Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LS_JUloG9fx0C6izdrrahgP4G4U.roa
File: LS_JUloG9fx0C6izdrrahgP4G4U.roa (raw, json)
Hash identifier: xTIxZeeXmC5UrtQsst2fKenlPbeIKxANOmmBlvgTUm4=
Subject key identifier: 2D:2F:C9:52:5A:06:F5:FC:74:0B:A8:B3:76:BA:DA:86:03:F8:1B:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018208DBAAC29E150B426B8B1D27178759D7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LS_JUloG9fx0C6izdrrahgP4G4U.roa
Signing time: Sat 16 Jul 2022 21:13:09 +0000
ROA not before: Sat 16 Jul 2022 21:13:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:08:db:aa:c2:9e:15:0b:42:6b:8b:1d:27:17:87:59:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 21:13:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d2fc9525a06f5fc740ba8b376bada8603f81b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cc:82:4d:4f:e1:7a:92:09:ad:f3:85:0f:42:
a4:52:8a:56:5a:91:dc:fa:61:ed:04:8c:4d:63:d7:
4f:08:ef:60:f4:bc:d0:77:7b:a9:7d:07:41:5a:31:
60:bd:9f:9c:d3:ac:b4:4e:59:3d:b0:70:4e:e7:aa:
cc:f7:64:b3:30:14:e5:fc:f8:76:dc:c2:00:0a:6e:
be:6a:07:69:af:32:e8:7a:6c:95:62:fc:e9:0f:8b:
16:9a:ea:e1:b8:13:07:34:53:b2:d0:8d:68:8c:31:
9a:1c:f3:dd:22:77:03:f1:0b:ed:71:03:b3:e7:b8:
a2:9d:f0:f2:9d:43:43:ab:f7:74:9e:e8:52:2d:7e:
04:75:79:d1:e2:18:e6:f7:82:4c:20:1b:9d:43:27:
30:8a:d0:c5:93:b9:3d:18:5b:d9:3a:f2:12:b5:29:
3b:78:85:d0:83:d6:3a:c4:eb:25:d6:e4:9d:f6:bc:
e1:5b:3b:0f:44:57:ea:9d:9f:a6:02:a3:c0:62:bd:
5c:46:44:e0:c7:c8:46:93:54:04:db:5b:0b:25:01:
49:de:64:9d:6b:10:9e:47:5f:41:15:63:85:f4:53:
4f:62:fb:44:9c:73:57:9e:5e:5a:7c:5c:4b:50:d1:
96:df:57:6e:33:d3:d3:98:f9:ee:74:5b:a8:ce:da:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2F:C9:52:5A:06:F5:FC:74:0B:A8:B3:76:BA:DA:86:03:F8:1B:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LS_JUloG9fx0C6izdrrahgP4G4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:85:37:22:73:26:ec:19:40:3d:af:a9:21:1d:6a:89:50:eb:
ca:3b:a0:e6:a5:70:08:86:0c:1f:06:39:c4:dc:0b:99:67:16:
78:5c:a1:d2:64:4f:ee:57:3b:52:12:13:be:72:42:e4:65:c1:
af:41:b4:32:c1:24:54:7d:5d:41:b2:1f:86:67:39:24:27:20:
42:63:2d:51:1e:9b:7a:9a:20:9e:34:a5:55:ad:c3:6e:d4:33:
1f:58:9a:08:f9:05:b3:18:ba:d1:3c:b4:15:09:4b:05:28:7e:
68:a5:e7:e7:5f:9b:ae:2b:11:ea:ab:85:65:5e:25:ab:96:4b:
5a:b2:0e:5d:b6:04:a4:cc:ea:75:80:b8:85:e9:fd:63:b3:40:
92:80:e4:0b:c3:82:07:fc:23:bb:c0:6f:40:90:92:0f:6a:18:
c7:f1:ae:90:02:b0:80:5e:91:2a:5d:df:8a:04:d3:65:22:ec:
54:8e:4f:3e:7e:2d:e5:8b:0e:db:24:b1:5f:11:f6:64:8c:72:
0f:30:6c:e0:c7:8c:fd:8b:5a:13:f7:a4:0e:08:56:b3:23:a6:
a0:bf:05:b0:f5:ca:e7:71:ee:6b:41:22:58:07:67:ee:6b:18:
40:c3:ff:e6:13:68:a0:24:cd:af:64:bc:a1:0c:d0:28:57:73:
5d:1a:1a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:15 2025 by rpki-client