Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LYBuS08gzJx_Fl8CrpTCmxLZBjo.roa
File: LYBuS08gzJx_Fl8CrpTCmxLZBjo.roa (raw, json)
Hash identifier: 0wDR2PBsVdYR/Gn3JzAX5f/5En4mHmXvOKI6rnTQSbg=
Subject key identifier: 2D:80:6E:4B:4F:20:CC:9C:7F:16:5F:02:AE:94:C2:9B:12:D9:06:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 80D2D704
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LYBuS08gzJx_Fl8CrpTCmxLZBjo.roa
Signing time: Tue 03 May 2022 19:09:44 +0000
ROA not before: Tue 03 May 2022 19:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161301252 (0x80d2d704)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 19:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d806e4b4f20cc9c7f165f02ae94c29b12d9063a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:61:fd:cd:b2:bd:9c:ca:d0:3d:c8:00:29:3d:
7a:57:d5:d6:bc:e1:ab:af:f5:ad:cd:6c:7c:17:ad:
da:82:42:a4:16:ba:fd:f5:2d:15:b5:14:fc:cc:40:
6c:28:9e:10:41:4b:98:93:58:ab:17:5e:9c:c3:5c:
ed:d0:28:b6:3a:61:07:cd:1f:5e:f8:c9:1f:74:f6:
75:b0:cb:1d:6d:3e:66:18:f4:26:73:2c:28:16:14:
c9:28:f1:27:9a:bf:5c:0e:b0:75:f0:aa:fe:17:f6:
8c:13:f3:94:ed:f6:f0:e7:2b:db:19:de:08:f0:ab:
61:5a:7c:d6:50:05:be:a3:cf:02:27:9c:5d:c7:d0:
ca:50:41:02:f7:0c:4f:14:81:83:5a:ec:40:d8:4f:
6b:e8:50:73:f3:0b:1a:66:9d:81:9e:39:53:5f:8a:
5e:31:66:f5:8b:e0:5f:92:dd:aa:b8:8f:00:5e:c1:
6e:01:7f:6e:32:03:2f:ff:c4:1c:2d:a9:a4:b0:7c:
bb:f2:41:dc:d5:e9:d8:80:19:ef:29:b1:ba:ce:30:
ca:3a:bc:42:cd:ef:5b:20:4f:48:27:3e:0e:e0:55:
53:95:83:36:ec:0b:d4:4a:b8:6c:15:b5:57:21:76:
33:89:26:1d:a2:7d:3f:1c:89:df:c4:83:39:d4:6e:
f5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:80:6E:4B:4F:20:CC:9C:7F:16:5F:02:AE:94:C2:9B:12:D9:06:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LYBuS08gzJx_Fl8CrpTCmxLZBjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:b6:95:4b:54:32:48:20:90:93:0f:f5:68:ff:62:0d:77:ee:
e5:d2:8d:35:ec:ca:ba:62:cd:74:b0:f7:86:59:6d:8b:43:67:
3a:4b:58:d5:36:4a:bd:84:65:05:63:8e:2a:d4:1d:14:25:20:
02:9b:eb:24:d3:fe:26:c4:76:7f:68:02:8f:46:57:33:e7:6f:
7d:cb:37:cd:c8:0f:ca:28:2e:e5:cb:74:63:8d:35:74:0d:52:
7c:2f:0d:2b:40:95:94:8a:84:f7:ca:66:28:11:d4:3b:fb:7b:
06:df:e4:07:a4:d5:c8:db:a0:60:bb:88:96:c8:71:d0:a0:87:
00:e2:fb:0f:4e:54:73:05:af:d4:9b:2c:53:4d:3d:b2:76:13:
45:4c:db:12:c2:c2:1c:07:a0:15:10:9e:ad:b0:86:f6:7e:d6:
a0:12:9e:be:0b:f3:93:45:3b:f2:59:10:1c:67:c4:6b:4c:69:
32:7f:ba:fc:ce:83:82:97:c4:22:12:d6:c6:85:92:05:5d:23:
bb:43:97:f0:b7:7b:c5:c4:90:00:73:a4:21:71:cf:e6:80:7a:
0a:c6:b6:7e:f7:31:83:98:cc:a3:87:e7:2e:c9:0f:59:58:26:
5b:ad:7e:c2:4d:29:92:a7:e8:aa:cc:45:b6:4b:1a:d5:dc:64:
93:55:91:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:45:42 2025 by rpki-client