Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LV0JrpHMqmP_seRQyeZvGY3625c.roa
File: LV0JrpHMqmP_seRQyeZvGY3625c.roa (raw, json)
Hash identifier: 4d9S0FL+xdHHGSV6gjpRsw/2wH6H/TexTNbBFQ6y3KM=
Subject key identifier: 2D:5D:09:AE:91:CC:AA:63:FF:B1:E4:50:C9:E6:6F:19:8D:FA:DB:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6B4FDCD2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LV0JrpHMqmP_seRQyeZvGY3625c.roa
Signing time: Thu 17 Feb 2022 08:19:30 +0000
ROA not before: Thu 17 Feb 2022 08:19:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1800395986 (0x6b4fdcd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 08:19:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d5d09ae91ccaa63ffb1e450c9e66f198dfadb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:fa:f2:d6:d5:2c:0c:47:5d:c9:43:56:23:
36:ca:52:21:22:13:b0:18:d8:ef:70:c4:a0:fa:ac:
6e:5f:f7:d2:09:ba:31:f3:df:87:63:6e:d7:d4:72:
b5:95:d8:96:a2:ab:af:4c:8d:5d:be:cd:9b:2c:63:
d8:5b:a0:b4:dc:04:a8:3d:df:0c:84:48:96:30:b8:
2b:9c:9b:e9:2c:cb:91:84:37:07:b2:a0:2a:9d:c4:
24:7e:93:2c:59:37:7c:6e:85:2c:90:b5:52:fb:09:
62:1a:02:ae:24:56:c0:56:42:6d:7e:93:56:a0:2a:
16:b3:96:c0:f0:a4:26:b1:9a:8a:7e:b5:20:89:b5:
cc:ec:72:21:e0:e3:5b:93:e6:8f:28:cd:71:89:3a:
7c:f0:62:85:cb:eb:69:cc:04:52:cf:c1:0a:50:27:
67:32:5c:60:88:5e:34:a1:ad:8e:f3:e6:0c:85:3b:
30:10:f1:07:3e:6e:7f:ad:2d:10:60:c5:ed:25:9a:
1e:56:ef:5f:73:b0:6c:af:c1:e3:33:84:3b:71:35:
a9:e0:fd:01:38:10:84:03:02:37:79:8d:69:03:1f:
10:54:8e:84:4d:40:9d:07:dd:b2:2a:e3:13:b4:df:
51:73:6c:fa:12:aa:19:3f:a9:c0:31:73:c4:be:cc:
4c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5D:09:AE:91:CC:AA:63:FF:B1:E4:50:C9:E6:6F:19:8D:FA:DB:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LV0JrpHMqmP_seRQyeZvGY3625c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:b2:0b:62:a6:5f:9c:1f:2a:df:98:8e:70:5d:0d:71:a3:ac:
ad:21:43:d7:86:3c:04:4b:ef:41:67:e2:fe:86:09:c8:e0:3c:
0c:8d:1f:07:4f:60:fe:4f:47:54:25:01:d1:74:94:92:20:4d:
ff:7d:5a:3c:79:4a:02:41:52:ac:08:1e:14:92:a9:88:1f:04:
ba:f6:d0:e5:5f:08:44:95:ec:d9:56:38:5c:ec:59:cd:51:47:
31:87:38:42:07:f5:a8:dc:11:d3:ae:5e:ee:f4:89:18:66:be:
72:f0:dd:b9:17:11:9e:72:4c:b1:0f:96:77:85:29:59:67:4c:
ee:0a:0c:24:67:40:10:7d:2d:1d:3c:0b:fe:cb:ca:a3:f6:14:
25:58:78:df:8e:c7:65:94:5f:c3:b2:16:51:37:e6:c7:0f:9f:
e5:83:da:9e:da:e4:4b:d3:f3:83:a9:fc:80:02:a4:b3:27:65:
4c:06:7e:fc:51:20:ee:85:69:72:dc:8d:b7:fa:54:c7:70:78:
61:b3:e2:21:28:2f:f1:34:ae:69:bf:37:f5:42:e1:20:81:c8:
c5:fc:aa:4c:f4:61:24:1f:e4:f8:f0:7f:2c:42:e7:3c:df:f1:
66:6c:30:29:b4:47:c4:97:9f:d5:75:04:fd:0f:c7:d2:ae:9a:
42:4c:22:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:42:48 2025 by rpki-client