11oRJy4x6Z6M=
Subject key identifier: 2C:69:5A:92:6A:2E:F2:A3:06:C2:CF:11:34:04:6B:65:8E:7D:D6:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181E0BABD3E2CEA104544DA7E64013304F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LGlakmou8qMGws8RNARrZY591tE.roa
Signing time: Sat 09 Jul 2022 02:12:23 +0000
ROA not before: Sat 09 Jul 2022 02:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e0:ba:bd:3e:2c:ea:10:45:44:da:7e:64:01:33:04:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 02:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c695a926a2ef2a306c2cf1134046b658e7dd6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9b:bd:f7:9a:9e:ad:29:e6:1f:de:46:83:ac:
ac:e4:2a:8e:44:4e:10:00:8f:b2:3a:7b:23:d8:b4:
b4:44:22:c7:62:4d:23:44:ad:58:6c:84:6a:fa:05:
07:55:99:b6:5f:e0:cf:3c:f1:d3:85:09:3b:ad:dc:
ed:99:a3:84:46:82:7b:75:58:f8:58:7b:e7:bd:a1:
a6:60:b1:4f:42:25:c4:07:5c:6e:a4:f3:8f:df:5a:
04:49:6c:83:db:b7:1f:b3:c7:32:29:6f:43:fc:5f:
f0:fa:79:d8:95:80:2c:cb:d5:f8:49:de:b5:87:a7:
76:39:06:34:70:fb:67:76:ad:a6:d9:e9:75:4e:35:
c8:27:a2:93:e4:0b:e0:9e:3a:a6:4b:38:f1:38:cd:
07:6c:43:56:9c:94:97:0c:1e:3c:c8:15:06:ee:72:
aa:85:b1:f2:d0:08:b8:be:a0:a1:08:df:85:f1:7c:
da:87:95:74:4f:0c:9c:25:f5:8e:fd:56:12:2c:66:
c7:3b:4b:41:94:a9:02:74:62:4f:34:d4:5a:46:5d:
20:b9:d8:5d:b8:90:7d:39:57:84:92:08:9a:e3:4f:
94:46:c1:e4:db:52:d0:d1:53:b5:b0:ea:10:bf:11:
62:23:58:83:77:eb:86:4d:98:9e:5d:18:79:96:cc:
e2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:69:5A:92:6A:2E:F2:A3:06:C2:CF:11:34:04:6B:65:8E:7D:D6:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LGlakmou8qMGws8RNARrZY591tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:d2:87:e4:8b:7a:ff:79:81:2b:b0:fe:66:a2:9f:03:7c:45:
51:03:a4:4d:a8:60:d9:c6:08:e9:46:e1:a5:1e:05:d4:37:9e:
f2:a2:da:b5:f4:01:c2:63:60:e2:87:58:dd:82:50:5e:8d:bb:
3e:53:a9:9d:83:ca:af:64:d6:d0:d6:f2:b5:20:d7:eb:ef:12:
73:cc:59:bc:40:66:30:74:48:b4:7f:81:c4:f0:11:f9:f2:57:
11:30:8a:88:fb:71:dd:97:b5:55:ff:20:23:36:3b:bb:3b:b6:
de:4b:78:55:64:79:cc:c1:d4:2a:10:9f:68:17:45:9f:e5:52:
61:a7:a4:5a:15:e0:7b:0c:ec:e3:ab:91:28:7e:ca:e6:a0:e2:
72:a1:0b:31:81:d6:18:67:af:36:5a:6e:33:33:fd:9d:1d:41:
04:35:cc:ca:4a:e5:a2:2a:82:b9:11:64:08:3d:50:f3:4e:38:
21:2f:7a:cd:db:7d:d9:f7:8b:9a:3b:2a:7a:b9:28:d3:b4:c8:
a8:09:10:07:54:1e:4b:88:c8:ef:5e:dc:80:77:21:ec:e8:6e:
9b:66:a8:e3:8b:6c:7f:de:64:1c:f1:2b:7e:23:50:56:4a:f7:
1d:78:10:0b:30:54:9a:48:89:dc:49:97:0f:43:55:c5:8e:d9:
29:55:27:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:48:39 2025 by rpki-client