Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L_KyMUEqWhyvJIC935BbtQf0N5c.roa
File: L_KyMUEqWhyvJIC935BbtQf0N5c.roa (raw, json)
Hash identifier: ogphztBHBGlbPl3ubWVwUgX18Oina6LVN88UqEA7yi0=
Subject key identifier: 2F:F2:B2:31:41:2A:5A:1C:AF:24:80:BD:DF:90:5B:B5:07:F4:37:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884E1A94888EFAB3067AC026C6FF4A51FC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L_KyMUEqWhyvJIC935BbtQf0N5c.roa
Signing time: Wed 24 May 2023 14:12:24 +0000
ROA not before: Wed 24 May 2023 14:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:1a:94:88:8e:fa:b3:06:7a:c0:26:c6:ff:4a:51:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 14:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ff2b231412a5a1caf2480bddf905bb507f43797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:ce:9b:96:c1:01:50:f2:fb:93:62:a6:c1:
c9:20:02:cd:70:58:ee:35:94:bd:70:5e:67:af:d1:
70:43:84:b6:09:d7:24:8a:e8:12:f8:d9:d0:f1:94:
1f:f5:b2:47:09:ce:fb:3f:1c:4b:10:3f:e6:63:33:
21:57:6f:7f:5d:49:b2:df:09:35:1f:12:63:ff:1f:
a6:d8:2f:5f:aa:b9:49:e3:48:85:87:b9:b3:29:e9:
ab:e0:12:a5:be:5c:fd:9d:32:94:fc:af:02:fd:5f:
79:76:9f:0f:e8:90:16:85:ab:78:71:52:88:05:74:
1a:03:f9:98:d2:ea:c2:67:f9:d2:1e:6a:87:45:07:
3d:be:0b:8c:60:31:99:42:39:a4:db:c0:69:66:85:
27:c9:02:2a:eb:5f:72:c8:c5:0e:59:0d:1c:01:06:
7a:c2:ff:f7:24:3b:5a:24:20:19:ca:7b:e4:90:c1:
d1:68:37:fb:3e:1a:07:29:fa:78:fe:b8:c2:f4:5c:
2a:fb:77:05:d7:03:cf:db:3e:44:25:30:4d:65:45:
18:1a:8d:24:ce:f6:0c:a3:45:f0:cf:c5:51:2e:ef:
8d:1f:d6:91:fc:d8:a7:94:02:fd:15:b8:4b:cf:e1:
20:55:dc:06:dd:e3:c5:26:69:28:e6:73:f6:d7:e5:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F2:B2:31:41:2A:5A:1C:AF:24:80:BD:DF:90:5B:B5:07:F4:37:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L_KyMUEqWhyvJIC935BbtQf0N5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:05:90:cc:f5:c8:8d:e2:11:eb:31:a4:9d:56:3f:a7:82:62:
d4:27:45:23:b1:95:e8:d6:84:3c:01:80:42:fc:d7:4f:fb:82:
bd:b3:24:a3:ab:36:7d:e6:ca:0a:c4:51:41:96:43:e0:5c:aa:
75:b3:49:56:51:c4:51:3c:01:4a:05:2f:76:b2:8c:f2:57:7c:
36:d4:6d:7a:6e:fe:42:91:0e:c1:2b:ba:bd:89:a2:90:19:fa:
f5:18:c5:ff:7f:09:5e:8e:af:29:62:ac:42:8c:8b:7b:14:dc:
87:fc:40:27:33:d6:6b:3d:1b:0c:5c:9d:2d:3b:00:78:8e:75:
0f:af:e8:35:a6:7b:dd:ac:f5:ab:18:c0:52:d9:d9:1d:8b:64:
8b:94:3c:a8:81:98:2b:b3:c0:09:c1:df:e1:e9:13:45:15:01:
af:09:c5:9f:1d:4f:03:d1:64:4b:2e:33:af:c3:e5:dc:1a:51:
f9:5e:73:43:96:25:ac:cb:43:37:23:4a:a2:e6:57:48:3d:d2:
0d:54:c1:58:75:4b:dc:35:5f:62:8f:64:a1:05:93:a7:52:3b:
ea:71:ed:9b:19:e1:bb:3f:64:66:71:a6:49:5c:c7:9b:76:e8:
4f:8d:3d:1c:2d:bc:72:b4:ce:65:fa:de:44:c6:85:38:f3:38:
91:f5:c1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:51:50 2025 by rpki-client