Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LOZccGwWQXjI4JGGfaXabCmuH2I.roa
File: LOZccGwWQXjI4JGGfaXabCmuH2I.roa (raw, json)
Hash identifier: rw6FrIt3c6YnA2b8XLs8YwREGwg7ia8ZmgA2o3bORnM=
Subject key identifier: 2C:E6:5C:70:6C:16:41:78:C8:E0:91:86:7D:A5:DA:6C:29:AE:1F:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183FA789DC893A8AE29F5354981228BAA94
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LOZccGwWQXjI4JGGfaXabCmuH2I.roa
Signing time: Fri 21 Oct 2022 12:15:52 +0000
ROA not before: Fri 21 Oct 2022 12:15:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fa:78:9d:c8:93:a8:ae:29:f5:35:49:81:22:8b:aa:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 21 12:15:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ce65c706c164178c8e091867da5da6c29ae1f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d3:82:0c:09:7e:81:49:e4:62:ed:ff:65:d2:
f2:ae:49:be:63:9d:d5:80:e8:a5:8f:b4:86:d9:11:
c6:ff:55:23:7c:44:9c:4c:68:d4:4e:56:8f:0b:c0:
3d:f1:3c:8f:d5:85:0f:7d:12:1c:49:19:8c:a6:d6:
58:bd:f5:d0:cf:5b:56:3a:a5:e1:ca:10:44:f0:eb:
33:b0:e1:94:54:74:0b:ed:48:13:91:5f:09:c8:5f:
b8:9c:d5:fd:84:6b:17:b2:82:09:2d:e7:a1:be:da:
35:c4:54:c8:a2:0c:37:f9:e5:ba:e5:cd:40:03:e4:
4a:f5:45:4b:03:85:96:fb:c0:29:76:6b:2f:af:e8:
0d:7e:28:aa:a6:a0:65:38:15:60:70:05:e9:bf:58:
7c:86:7a:a9:e7:1e:79:b8:c3:ef:4b:0e:7a:e5:e6:
eb:86:38:a0:2b:c3:03:7a:e0:0e:38:48:59:ca:bf:
98:2f:16:3c:f4:34:96:2a:70:57:0c:d2:5f:de:9e:
56:09:2e:a8:33:ed:5d:76:83:22:71:71:9f:31:c8:
35:71:1a:eb:69:df:81:fd:23:af:5b:be:46:09:ad:
34:16:90:07:32:08:4a:d8:6b:dd:79:6c:e1:26:4e:
ee:b3:7e:c2:1d:eb:51:43:4c:66:53:47:e6:57:8f:
cf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E6:5C:70:6C:16:41:78:C8:E0:91:86:7D:A5:DA:6C:29:AE:1F:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LOZccGwWQXjI4JGGfaXabCmuH2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:3a:1c:f5:f6:22:74:f0:5e:a9:84:1b:6c:6d:3b:15:ff:67:
16:bd:3d:f3:3f:53:75:f4:97:50:14:03:1d:df:50:df:d4:d3:
23:7d:81:36:d6:55:0c:bd:85:3c:f1:02:09:53:e4:16:d7:b4:
17:24:05:62:fc:24:78:bc:3b:89:38:4f:d3:58:84:e5:fe:cc:
2d:a7:7a:55:52:3c:80:a0:01:22:15:06:9b:78:8d:1e:48:45:
fd:89:f0:93:eb:39:6b:34:c1:c2:85:27:1d:94:71:40:c4:cc:
4e:58:b3:72:bf:3c:e0:dc:29:44:b3:31:e1:e3:61:11:18:f7:
6f:aa:8f:c4:9f:40:12:6c:ce:8b:61:bf:9a:51:e0:a2:6c:65:
7c:91:4b:75:3a:df:4b:73:f5:8c:d7:2f:5a:fa:2e:d5:ff:17:
17:41:7a:0a:ed:9a:73:8a:ee:48:ec:2e:3a:b6:de:b8:a8:df:
3e:fc:df:dd:49:b6:ab:98:4f:0a:e1:80:e0:54:e7:28:82:da:
ec:e6:48:01:63:d3:50:da:b7:f0:f6:68:90:d9:33:fe:1e:3f:
62:22:a0:ca:5b:0b:04:42:43:9a:18:ad:5e:a5:d3:b5:8c:27:
d3:76:09:35:37:f7:81:11:93:0d:ed:99:22:11:06:85:14:a7:
45:60:69:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:55 2025 by rpki-client