Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LbV-P6Idyz5KpxGCsBBB5Sq2hEY.roa
File: LbV-P6Idyz5KpxGCsBBB5Sq2hEY.roa (raw, json)
Hash identifier: TSGgW8cbC9985s1OJrI9tPOjzV+r06bTgwRr7GOAo8E=
Subject key identifier: 2D:B5:7E:3F:A2:1D:CB:3E:4A:A7:11:82:B0:10:41:E5:2A:B6:84:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018683FCFEA9C5E3EB7663ECF28594902372
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LbV-P6Idyz5KpxGCsBBB5Sq2hEY.roa
Signing time: Fri 24 Feb 2023 15:14:00 +0000
ROA not before: Fri 24 Feb 2023 15:14:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:83:fc:fe:a9:c5:e3:eb:76:63:ec:f2:85:94:90:23:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 15:14:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2db57e3fa21dcb3e4aa71182b01041e52ab68446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:f6:4c:83:13:86:e6:59:97:5a:f4:5c:f8:
57:6f:0b:42:50:53:43:66:12:a0:95:54:08:e6:80:
31:bd:41:3e:7e:df:b0:2d:bc:6d:87:3a:fc:87:9b:
8c:1d:15:fb:21:e5:e8:ba:e5:fe:cc:5f:a8:92:0c:
97:99:29:7e:58:f1:a5:da:2e:2c:a1:40:65:b6:3f:
44:41:51:ad:c9:27:ed:6f:46:24:58:83:22:a1:a9:
a9:eb:5d:b2:5c:1e:20:e1:a0:05:b0:41:70:41:22:
a7:27:2d:2e:2b:6c:fd:ad:f5:ae:0f:16:8e:5b:d4:
9d:b3:22:8e:d9:f5:4f:a0:f0:dc:30:4c:33:bd:2f:
c2:5e:b9:70:d1:19:79:8a:8e:0b:70:a2:eb:85:ee:
51:f9:b6:43:08:33:40:51:40:80:5e:8b:23:50:9d:
2c:83:05:f4:d1:0a:b3:9d:0a:b6:15:26:df:f0:f1:
38:95:89:37:8d:dd:fc:8b:7c:52:ff:43:ad:8b:8a:
4e:a4:42:77:56:f6:e8:11:eb:ac:8e:73:b3:da:b3:
ac:a5:5b:05:b8:72:60:30:8a:b4:33:73:87:ca:2a:
bb:fc:8e:1e:06:4b:a0:5e:e1:2e:d5:9d:e8:42:ee:
9b:2e:6e:58:44:ec:bd:b6:2b:72:1a:df:72:65:b6:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B5:7E:3F:A2:1D:CB:3E:4A:A7:11:82:B0:10:41:E5:2A:B6:84:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LbV-P6Idyz5KpxGCsBBB5Sq2hEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:c0:31:5b:47:7a:1d:60:da:16:a2:fd:d0:51:42:98:2c:0f:
ee:66:70:2c:d3:ae:08:1b:77:8d:65:94:cf:b3:a2:f5:07:eb:
97:81:fa:72:1c:26:a5:4d:8d:06:79:e1:46:71:cb:41:b7:c5:
ef:32:21:7f:7e:50:f3:c7:6e:79:2b:3f:86:89:cb:36:07:a3:
ad:0d:06:20:04:81:56:bf:ef:d5:9a:9e:cf:f1:c0:07:da:21:
53:38:3b:e6:01:12:be:28:e9:fe:de:e4:cd:5c:af:e8:a3:07:
72:ea:32:31:c7:f4:83:cb:13:87:bc:6f:db:c5:32:aa:b7:43:
1b:85:f7:d6:47:01:51:62:96:4a:ae:35:ff:4f:13:cf:98:bf:
b1:e2:08:80:99:a7:2d:4a:f9:92:70:b0:97:f3:b1:75:6d:b7:
cc:94:53:8a:e4:a9:31:9d:15:44:29:55:7e:82:28:7a:51:4f:
f8:7b:4d:55:61:0d:9a:18:e6:bd:11:c8:f0:3e:ed:42:03:aa:
6b:43:80:15:e6:da:17:5b:ec:c2:4f:1d:95:1b:d7:36:2b:c9:
bd:e2:ef:ac:e9:d4:04:51:91:f4:6d:9d:f2:de:68:82:a3:66:
0d:29:97:b3:f3:f9:76:35:3f:40:31:2a:b1:94:1b:b6:4b:69:
b5:40:0d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:56:27 2025 by rpki-client