Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LLSB-basf_W5U6Dr_vwwUqsve3w.roa
File: LLSB-basf_W5U6Dr_vwwUqsve3w.roa (raw, json)
Hash identifier: aQD56Y8peX1togkj3/zag5otZjGQwGu0aGRKiu6Wqug=
Subject key identifier: 2C:B4:81:F9:B6:AC:7F:F5:B9:53:A0:EB:FE:FC:30:52:AB:2F:7B:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 74996880
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LLSB-basf_W5U6Dr_vwwUqsve3w.roa
Signing time: Tue 22 Mar 2022 01:10:45 +0000
ROA not before: Tue 22 Mar 2022 01:10:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1956210816 (0x74996880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 01:10:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2cb481f9b6ac7ff5b953a0ebfefc3052ab2f7b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:45:0a:4c:23:6b:32:a6:17:9f:10:30:e5:
4d:39:0c:54:eb:a1:a2:13:7f:51:1a:22:cd:d3:52:
63:5e:80:10:79:6d:15:0d:e4:c5:e9:bb:6b:df:2b:
66:c9:6b:0d:dd:0c:19:89:98:3a:b8:5b:4d:dc:14:
a8:7e:d1:7a:2d:a8:84:4b:46:d4:8d:4f:9c:ba:b3:
a7:c2:3c:e6:2f:4b:be:15:20:e2:83:dc:12:dc:ca:
5f:c0:40:82:f9:fc:32:1c:6a:de:33:89:4a:b1:37:
5d:d3:02:64:dd:90:fa:54:f6:b7:58:3c:2d:7a:87:
a3:6b:5e:20:23:49:4c:87:5d:76:d4:04:87:ae:45:
23:00:43:a4:a0:32:1a:cd:8a:da:b9:19:35:0a:a0:
2c:c9:93:f2:4d:c7:49:84:e1:a6:fd:30:35:d6:1c:
9d:68:16:9e:5e:9a:11:7c:f5:07:5e:d5:d6:21:87:
23:32:e0:3b:a1:d3:3b:6c:2a:f6:56:1a:6f:55:a5:
91:27:49:e1:52:5a:8f:bd:62:c0:8f:a4:0b:f2:80:
92:73:62:73:65:fd:92:b6:58:6d:e9:7e:00:73:fe:
ec:71:7d:96:9b:d4:bf:4b:ca:06:a6:d8:43:b6:c3:
d1:93:4d:0b:d3:0c:1f:1c:37:91:b0:7d:98:e7:d0:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B4:81:F9:B6:AC:7F:F5:B9:53:A0:EB:FE:FC:30:52:AB:2F:7B:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LLSB-basf_W5U6Dr_vwwUqsve3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:9a:81:b3:b0:9e:19:32:7a:5e:15:bb:84:9e:75:99:c9:d4:
d2:e3:5f:5e:41:bd:d6:5c:1b:b2:e0:28:79:ab:05:77:98:fd:
ec:91:c4:cd:85:a3:95:13:35:5a:e7:b2:82:03:86:ff:25:79:
b6:92:d3:20:4c:bd:fd:5a:c6:d6:84:95:bd:71:a2:5b:86:ed:
e3:3c:b7:7d:d5:32:46:8e:8c:62:0a:79:2e:15:23:b8:95:51:
9d:15:3d:cb:f6:9e:f7:91:d6:e4:3b:81:e7:1c:78:88:bd:c2:
94:54:e4:fe:40:27:5f:35:f4:db:92:20:ca:76:fa:e5:60:f7:
5e:10:77:c2:f3:2f:ec:77:ea:9d:90:93:a6:f1:9f:53:2f:8f:
0c:b8:c2:6d:ed:6d:bc:26:40:9c:3b:fb:36:18:e4:f7:5f:8f:
02:7e:78:1f:4d:0b:f0:34:9a:93:d2:e8:14:24:db:cb:ae:41:
46:40:74:0f:cd:b2:91:5e:0a:b6:3d:45:1d:63:d4:82:ad:98:
ca:38:4d:ba:1a:50:e0:8b:e3:8b:26:1f:99:2d:d9:24:7a:86:
74:dd:67:17:0e:19:96:9c:98:21:ff:93:9a:9d:54:07:54:93:
bc:30:89:62:a3:10:2a:05:87:97:6f:06:87:11:0a:5b:80:60:
35:db:b1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:38:41 2025 by rpki-client