Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LQQRqfi_Lv-T-WxFO-xFXJAdaXo.roa
File: LQQRqfi_Lv-T-WxFO-xFXJAdaXo.roa (raw, json)
Hash identifier: ItpjfVk6LqEf0NqvAIy5tZuK+X3qnX1Kc/TSPT9PUlY=
Subject key identifier: 2D:04:11:A9:F8:BF:2E:FF:93:F9:6C:45:3B:EC:45:5C:90:1D:69:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870BCEACC45240CC31A97C4C6F3EAF7A3A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LQQRqfi_Lv-T-WxFO-xFXJAdaXo.roa
Signing time: Thu 23 Mar 2023 00:11:46 +0000
ROA not before: Thu 23 Mar 2023 00:11:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0b:ce:ac:c4:52:40:cc:31:a9:7c:4c:6f:3e:af:7a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 00:11:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d0411a9f8bf2eff93f96c453bec455c901d697a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:6f:41:ab:b6:5e:72:58:a5:c1:57:63:77:
81:04:ac:cd:f7:52:52:ab:69:22:8a:ee:e3:ae:bd:
88:40:dd:54:12:f3:31:ac:e3:16:b7:5a:59:75:e8:
30:c5:a7:0f:dd:b2:71:cd:14:d6:2f:88:02:a5:c8:
78:24:8a:bf:58:d9:8a:65:26:0c:ea:d8:77:4d:5c:
7c:be:f2:41:d0:3e:0b:0a:a3:ef:93:58:fd:93:5a:
0e:c2:a6:fe:90:2d:dd:ac:a6:8e:c4:25:4f:a0:ad:
7e:80:ae:40:77:e2:3d:c7:73:0b:42:f5:d1:2d:6a:
77:da:a1:07:98:6c:3e:bf:7b:6d:a9:d8:31:d4:f3:
85:aa:3b:56:e0:d8:48:54:fc:f7:e0:1f:97:34:7f:
72:5f:bb:a6:b2:5e:a2:e5:8b:1c:1d:8a:67:a6:54:
04:51:0c:de:64:c8:8c:70:d0:3a:74:f1:2e:19:5c:
1a:48:b2:5e:f8:4e:4e:f9:2b:9b:de:35:df:fb:47:
0f:67:f2:4e:58:88:24:b9:09:57:6b:24:16:37:88:
3c:7b:64:90:6c:8e:e9:90:91:cd:0a:cb:59:d0:8c:
d6:af:a3:e6:cd:ef:be:89:6c:a6:96:26:16:c2:1c:
cd:03:11:65:3f:0e:bb:5f:75:ba:54:58:8c:75:85:
2e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:04:11:A9:F8:BF:2E:FF:93:F9:6C:45:3B:EC:45:5C:90:1D:69:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LQQRqfi_Lv-T-WxFO-xFXJAdaXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:0a:31:a2:0b:32:d1:7d:50:94:4f:8f:55:3a:17:59:98:c8:
65:de:73:74:a3:af:e9:3c:77:61:47:05:62:71:e9:52:50:1b:
bc:13:89:c9:db:59:96:57:25:5a:13:24:9f:17:26:3a:0c:a5:
a7:32:97:3c:af:b6:f0:44:dd:9c:3f:13:76:58:9b:9a:8c:c4:
df:02:51:f8:33:bc:2e:5b:d8:47:94:f8:65:ac:31:4c:b0:48:
89:3d:b0:a3:fc:be:a0:be:dc:a4:47:07:f9:12:30:ed:31:7c:
2d:cf:fc:e5:52:45:a9:ad:bb:67:5d:28:58:71:0b:ba:36:ca:
61:24:1f:47:88:09:a5:6f:a4:f4:93:bb:de:e4:3f:d8:fa:ca:
9a:b8:2d:bd:b8:06:cd:15:d6:fa:f2:66:bd:2e:39:27:06:c8:
63:99:c2:b9:23:72:d4:2f:0f:8d:be:23:7f:7a:89:3c:1a:4c:
5f:40:91:eb:5e:99:c5:35:04:c7:21:b8:fb:df:d1:b1:ea:96:
9e:7e:81:7f:15:55:5f:8d:34:ae:78:ff:ce:8f:af:5d:b4:a3:
cb:8a:13:26:1c:44:ab:0c:23:b7:a4:fc:6d:83:4f:4a:8c:29:
dd:eb:8f:f0:d9:6a:80:47:6b:80:47:88:9f:53:f2:97:6e:d8:
66:e3:53:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:50:04 2025 by rpki-client