Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LYPeJ93gVSWerCH00mSSMGMFBaY.roa
File: LYPeJ93gVSWerCH00mSSMGMFBaY.roa (raw, json)
Hash identifier: rajSJ2Lkfs66ChulNqUZeTHIT2LOixKgXRdTrGc4p4w=
Subject key identifier: 2D:83:DE:27:DD:E0:55:25:9E:AC:21:F4:D2:64:92:30:63:05:05:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018649D4D0E7D173F72EF80E90822CAD1EC5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LYPeJ93gVSWerCH00mSSMGMFBaY.roa
Signing time: Mon 13 Feb 2023 08:12:09 +0000
ROA not before: Mon 13 Feb 2023 08:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:d4:d0:e7:d1:73:f7:2e:f8:0e:90:82:2c:ad:1e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 08:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d83de27dde055259eac21f4d2649230630505a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:fe:b0:8b:50:29:e9:cd:e2:18:66:0b:c3:
66:21:b0:e2:42:b6:f0:29:0d:4f:45:f4:76:40:e4:
81:33:ca:b3:26:0d:b8:09:11:b9:3c:ea:4f:ba:33:
80:68:a1:b6:f6:ab:33:b3:ac:7f:f8:5d:e8:b5:c8:
b4:3a:a8:4c:e8:86:86:3d:51:57:ad:92:81:2e:82:
72:2f:7f:0c:14:06:93:e6:1e:36:70:da:58:9f:f7:
b2:58:87:95:c2:7b:43:94:a1:57:42:40:8d:14:13:
57:d5:52:11:95:8d:8c:71:54:7e:74:07:0c:b6:26:
fb:34:58:e8:fb:66:2e:0b:19:45:dd:2b:e4:fd:94:
be:25:e1:86:13:ba:93:50:ad:b4:4f:8e:52:5a:ad:
6f:58:ec:74:8c:2c:1e:f4:16:3f:b4:f0:54:61:bc:
44:39:94:20:96:b0:b7:17:27:cc:a3:be:53:0e:b4:
73:25:7f:ee:02:1e:4e:27:c2:e9:83:ab:30:9e:41:
d5:39:61:12:2a:14:6e:a5:c7:75:c0:07:c7:f6:d5:
81:f3:39:e0:6b:86:13:db:d9:eb:e1:25:af:41:d9:
b9:f1:11:3c:b6:d2:7e:55:74:2e:3f:61:f2:fa:6b:
01:ae:7f:28:51:58:5b:f4:45:e1:bc:5f:9f:63:9e:
9f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:83:DE:27:DD:E0:55:25:9E:AC:21:F4:D2:64:92:30:63:05:05:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LYPeJ93gVSWerCH00mSSMGMFBaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:74:e3:72:3b:34:6b:ec:d9:c0:dc:a8:a8:18:2e:4e:1c:9d:
4e:2e:b5:5b:e6:87:f1:7f:ab:59:bc:75:1c:1b:9d:a1:2b:59:
19:b1:ab:ef:89:12:16:d2:cc:75:30:a4:99:0c:8a:57:0d:98:
09:c1:d2:1a:bd:ba:43:89:85:5d:f9:b9:3a:16:3e:0a:91:58:
05:f5:ad:b9:64:5e:90:9d:2e:8d:01:e0:20:58:8a:f0:db:0d:
6a:f4:1c:86:ba:74:6f:f9:b5:1c:e0:52:fc:a3:76:95:12:ff:
3f:c9:fa:ea:5e:9d:c5:94:ef:30:76:76:40:2f:82:74:5e:0d:
ca:f9:6e:41:36:fc:dd:c4:34:f1:3e:be:17:91:f9:94:0f:54:
4f:7a:c7:60:8a:08:45:b0:81:27:d7:bb:f7:74:7b:e7:39:5e:
62:65:4a:1e:8d:ff:15:09:fd:50:83:86:2f:18:79:a8:70:d2:
06:a1:8a:c5:af:ac:2c:cc:e8:7b:b0:fc:98:0c:4e:a2:7f:79:
0c:bf:eb:6f:ed:e0:96:1a:b5:5b:e1:17:ff:f2:79:54:c9:17:
e9:e6:62:bf:aa:ca:c1:ef:dd:e5:75:fb:23:47:f7:0f:90:df:
36:02:74:b9:8e:46:88:a6:2d:47:8a:79:f8:91:63:1e:19:78:
51:be:80:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:07:49 2025 by rpki-client