Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LKprTBfam1UpwqcfMeXP6maWAFs.roa
File: LKprTBfam1UpwqcfMeXP6maWAFs.roa (raw, json)
Hash identifier: G0hkCVdGIjBKnEUUels+BHHT+CzX1tqfiF/KocCBCD0=
Subject key identifier: 2C:AA:6B:4C:17:DA:9B:55:29:C2:A7:1F:31:E5:CF:EA:66:96:00:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187036A8D2678DC825AF01E4ACA9327C73F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LKprTBfam1UpwqcfMeXP6maWAFs.roa
Signing time: Tue 21 Mar 2023 09:05:27 +0000
ROA not before: Tue 21 Mar 2023 09:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:369:b013/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:6a:8d:26:78:dc:82:5a:f0:1e:4a:ca:93:27:c7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 09:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2caa6b4c17da9b5529c2a71f31e5cfea6696005b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d7:2c:70:1f:de:64:72:f9:84:78:01:d6:c5:
58:ce:d8:d7:88:07:25:45:07:0a:d9:a2:55:7f:3b:
11:fb:78:a1:03:f3:c6:c4:7d:ac:7b:ef:ef:34:28:
f9:cd:b0:e2:71:0f:cc:1b:a2:24:0a:8d:59:2c:8f:
0a:fc:dd:5f:9e:47:b0:0b:57:a8:7e:57:a0:a4:c0:
06:1c:50:31:27:87:59:97:ef:df:03:fa:61:9e:cc:
23:b2:e9:d0:7f:6c:98:b6:7a:a7:92:a2:a3:da:31:
57:f2:70:cc:99:61:7a:e1:55:63:78:7f:a9:fb:11:
fb:2f:e2:29:9e:fe:87:58:e1:45:19:76:30:b8:46:
4a:de:f1:e1:2b:9d:17:d7:a4:f4:bb:f9:3c:e7:ee:
60:26:db:a9:b2:71:7c:d0:ad:9d:66:43:83:04:64:
e3:6f:f0:52:3e:44:ca:06:1c:fa:8b:7d:9e:a6:27:
91:18:81:5e:d4:8e:9c:91:c5:47:a0:b0:f6:55:5f:
36:13:1b:82:e1:4c:7c:8e:51:a2:4e:90:bb:e7:30:
73:08:78:32:49:c9:94:d1:75:2c:78:a5:de:59:37:
03:90:77:ac:56:35:a8:2e:8b:57:8c:aa:42:e3:a5:
41:4a:82:3f:55:dd:6c:97:63:1a:a5:6f:a3:40:28:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AA:6B:4C:17:DA:9B:55:29:C2:A7:1F:31:E5:CF:EA:66:96:00:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LKprTBfam1UpwqcfMeXP6maWAFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:16:5a:b1:e6:e6:6b:e9:56:88:e6:b2:93:e5:85:2c:cd:b0:
fb:57:b5:95:66:4e:29:e8:cb:37:c7:15:d2:a5:e7:c9:aa:81:
bf:17:a7:6d:48:90:fe:f8:94:72:86:32:45:53:03:91:8b:6c:
44:46:3d:b6:d7:1c:2c:9d:d3:23:e7:64:38:9e:27:af:22:ad:
58:da:dd:7a:ef:85:cd:70:d0:03:d7:da:68:da:6e:3f:e1:4c:
36:35:d3:87:eb:0e:ae:3f:74:f4:32:dc:ec:52:f7:20:ba:be:
41:a7:34:57:0b:14:6e:90:99:87:6c:33:cd:bb:03:ce:f0:23:
7a:fc:e0:8c:4e:bb:e5:c6:ae:9a:43:0c:af:1a:d3:ff:e7:bf:
bc:a3:d4:84:17:e1:6f:49:b8:a9:af:8f:81:bb:3b:c8:1d:84:
24:da:eb:c8:87:53:82:91:42:8a:fe:22:74:e4:fd:6b:a2:06:
09:52:fd:2e:9a:de:01:a0:06:21:4f:90:3c:a9:72:2f:d7:56:
5b:74:f9:d2:2f:00:db:0f:ea:3e:da:69:b6:c5:c7:6e:b5:6d:
12:c7:3c:21:ed:4e:e8:f1:14:b6:08:86:df:ac:7a:15:12:05:
0e:f1:71:31:9c:b4:1f:d0:ef:04:ea:56:bc:b0:71:97:a8:f3:
76:98:c1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:22:32 2025 by rpki-client