Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LU8GupdRrbq2z0g8C60cVrMv-qk.roa
File: LU8GupdRrbq2z0g8C60cVrMv-qk.roa (raw, json)
Hash identifier: B9fzS/tCWdJbCzo7G/pbF3ELBtedmuDabBfJxbE+Fq4=
Subject key identifier: 2D:4F:06:BA:97:51:AD:BA:B6:CF:48:3C:0B:AD:1C:56:B3:2F:FA:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018745F803F60A4ED36BE3B96BF0233D6D96
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LU8GupdRrbq2z0g8C60cVrMv-qk.roa
Signing time: Mon 03 Apr 2023 07:14:54 +0000
ROA not before: Mon 03 Apr 2023 07:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:45:f8:03:f6:0a:4e:d3:6b:e3:b9:6b:f0:23:3d:6d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 07:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d4f06ba9751adbab6cf483c0bad1c56b32ffaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e2:33:d0:1a:53:17:86:7e:de:cc:a2:4e:4f:
53:af:51:ec:92:87:18:09:71:ca:98:e9:18:3f:fd:
d2:48:b4:c9:94:8f:00:7c:43:fb:83:6a:8d:3c:4f:
6e:97:ca:79:53:06:a0:9b:aa:3c:fd:93:94:f4:44:
60:e9:72:39:82:92:4f:2e:a9:aa:81:1d:3e:f0:9b:
36:d7:3d:12:c5:fd:5a:b7:32:66:f8:56:ff:44:da:
7e:1d:9b:16:25:a1:10:71:02:0e:c4:5a:03:f5:68:
ea:07:15:6f:f0:59:e6:c8:04:27:6a:59:d1:1b:60:
82:cc:2d:9b:f6:a7:b6:0d:3a:eb:20:37:9d:1a:bb:
cf:00:ad:46:6b:a3:31:0a:ec:fc:ba:67:e6:1d:fa:
43:6c:77:aa:f5:52:0d:04:e3:14:96:71:6f:cd:f9:
ad:13:c0:c9:4f:48:26:00:4c:9e:32:5f:58:65:7f:
05:3b:36:b3:b2:34:0b:d9:ee:a5:79:de:18:c9:15:
41:0e:80:c2:ae:10:df:8f:fa:bd:ee:92:25:82:79:
61:dc:d4:ef:f0:f7:10:69:3f:d4:b8:8d:fb:cb:d5:
08:bc:24:4d:55:58:d9:54:8a:82:44:5e:3e:36:3a:
38:4a:26:9a:d5:1b:8e:82:5a:28:18:c7:09:01:26:
92:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4F:06:BA:97:51:AD:BA:B6:CF:48:3C:0B:AD:1C:56:B3:2F:FA:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LU8GupdRrbq2z0g8C60cVrMv-qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:43:5a:05:05:8f:1d:38:79:f5:68:fd:6d:83:59:96:71:7c:
b9:47:61:84:53:67:cc:45:d8:b1:2e:ca:a5:c1:fe:71:9a:22:
93:3d:3c:a8:68:4d:15:b6:7a:36:26:75:c2:14:8f:03:6e:6c:
b8:01:be:c4:3a:da:94:9b:80:ed:e3:05:3f:30:f7:86:61:44:
3e:e5:3c:20:59:e5:9d:a5:94:24:1e:46:43:9c:96:2b:a9:cc:
29:80:3e:a6:c1:0e:a8:92:90:b7:22:e9:0a:e1:81:5b:56:2a:
45:f2:b3:c6:35:aa:c1:48:16:23:b4:5f:32:f2:fb:00:03:ea:
8f:c8:30:f8:32:fc:a1:bd:9d:3c:2c:c0:19:fb:24:cb:2b:e3:
35:f0:5b:f5:c9:f8:e9:10:71:42:1f:79:4a:76:e6:27:d9:6c:
35:c4:be:e3:7c:e0:4d:d4:f8:a5:86:4b:34:0b:4f:59:7d:b3:
9f:b5:02:35:cc:be:ab:e8:bf:7f:43:82:e9:4a:7e:97:21:f9:
43:b7:0e:0c:82:0d:81:47:4d:bf:89:01:0e:b6:70:2c:99:5c:
88:7a:e1:b0:92:5c:56:4c:39:aa:35:fd:8a:48:98:10:cf:88:
fe:33:3b:72:7d:3d:97:2f:78:4c:f8:ee:fe:b6:41:d6:c1:72:
d7:63:d7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:15 2025 by rpki-client