Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LWcXA7Dqam2o0ItdarXPGE85IkA.roa
File: LWcXA7Dqam2o0ItdarXPGE85IkA.roa (raw, json)
Hash identifier: 14ZEDWC0IVaCxLsVqYnUlkwlTymwasYPELQiOSDOthg=
Subject key identifier: 2D:67:17:03:B0:EA:6A:6D:A8:D0:8B:5D:6A:B5:CF:18:4F:39:22:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182E72AF8F701A2E1055B21D9ACBED1253D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LWcXA7Dqam2o0ItdarXPGE85IkA.roa
Signing time: Mon 29 Aug 2022 01:15:29 +0000
ROA not before: Mon 29 Aug 2022 01:15:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e7:2a:f8:f7:01:a2:e1:05:5b:21:d9:ac:be:d1:25:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 01:15:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d671703b0ea6a6da8d08b5d6ab5cf184f392240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:db:4e:87:f1:09:59:32:86:b9:7f:18:ca:3d:
bf:b6:ee:62:28:6e:b3:5a:2d:e4:95:30:76:ee:ea:
76:d7:bf:eb:9e:ff:96:84:e6:4b:43:58:95:e2:5b:
65:64:a8:57:b2:ca:d8:3a:a4:77:e4:d0:8c:a4:4b:
8b:33:29:cc:e3:80:ef:bd:98:57:f4:63:0e:ef:95:
f0:da:cd:ae:b7:12:91:89:52:95:43:54:fb:91:ac:
1e:f8:37:87:d6:b8:2a:f5:fd:15:67:7e:8d:e9:56:
85:ae:73:5e:0b:bc:9a:8b:37:2f:18:28:67:8f:cf:
86:fb:7d:a6:05:a9:63:07:86:e2:3a:da:2b:64:b6:
3e:a7:34:b6:a7:ff:d1:77:da:cd:2a:58:15:da:ec:
d3:07:68:19:0c:0b:74:b0:e1:f4:17:90:2f:d0:60:
db:33:8b:26:a7:4a:75:47:e0:86:74:0c:3e:66:b7:
8a:33:4e:04:fa:da:e6:06:88:32:4e:f2:6f:74:08:
7a:77:2e:be:12:ad:3d:68:43:b3:1a:6d:34:13:99:
97:3a:73:93:cd:c0:57:20:da:9c:e1:41:d4:69:a4:
72:4e:b6:b4:27:07:79:3f:72:61:f1:a4:e1:73:1e:
df:80:23:f1:51:88:d2:ed:45:cb:19:74:1f:08:c0:
47:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:67:17:03:B0:EA:6A:6D:A8:D0:8B:5D:6A:B5:CF:18:4F:39:22:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LWcXA7Dqam2o0ItdarXPGE85IkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:7d:fc:0b:e4:bb:32:7f:8b:1c:59:6d:c6:df:86:5e:c0:63:
d8:08:91:b4:65:73:30:a3:77:33:f3:0c:c6:e7:ec:6a:34:3e:
4e:be:a1:af:a3:fc:67:20:ae:c0:35:8f:ef:53:90:2f:03:ad:
f4:46:30:08:79:24:65:d3:93:18:71:5f:02:cc:42:fa:bd:ed:
4a:64:e0:e8:03:2e:bc:a1:61:79:dd:2e:ce:07:0c:e2:33:d3:
bf:22:26:3a:af:f2:20:9f:be:dc:8c:72:bf:9d:2a:2b:f3:e3:
fe:81:e2:4c:4e:bb:ec:06:b9:d5:61:67:1b:a0:f1:44:38:87:
84:ee:50:e6:8f:b0:6e:3c:78:a2:8d:72:0f:74:6f:05:25:39:
76:c9:20:84:a8:e6:b8:e7:66:63:4d:fb:a8:b6:77:a9:c3:41:
79:0f:2a:ca:4e:41:9f:71:f6:aa:e8:11:3c:f9:0b:95:d2:14:
28:59:79:da:27:fb:7a:06:27:a3:d0:98:51:61:4c:1d:eb:14:
3f:17:fc:57:3e:1a:6d:24:82:82:ed:41:43:4e:4d:72:88:81:
76:31:d7:6d:15:2c:67:e1:ff:31:5b:a8:8e:54:ef:87:ed:e3:
ae:f1:56:97:b9:8d:a5:f5:5c:72:42:ca:d6:c9:ad:d1:d7:f2:
b4:a7:da:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:16:57 2025 by rpki-client