Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LguKY3qA-VkEhsp9Qj8oCvBxCYg.roa
File: LguKY3qA-VkEhsp9Qj8oCvBxCYg.roa (raw, json)
Hash identifier: IbicMxDys2olt++bGm/tu58Ljok3SakjP381MAP4uzM=
Subject key identifier: 2E:0B:8A:63:7A:80:F9:59:04:86:CA:7D:42:3F:28:0A:F0:71:09:88
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894620A3BFC17714C5B2E102CB5C298354
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LguKY3qA-VkEhsp9Qj8oCvBxCYg.roa
Signing time: Tue 11 Jul 2023 18:04:51 +0000
ROA not before: Tue 11 Jul 2023 18:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:189:4620:7da/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:46:20:a3:bf:c1:77:14:c5:b2:e1:02:cb:5c:29:83:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 18:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e0b8a637a80f9590486ca7d423f280af0710988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b3:39:be:6c:88:7d:41:c4:ed:28:fc:41:fb:
36:30:6f:0b:41:b3:f3:bf:f0:4e:b1:bb:0f:b1:af:
69:3e:10:8b:1b:fd:b4:5e:50:df:ec:55:d9:c0:71:
4c:cf:e1:f3:cc:d6:b3:11:7d:d3:51:ec:3e:28:2a:
90:6b:cb:ac:19:e7:c3:2f:9c:af:88:14:d9:df:61:
cc:ef:90:77:df:67:c9:73:6b:eb:c2:17:6d:6d:dd:
c9:87:a2:e6:c7:0a:2c:7d:67:25:8a:f1:29:c6:f2:
4b:1a:74:ac:75:32:f5:ec:1e:ba:79:e4:35:ec:9e:
4a:a8:cb:3a:ec:d9:ff:45:1f:22:f6:65:15:b0:9a:
01:82:e6:09:a7:c3:33:b2:c6:85:21:fe:4c:e0:c2:
e4:ff:08:fc:12:93:4a:10:36:16:fc:2a:49:61:5f:
7a:64:dd:28:84:a7:04:f5:92:04:ca:21:8f:7e:16:
f8:14:b3:d2:7f:ce:d9:15:13:1e:80:67:da:4e:07:
78:bc:48:04:4c:23:86:ea:0d:6b:c7:2d:1a:b0:56:
31:82:94:1c:ce:23:b5:7d:94:9b:e5:e7:f1:55:89:
8c:54:90:03:47:7a:11:f2:b8:8d:e9:8e:f7:75:c9:
91:73:f2:c1:8a:92:25:66:92:d9:96:bb:40:dc:95:
e5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0B:8A:63:7A:80:F9:59:04:86:CA:7D:42:3F:28:0A:F0:71:09:88
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LguKY3qA-VkEhsp9Qj8oCvBxCYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:39:2c:b3:db:ef:3a:e3:26:32:5b:92:ef:f9:01:1c:dc:05:
79:03:02:cd:f5:f8:d7:11:9d:f9:88:0a:d6:9f:09:92:b6:24:
63:ec:19:16:86:8c:e2:a7:1d:77:a4:42:21:0e:00:82:e7:1f:
07:9e:09:15:15:a4:18:d0:56:16:9e:9a:b8:18:ce:32:37:e5:
36:a6:34:86:f5:cc:40:76:03:a1:23:e0:c1:c5:66:10:d1:c2:
e9:65:d8:de:a3:2d:0b:b4:7d:ad:3c:62:95:c5:83:c4:59:aa:
b6:65:8a:63:2f:b2:12:ab:f7:20:49:e8:a4:32:db:7d:4b:ad:
62:52:2c:ff:9c:f9:c0:c8:3b:f8:32:00:1a:16:66:09:a0:ca:
85:56:e5:65:cf:3c:83:f6:0d:07:90:11:57:db:0d:ec:f3:2e:
d6:7e:e6:31:f4:2d:79:9f:ff:eb:59:d7:25:58:ff:66:44:2d:
7f:31:50:8c:7a:37:93:6b:87:f7:7e:cc:8f:b9:51:d0:4a:a2:
1e:60:c8:38:70:0f:66:87:c0:ee:7b:00:99:4c:b0:88:8e:bc:
f9:c5:a9:30:44:60:7c:fc:3c:8a:c1:e0:6a:4c:aa:19:c1:3a:
14:35:17:17:81:33:ad:43:57:27:83:04:e7:9a:69:60:c5:68:
13:34:3d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:20:32 2025 by rpki-client