Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LUtcycWKvK145cMe3_purvxzKDM.roa
File: LUtcycWKvK145cMe3_purvxzKDM.roa (raw, json)
Hash identifier: RZbB8e6ABs/lNjZnIACdCh++0fvJvYlqztg+P6hS66I=
Subject key identifier: 2D:4B:5C:C9:C5:8A:BC:AD:78:E5:C3:1E:DF:FA:6E:AE:FC:73:28:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8BE1363C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LUtcycWKvK145cMe3_purvxzKDM.roa
Signing time: Sat 11 Jun 2022 16:20:02 +0000
ROA not before: Sat 11 Jun 2022 16:20:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2346792508 (0x8be1363c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 11 16:20:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d4b5cc9c58abcad78e5c31edffa6eaefc732833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:25:40:42:dd:af:21:d6:66:89:cc:83:20:c3:
2a:a3:17:21:83:6a:ed:03:1f:1c:3c:44:2f:a8:7b:
d9:77:21:ab:69:34:8d:4d:84:22:12:27:fe:7f:a7:
08:9a:43:b0:be:be:bd:aa:94:ca:06:a3:5a:61:da:
6a:5e:31:19:ec:8d:3f:fe:2e:59:f9:fa:82:9f:11:
da:7c:17:84:e0:ff:f8:d8:f7:ee:ce:36:69:0d:37:
2b:7c:6d:9e:de:6d:87:9c:3f:dd:81:ca:d8:23:6b:
6d:bb:3e:b7:a4:74:16:bc:54:e9:94:44:30:9f:98:
d5:a8:26:90:60:a2:4c:ec:24:ed:76:b6:4c:9e:9d:
ef:a5:69:01:4e:68:12:c0:cd:02:d1:72:9b:6a:f1:
f7:11:30:01:de:bb:51:dd:74:1f:95:d8:11:96:62:
e5:61:e7:40:6f:d6:4e:a7:bb:93:87:b5:60:f2:30:
4f:8b:46:a1:94:e5:e8:2c:dd:c2:6b:fa:e5:2e:2a:
24:19:8b:99:1d:38:75:56:11:52:34:33:79:fd:65:
0e:67:73:d2:ec:54:e7:09:4a:ae:ec:7d:c8:a6:fd:
c3:ef:3c:db:6b:3b:ad:32:df:56:09:9f:52:3d:70:
ce:cf:2c:29:14:a2:2e:39:da:4a:41:5b:0c:8a:05:
6f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4B:5C:C9:C5:8A:BC:AD:78:E5:C3:1E:DF:FA:6E:AE:FC:73:28:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LUtcycWKvK145cMe3_purvxzKDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:75:46:c8:07:28:dd:0e:c4:cc:ec:e9:69:76:0c:71:43:b1:
08:4a:d1:47:8e:db:c6:ba:3f:c1:f8:94:0f:b3:2d:0b:e3:59:
fb:41:0a:fe:98:c4:2f:3f:80:03:7b:e5:49:95:bc:89:40:3e:
42:41:67:9f:2b:98:47:94:7d:5c:b2:ea:25:c1:3c:f8:4e:e4:
a3:8f:f6:ca:6c:e9:4a:d6:c1:13:1c:58:83:2c:39:eb:c5:f7:
36:9b:90:7d:1d:d3:c8:87:3e:70:62:f8:13:c4:24:3d:d2:a6:
2c:d7:fa:1d:9d:cf:22:32:b4:2c:7d:28:10:55:71:8e:0b:49:
0b:97:66:3a:1e:60:cc:af:f2:df:ff:46:49:9e:af:c8:94:a8:
04:24:61:fc:97:22:8f:ec:6c:c8:41:9e:79:eb:e4:dd:71:86:
bb:03:3c:32:18:1f:10:9c:bc:76:17:47:30:a1:9e:df:cf:ed:
95:1f:02:46:7d:c1:2b:73:b4:78:92:2b:2a:ea:9a:14:29:d0:
66:6b:32:22:16:8b:1d:23:df:5a:c1:36:d5:26:7d:cb:5b:f0:
4a:04:34:f2:2c:df:54:f2:89:b6:73:06:38:a8:4b:37:1a:d0:
2f:0e:54:17:e2:83:50:07:a6:ac:b1:89:32:24:0d:ea:3c:0a:
45:3b:83:4a
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIvhNjwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MTExNjIwMDJaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDJkNGI1Y2M5YzU4
YWJjYWQ3OGU1YzMxZWRmZmE2ZWFlZmM3MzI4MzMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDOJUBC3a8h1maJzIMgwyqjFyGDau0DHxw8RC+oe9l3Iatp
NI1NhCISJ/5/pwiaQ7C+vr2qlMoGo1ph2mpeMRnsjT/+Lln5+oKfEdp8F4Tg//jY
9+7ONmkNNyt8bZ7ebYecP92Bytgja227PrekdBa8VOmURDCfmNWoJpBgokzsJO12
tkyene+laQFOaBLAzQLRcptq8fcRMAHeu1HddB+V2BGWYuVh50Bv1k6nu5OHtWDy
ME+LRqGU5egs3cJr+uUuKiQZi5kdOHVWEVI0M3n9ZQ5nc9LsVOcJSq7sfcim/cPv
PNtrO60y31YJn1I9cM7PLCkUoi452kpBWwyKBW9zAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQULUtcycWKvK145cMe3/purvxzKDMwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9MVXRjeWNXS3ZLMTQ1Y01lM19wdXJ2eHpLRE0ucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAUHVGyAco3Q7EzOzpaXYMcUOxCErRR47bxro/
wfiUD7MtC+NZ+0EK/pjELz+AA3vlSZW8iUA+QkFnnyuYR5R9XLLqJcE8+E7ko4/2
ymzpStbBExxYgyw568X3NpuQfR3TyIc+cGL4E8QkPdKmLNf6HZ3PIjK0LH0oEFVx
jgtJC5dmOh5gzK/y3/9GSZ6vyJSoBCRh/Jcij+xsyEGeeevk3XGGuwM8MhgfEJy8
dhdHMKGe38/tlR8CRn3BK3O0eJIrKuqaFCnQZmsyIhaLHSPfWsE21SZ9y1vwSgQ0
8izfVPKJtnMGOKhLNxrQLw5UF+KDUAemrLGJMiQN6jwKRTuDSg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:59 2025 by rpki-client