Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LNVJMpl2wIVBHexIwEFCKTQs_m8.roa
File: LNVJMpl2wIVBHexIwEFCKTQs_m8.roa (raw, json)
Hash identifier: Ouvu1FjONXpceVjw6eYuPNGpxM9HJh1xX+FUzpZgVwQ=
Subject key identifier: 2C:D5:49:32:99:76:C0:85:41:1D:EC:48:C0:41:42:29:34:2C:FE:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C383B1C36A8F818AC5AF12E59DE9928E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LNVJMpl2wIVBHexIwEFCKTQs_m8.roa
Signing time: Wed 08 Mar 2023 23:17:13 +0000
ROA not before: Wed 08 Mar 2023 23:17:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c3:83:b1:c3:6a:8f:81:8a:c5:af:12:e5:9d:e9:92:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 23:17:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cd549329976c085411dec48c0414229342cfe6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9f:ea:93:5b:60:95:ad:1b:b8:3f:97:53:21:
22:69:31:15:13:17:8e:c3:c6:e1:fa:c3:84:ce:62:
4e:75:7b:4d:03:2e:61:2c:91:3e:e3:aa:59:71:4f:
c5:99:da:16:b3:0b:c5:7e:83:bf:71:83:f5:25:16:
d4:7c:58:eb:89:4e:74:b0:70:c1:59:ef:e8:29:ab:
83:24:b4:41:6a:e7:9a:d5:07:13:50:c8:21:b2:f4:
2c:b3:be:76:cd:9f:2f:d2:6f:c8:53:a8:da:19:74:
21:9a:83:f9:eb:97:19:26:ee:ba:95:7f:01:54:f9:
a4:c7:1c:00:f0:95:22:22:8a:a1:94:2b:c6:81:8e:
01:01:3e:4b:95:2f:69:64:9e:47:ee:04:e7:55:d3:
51:e1:54:fd:32:cd:63:ee:2e:27:c6:e8:a0:17:57:
81:a1:8e:f9:c6:9b:e1:4f:04:c5:80:0a:e2:da:cb:
33:b6:c0:ba:ff:49:ab:f2:24:b4:ba:66:81:17:a5:
6d:80:fa:e1:bb:ef:74:d9:00:09:7a:52:35:1a:90:
eb:b3:f2:77:7f:f5:ba:1b:f0:54:73:98:50:ed:93:
b8:77:f5:f1:65:bc:7a:96:b9:2b:b0:be:3e:d1:38:
ee:7b:f1:be:f5:72:fc:f5:56:c5:e7:0b:51:db:0a:
53:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D5:49:32:99:76:C0:85:41:1D:EC:48:C0:41:42:29:34:2C:FE:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LNVJMpl2wIVBHexIwEFCKTQs_m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:f0:88:21:11:f4:0c:d4:b8:ae:ad:f7:0a:11:ae:d7:2c:22:
72:29:9b:93:03:e4:4a:68:3a:cf:30:6d:9f:cf:63:54:6d:9a:
05:db:1c:7f:5b:dd:3d:27:fe:64:0b:c7:be:c4:14:a2:4a:d8:
d9:60:41:ad:a7:93:60:9a:b2:82:30:df:e4:d6:8d:e5:70:d3:
3c:f7:94:86:f4:55:32:ba:db:5d:40:f9:ed:56:05:3c:dd:04:
c4:81:a5:b7:36:77:28:fe:81:7b:8f:a1:42:c7:f3:cf:1f:c1:
05:10:a5:9c:b7:4e:41:32:e0:b7:b0:8d:23:f3:ac:8a:24:64:
47:be:ad:f0:07:a3:a4:bc:a3:50:e3:ab:d9:8a:4b:9a:e2:fe:
74:11:80:20:98:19:b4:50:9d:ae:e3:67:c0:3e:df:a3:05:e2:
5a:0d:dc:26:91:70:ba:37:f3:8c:42:5d:5f:a9:a4:3c:fd:4b:
e4:d8:85:f6:33:e8:9e:c1:5d:dd:3e:61:be:91:fe:79:82:72:
7d:d5:90:d4:95:81:f0:d3:e9:a9:b6:28:c6:ff:1a:75:f6:aa:
38:49:b9:48:f9:0e:17:79:2e:f3:a2:ef:bb:84:66:ea:1d:82:
71:c9:68:c5:98:df:7e:eb:5c:4b:51:f3:60:69:86:f5:40:82:
5e:5a:88:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:48:12 2025 by rpki-client