Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LPHRG4fAXwMI0xAq079ujWcIQ-s.roa
File: LPHRG4fAXwMI0xAq079ujWcIQ-s.roa (raw, json)
Hash identifier: M6b40evyXz2+1hV+rFtj7EbIRxzK+7F6b3qBDEch3Nk=
Subject key identifier: 2C:F1:D1:1B:87:C0:5F:03:08:D3:10:2A:D3:BF:6E:8D:67:08:43:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185BF72A4937014B3562C245629BA99E498
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LPHRG4fAXwMI0xAq079ujWcIQ-s.roa
Signing time: Tue 17 Jan 2023 11:17:19 +0000
ROA not before: Tue 17 Jan 2023 11:17:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:72:a4:93:70:14:b3:56:2c:24:56:29:ba:99:e4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 17 11:17:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cf1d11b87c05f0308d3102ad3bf6e8d670843eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:e4:8d:c4:30:9f:37:c3:ec:90:d0:e3:c5:
3c:62:a8:13:52:78:14:45:da:9a:42:90:a7:d6:b8:
0b:92:eb:4b:7b:46:63:e8:a7:db:66:15:ec:a6:c7:
f4:1f:16:db:f7:b3:a1:a5:76:36:ca:81:2f:bb:d5:
c8:53:6d:79:45:18:85:2e:b1:8a:80:30:f9:56:85:
24:6c:00:21:bd:a6:d4:54:23:0c:4c:f6:e6:e6:32:
fa:78:1e:c9:a9:ab:58:92:21:1b:fe:f5:26:4a:b4:
f0:63:e1:55:fa:90:d7:f0:bb:78:9a:af:bb:b7:6d:
6f:06:50:a0:80:c6:9c:10:1f:90:c1:af:13:1f:86:
d7:8f:1c:bc:e4:2d:74:78:25:1d:17:32:89:66:a6:
c7:6c:16:6b:07:99:69:e8:10:47:3b:32:5c:48:d9:
56:11:3b:75:ff:2e:16:81:bd:67:c5:0a:d7:fa:60:
c6:ea:59:68:d4:b4:3a:f1:99:00:30:a9:ec:76:b7:
d7:ff:ca:7f:70:4a:e7:0f:f7:ec:a9:13:0c:64:f4:
e5:d9:5d:64:c9:a8:52:6f:d9:04:b7:df:11:c1:51:
4a:c1:37:bb:b9:42:11:06:fa:a0:cf:d0:3e:52:f1:
e9:c2:2a:69:8d:28:04:ea:37:25:30:2f:82:07:25:
3e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F1:D1:1B:87:C0:5F:03:08:D3:10:2A:D3:BF:6E:8D:67:08:43:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LPHRG4fAXwMI0xAq079ujWcIQ-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:2e:44:84:fb:7d:0c:e1:ad:fb:51:7b:5a:9f:44:7d:42:4b:
a3:13:55:d4:78:7a:21:95:89:ef:1f:1e:45:a5:a6:16:8c:8e:
6f:fe:d0:9b:84:b2:f6:21:57:8e:8f:7b:d4:c4:e4:bc:ce:a7:
a0:37:e0:a5:69:40:23:a5:84:a2:14:1e:c2:54:07:c6:27:81:
99:ea:04:18:a0:eb:ae:23:5d:39:c1:48:5b:06:46:d8:df:7f:
b6:87:e3:36:34:0d:ca:3f:16:25:b3:a1:c2:7a:54:97:7b:85:
06:e9:dd:37:d6:76:40:48:4e:86:47:b3:a5:03:db:ff:5c:9d:
d4:1e:1d:bb:82:d1:c5:b4:bc:4c:aa:26:16:e5:b4:f1:ad:ee:
32:1d:89:1d:73:38:7a:12:82:ad:f7:f5:79:8d:12:82:4f:7e:
3b:c9:eb:f9:d6:9f:be:33:35:da:14:5e:19:79:07:36:59:06:
65:8e:16:9f:55:84:26:70:ff:a4:12:d1:75:01:6e:52:45:fe:
8f:de:38:f1:84:53:5d:f2:22:32:b8:8c:3f:47:40:7c:4d:06:
f1:1d:24:77:72:cf:f2:22:37:f6:d5:60:85:67:43:56:3d:10:
75:1e:b6:15:b8:f2:ed:5d:df:6d:b0:1e:96:cc:20:16:a0:01:
e5:90:7b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:20 2025 by rpki-client