Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LR3FaQ8azeAFISdqkSqnm4-nkrQ.roa
File: LR3FaQ8azeAFISdqkSqnm4-nkrQ.roa (raw, json)
Hash identifier: IKUzEXsN09eggdzreDGQdYU3jpf0SyE57BcWoQORvUQ=
Subject key identifier: 2D:1D:C5:69:0F:1A:CD:E0:05:21:27:6A:91:2A:A7:9B:8F:A7:92:B4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018506AF0D97EF40304AE1E105A35F6A0AE2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LR3FaQ8azeAFISdqkSqnm4-nkrQ.roa
Signing time: Mon 12 Dec 2022 14:13:33 +0000
ROA not before: Mon 12 Dec 2022 14:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:af:0d:97:ef:40:30:4a:e1:e1:05:a3:5f:6a:0a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 14:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d1dc5690f1acde00521276a912aa79b8fa792b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:05:a9:06:16:38:7d:24:28:54:ae:33:12:
63:44:6c:d6:61:6e:91:af:62:c8:4f:b9:41:23:ba:
9d:32:a0:a6:98:5f:19:ba:d2:6e:fd:91:88:72:d4:
d1:da:bf:76:19:c4:dc:4c:41:65:11:9b:3c:7f:90:
f9:d3:cd:97:b8:d6:22:b0:17:5d:e4:ce:ed:1e:06:
ed:61:c4:33:76:ab:a8:6c:06:51:32:bb:bb:46:08:
6f:b7:e9:23:99:fe:15:ee:b0:e6:3b:fc:62:a0:c4:
c5:6a:d1:19:e1:9b:df:3f:6f:b0:0f:a2:75:d9:ab:
39:cf:31:0e:15:12:c0:a6:d4:64:44:81:7b:42:2f:
78:31:b6:14:8a:18:eb:8d:a0:6c:4f:ee:4a:7e:8c:
08:83:e5:44:a6:fd:14:e6:9c:24:26:da:18:04:bc:
7d:47:6b:e4:9f:a4:d6:43:e0:fe:03:48:9e:59:84:
88:76:f5:b2:33:7a:3f:19:3e:62:c4:13:7a:18:a6:
dc:72:3f:6a:65:06:dd:c6:36:f8:4f:28:e7:51:b7:
4c:a4:29:58:80:4f:78:a1:76:77:e3:b1:eb:f9:0f:
c0:49:9e:48:8c:79:2e:b5:2c:fe:80:fb:64:4e:1a:
13:5d:18:27:e6:0d:4a:bf:f8:ac:a0:49:47:cb:e0:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1D:C5:69:0F:1A:CD:E0:05:21:27:6A:91:2A:A7:9B:8F:A7:92:B4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LR3FaQ8azeAFISdqkSqnm4-nkrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:4c:d2:f0:1b:01:af:e3:52:4a:a8:ae:ca:4d:ab:fc:15:bd:
ba:ca:3f:d5:2d:09:72:89:db:88:58:1d:fa:54:2a:a7:b9:0a:
59:e0:30:23:92:eb:99:eb:e8:e0:3d:52:57:f8:85:2d:a4:26:
aa:c6:8a:a6:48:09:36:95:a3:9a:2a:80:77:b4:46:3e:38:a9:
c9:06:67:ee:2d:a1:89:ca:68:3c:59:86:59:28:64:95:8c:c8:
22:9b:1e:15:ff:04:df:d5:2b:5b:ff:78:b4:20:c0:ba:fb:d8:
5f:87:08:48:aa:94:ba:cc:00:a4:e6:02:ff:8b:20:0d:c3:e9:
80:85:e0:e6:69:0a:38:8a:53:f2:1a:c8:1e:eb:60:31:cb:af:
cc:37:84:0b:5a:77:d4:18:40:75:8b:38:16:ab:58:c0:99:e4:
e6:19:ad:7c:71:f4:9b:94:cc:e0:5c:5b:0f:d6:71:29:43:24:
de:85:b3:9d:bc:b1:87:46:28:cf:c3:ba:78:21:7e:b0:3a:fc:
2b:5c:e6:4c:29:0e:ae:d0:5b:0a:0e:53:56:97:55:e0:2e:2d:
a1:35:6b:0a:46:96:f8:09:9b:e6:9c:b9:41:a8:c6:02:33:96:
98:f0:8e:34:76:4d:1a:e4:80:f6:1e:7b:03:03:54:10:cc:76:
7a:f3:9d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:17:05 2025 by rpki-client