Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LHM1jbL-0wUZU5DnM7nXVdVW6F4.roa
File: LHM1jbL-0wUZU5DnM7nXVdVW6F4.roa (raw, json)
Hash identifier: RUbsgbzhCTR2u1KdlMFeuPXXS+11y/WOPE7Tf1G3w9U=
Subject key identifier: 2C:73:35:8D:B2:FE:D3:05:19:53:90:E7:33:B9:D7:55:D5:56:E8:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183DA850E5CE08ECD1A17F674B973E52AC4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LHM1jbL-0wUZU5DnM7nXVdVW6F4.roa
Signing time: Sat 15 Oct 2022 07:21:36 +0000
ROA not before: Sat 15 Oct 2022 07:21:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:da:85:0e:5c:e0:8e:cd:1a:17:f6:74:b9:73:e5:2a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 15 07:21:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c73358db2fed305195390e733b9d755d556e85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b8:5f:0c:ee:45:ad:5d:4f:49:af:8f:48:55:
89:50:3c:82:bf:81:b5:01:92:63:7b:95:6e:f5:56:
c6:7c:7e:1c:c1:88:18:f0:f8:3f:57:49:25:26:b1:
2b:18:78:c0:d4:5a:31:08:58:bb:c8:36:5a:7e:55:
88:33:97:81:73:10:87:5f:8e:c8:8a:36:f5:2f:3b:
bd:a4:fb:7f:28:a0:fc:7e:c8:51:1a:3f:e3:4c:06:
35:20:72:f0:77:3e:21:f8:aa:e7:7d:9d:78:0d:e0:
45:30:94:8c:44:68:2c:32:b7:e0:91:44:99:49:f7:
78:b9:bd:8f:88:15:e9:38:c0:db:02:1b:5e:77:13:
4f:6c:68:58:4a:4d:05:50:25:6c:61:6d:d7:f8:db:
72:42:2f:92:e5:e3:de:92:cb:d9:30:97:e6:e9:96:
ee:36:22:ea:9a:6b:a8:8a:6f:5c:d8:30:80:60:a8:
c8:21:d7:55:de:a7:4d:21:3e:65:38:54:28:3b:63:
5e:3c:b9:ee:4b:70:0f:40:98:4d:9e:1f:4d:43:4f:
4c:e8:ad:05:61:47:4a:c4:d0:b9:9f:51:e8:d0:6a:
c9:8e:1d:2b:ee:f3:4f:fb:1c:97:9c:66:b2:d8:93:
59:6b:96:bb:45:fa:9f:b9:3a:41:f9:15:ef:40:b4:
05:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:73:35:8D:B2:FE:D3:05:19:53:90:E7:33:B9:D7:55:D5:56:E8:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LHM1jbL-0wUZU5DnM7nXVdVW6F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:93:56:40:f9:50:81:e6:c0:3b:6c:5b:a1:6b:1a:86:06:b8:
9c:d1:4b:13:a9:32:85:2a:81:6b:92:b8:52:a9:d3:e2:e2:c1:
17:02:ef:37:fe:c6:3b:95:b1:fb:94:f4:cd:c2:22:5d:2f:ea:
16:7e:28:12:0b:29:cd:18:1e:84:70:4d:a0:e6:fc:b4:33:7d:
e6:c3:24:ca:71:2f:07:03:6b:4d:35:37:f7:51:cf:1d:3c:a3:
66:2c:9b:aa:b0:70:50:6f:4b:5f:db:75:96:cb:8e:f5:98:48:
30:a8:12:c8:4d:c6:5f:57:40:8e:36:a1:6d:1f:e5:04:58:e6:
eb:ff:7d:71:f6:bc:f5:da:8e:e1:a5:a7:04:b2:eb:c8:77:84:
af:b0:bf:d0:9f:3c:23:1c:5a:43:b1:78:b0:57:07:4c:9c:19:
ae:e0:eb:dd:e6:cf:18:c4:b3:8d:8f:bf:bf:26:33:ac:b8:21:
92:1e:b8:fc:87:0d:3a:4c:75:5e:f7:e2:a4:6c:94:ed:78:4a:
c9:c7:c8:2d:d6:b5:53:76:8d:6b:a8:9e:40:41:6d:f5:ae:c9:
9c:44:a8:d4:b8:96:6c:85:04:25:1b:14:af:26:b8:48:a0:d3:
24:ae:9d:44:99:b6:14:46:a7:c6:e7:d6:49:d5:ac:77:25:aa:
ee:20:c4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:28:47 2025 by rpki-client