Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LU3Hh49F1yXBSMkSfJcGwX8PhZQ.roa
File: LU3Hh49F1yXBSMkSfJcGwX8PhZQ.roa (raw, json)
Hash identifier: 6Ab1UamulIthhuknf5JFw27GdIFAJlcFwIVrrpOvGAw=
Subject key identifier: 2D:4D:C7:87:8F:45:D7:25:C1:48:C9:12:7C:97:06:C1:7F:0F:85:94
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185334C727C8BD0942D119B25C615CB566C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LU3Hh49F1yXBSMkSfJcGwX8PhZQ.roa
Signing time: Wed 21 Dec 2022 06:08:45 +0000
ROA not before: Wed 21 Dec 2022 06:08:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:33:4c:72:7c:8b:d0:94:2d:11:9b:25:c6:15:cb:56:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 21 06:08:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d4dc7878f45d725c148c9127c9706c17f0f8594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fb:e9:88:82:90:c0:26:47:80:1b:41:41:a6:
7b:1b:2f:78:c1:ec:a2:75:da:50:66:7c:fd:b8:75:
b3:32:9d:c3:7e:e3:fe:cf:99:87:21:e1:a5:32:2e:
a1:ad:a3:e4:20:da:8d:5c:b5:0a:0b:02:7a:41:21:
69:4b:95:b3:42:61:b8:6f:db:3b:43:ae:aa:4f:a7:
15:9d:ae:22:f8:6a:22:8b:48:6f:19:90:c6:99:d8:
2a:50:e0:43:8a:1d:aa:17:f0:08:b3:47:a8:85:30:
9d:59:c2:ea:28:11:da:05:fd:8b:e8:c7:72:77:35:
5e:a4:d4:f7:36:f2:d0:96:37:8e:10:7d:6a:f0:6e:
72:f6:aa:3a:ab:fb:95:c0:4c:1f:a3:c5:9b:0c:f1:
b1:f3:05:ed:26:73:d0:d4:b5:00:14:41:b9:69:8c:
b5:77:0c:09:d1:dc:84:c1:23:0d:66:67:af:07:3c:
f4:35:4e:f2:7d:9e:a8:ed:c1:a0:11:83:77:e7:30:
df:93:40:b4:a2:bd:75:d2:f8:e2:5f:3f:d1:38:28:
58:00:94:3c:ce:f8:0e:1d:fa:b2:d1:81:79:aa:d5:
af:af:d0:7e:e9:ff:77:b4:84:19:e9:e0:5d:32:92:
8d:e4:ae:66:cb:a5:0e:b2:85:e9:53:4a:ea:91:82:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4D:C7:87:8F:45:D7:25:C1:48:C9:12:7C:97:06:C1:7F:0F:85:94
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LU3Hh49F1yXBSMkSfJcGwX8PhZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:23:6e:ba:9a:eb:8c:c3:26:fd:e8:86:e4:cb:1d:2d:99:57:
0c:a8:53:9a:ad:84:74:88:ff:74:47:80:f2:34:b4:36:ed:0a:
d0:9a:37:09:e3:8d:fa:3a:9c:9a:ed:48:ab:ef:d4:14:12:6d:
8a:4c:90:8e:3f:12:bf:af:55:d0:55:a1:26:41:ea:f6:d6:c8:
38:d2:06:d9:49:89:c1:b7:a6:ab:fe:e3:98:bf:de:77:65:7b:
64:b9:38:d0:ed:aa:b9:14:ad:76:ec:64:75:33:60:20:be:ad:
87:cd:72:6d:dc:93:51:e4:67:c1:f2:81:f1:67:08:b8:1b:94:
3e:95:1e:39:7d:38:d1:df:43:9a:b8:fa:c3:79:d5:6a:77:73:
4f:ab:0c:a3:ae:6f:fa:b4:e3:92:a6:04:f3:e1:82:50:ce:72:
99:1b:55:95:b6:5d:0f:8d:f1:5a:37:3a:8d:83:ad:3c:94:4d:
a1:e7:e8:60:57:73:38:50:06:c8:6c:a0:3c:d4:47:cb:68:76:
b8:1d:d8:28:bd:1d:d9:f2:0d:de:82:5f:e2:65:9b:52:39:9d:
5e:9e:f7:df:29:9d:2b:cc:0f:49:29:c8:b7:5c:22:4b:ab:4d:
6a:75:5a:c5:f8:ed:65:a5:ad:19:72:bc:1e:80:c6:21:0f:db:
37:ef:13:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:34:02 2025 by rpki-client