Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LGwMkrzGIXGYl7HjXNwOlfYYv4M.roa
File: LGwMkrzGIXGYl7HjXNwOlfYYv4M.roa (raw, json)
Hash identifier: 8DeseHEpl5K09k/2qjcTs5cHi4BHpAH0XsK86zxJy7g=
Subject key identifier: 2C:6C:0C:92:BC:C6:21:71:98:97:B1:E3:5C:DC:0E:95:F6:18:BF:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A9B08ED5C1A069F1EC04F2333E5631BC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LGwMkrzGIXGYl7HjXNwOlfYYv4M.roa
Signing time: Mon 31 Jul 2023 02:04:27 +0000
ROA not before: Mon 31 Jul 2023 02:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a9b0:6f45/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a9:b0:8e:d5:c1:a0:69:f1:ec:04:f2:33:3e:56:31:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 02:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c6c0c92bcc621719897b1e35cdc0e95f618bf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:fb:88:89:f1:73:63:66:f5:ae:42:4d:aa:
7a:ee:87:82:60:01:9d:e7:94:6e:27:5a:84:cd:4e:
bb:3f:7b:21:25:e7:a8:25:d8:db:8e:ec:41:27:ab:
5f:d1:4f:15:1a:e9:20:a9:4d:d3:42:b8:27:59:e2:
f7:e9:65:5c:34:4e:97:8a:7c:a6:df:9d:0b:60:f6:
11:f1:bb:c9:a4:a0:a2:40:fb:b8:fc:89:1a:f4:8b:
55:d2:87:e3:e6:7e:20:9e:55:a8:99:84:5f:92:46:
b7:8a:2b:55:b8:98:72:14:60:97:83:ef:0b:0d:5d:
09:fe:25:76:cb:80:77:50:40:d9:fb:5a:1f:06:1a:
0d:ed:29:cd:f2:a3:fc:fc:a8:f8:a6:c3:91:8b:bd:
cc:93:ca:fa:64:f9:e2:6b:a0:95:c7:23:d5:1b:a0:
96:5f:51:f6:91:87:86:5b:4d:8e:62:ca:20:db:79:
4e:7a:6a:a9:44:cc:19:85:b8:28:cf:8c:e5:06:05:
13:79:a4:79:26:7c:f7:9d:ca:f9:0d:0b:d3:4b:70:
e3:0e:15:35:42:f8:00:49:c7:48:55:d7:43:f6:2a:
1e:40:be:0e:bc:cb:4f:e7:5d:85:74:68:5e:a3:02:
2b:df:1d:5b:64:a1:81:2d:4b:85:53:93:08:4a:29:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6C:0C:92:BC:C6:21:71:98:97:B1:E3:5C:DC:0E:95:F6:18:BF:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LGwMkrzGIXGYl7HjXNwOlfYYv4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:44:e1:c7:e0:dc:a7:db:2c:9a:02:d3:89:c6:ca:61:37:69:
2c:3b:a9:c5:81:5e:62:d6:f7:d3:83:e3:75:b5:36:23:ed:08:
82:09:55:8e:54:1d:20:fa:3b:2b:63:10:29:79:68:09:6a:af:
a8:85:7d:86:f3:23:5f:8b:e1:21:25:48:95:24:69:58:3c:cc:
cb:6b:49:7f:4d:9e:d9:3e:4c:b0:20:4f:08:ae:b9:1c:55:0d:
e0:db:81:a1:82:be:7f:d5:c9:72:36:0a:cb:5b:b2:65:f2:ba:
c1:1c:cb:0b:b5:d2:8d:2b:bb:16:38:b6:41:dd:0f:b3:89:91:
cf:bb:04:c7:f1:28:7e:32:c8:2f:a5:ae:39:2f:f7:31:2d:d3:
d1:e1:59:02:88:d5:d7:5b:34:2c:a4:3f:2f:8a:bc:b9:85:70:
29:bb:0e:dd:96:a8:14:15:de:fd:fd:ef:3b:dc:c5:b6:8a:0b:
c0:88:23:35:49:da:6e:15:5e:cd:14:3a:a6:57:5d:ec:dc:d6:
70:1c:25:48:62:16:0d:2a:26:d3:a0:92:a7:73:cc:83:f9:27:
00:52:9e:34:71:e8:61:5a:7b:e0:f5:2c:28:09:32:2d:f5:67:
3a:7d:c7:b9:09:ad:dc:9b:cf:6e:59:2e:91:72:3a:59:0a:72:
3f:6e:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:10 2025 by rpki-client