Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LkVyGlN-0WiL-Sf7wGLi6CUIn-8.roa
File: LkVyGlN-0WiL-Sf7wGLi6CUIn-8.roa (raw, json)
Hash identifier: mY/0yy5iyo5V8eDu9x5i/sbSEsoiO5XJ0LrYK4aS2jY=
Subject key identifier: 2E:45:72:1A:53:7E:D1:68:8B:F9:27:FB:C0:62:E2:E8:25:08:9F:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01859220812EC764268467D3B216ABB89403
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LkVyGlN-0WiL-Sf7wGLi6CUIn-8.roa
Signing time: Sun 08 Jan 2023 16:04:41 +0000
ROA not before: Sun 08 Jan 2023 16:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:9220:22ea/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:92:20:81:2e:c7:64:26:84:67:d3:b2:16:ab:b8:94:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 8 16:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e45721a537ed1688bf927fbc062e2e825089fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:ca:11:39:ad:56:83:f2:ef:8b:d6:74:b8:
b0:24:07:e0:4d:8a:b8:2d:b5:b9:5c:e5:f5:4d:c3:
38:1b:3a:f8:df:d2:a0:0f:df:66:98:90:b1:8b:a1:
b5:d7:3f:bc:0e:f9:84:cc:80:a5:5f:11:b1:d9:cf:
ab:a7:8e:d7:3e:c4:c8:60:f3:ad:b4:ed:2c:55:46:
a1:54:1e:60:3e:8a:e8:3d:34:f2:ef:28:10:64:62:
d2:83:2a:91:e8:1d:42:dd:72:d6:9a:0e:90:5c:91:
bd:bb:cf:49:6f:c2:6d:89:e8:c5:4b:5f:cd:94:23:
e4:1c:33:aa:a0:12:bc:3e:cb:56:be:e9:e9:c5:20:
e7:8d:88:f7:f2:ff:6a:f6:5a:93:dd:4d:3e:20:8c:
03:a6:f3:9c:fd:6f:35:24:28:7b:d8:29:c5:5a:5a:
57:51:fb:ea:1e:4d:d5:ce:4e:6b:1f:f4:4b:a6:7e:
ba:6c:54:e4:33:7d:5c:26:27:bf:36:70:2c:c4:b7:
03:b3:f3:f9:1f:8c:cc:c3:72:00:d3:ac:07:9c:d7:
36:2c:6e:14:99:9b:6b:1c:96:83:f6:72:19:9c:6d:
1a:cd:33:32:d0:bd:74:23:1f:00:8e:db:c1:26:38:
8f:31:47:05:40:59:d6:03:57:5b:c0:e7:36:43:01:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:45:72:1A:53:7E:D1:68:8B:F9:27:FB:C0:62:E2:E8:25:08:9F:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LkVyGlN-0WiL-Sf7wGLi6CUIn-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:69:bb:74:8b:5a:ff:fc:58:f1:5a:86:8d:ee:f2:5c:cf:1b:
29:d9:c2:2b:44:a3:96:40:9f:09:bf:8a:bf:fa:7d:ed:80:6a:
3f:24:4b:2a:2e:90:c8:de:d5:6b:3e:69:56:a8:75:f1:15:1c:
e2:0b:4d:41:86:1c:e8:09:b3:6d:9a:87:45:44:c3:6f:ec:0f:
7a:73:cd:74:f0:f0:69:10:78:3d:ee:2d:68:49:5b:57:aa:28:
62:0e:60:26:e3:02:16:b9:f3:07:1b:65:68:e8:b7:4f:5c:fe:
a8:4b:09:46:07:16:1b:ff:cf:09:88:0c:5c:2f:d5:57:a3:b6:
6e:f8:c2:23:3f:43:0f:d0:b7:94:56:62:61:12:d6:9e:af:1c:
d2:1e:48:55:98:2b:9e:1d:9c:d6:5f:ea:8c:79:57:ae:83:4a:
ab:db:58:4f:e9:02:54:70:03:6b:7f:80:0e:81:5e:f3:f7:74:
a8:21:eb:62:99:49:22:25:7e:37:50:df:be:e9:92:71:1d:7c:
de:cf:b7:1e:9a:a6:5c:b1:f6:a9:a2:29:56:54:a3:a6:23:b3:
45:3f:33:58:e0:24:f2:04:11:fc:c6:47:c4:d9:3d:6a:33:25:
21:1e:9f:2d:67:9d:e0:84:08:04:b7:21:14:dd:3f:54:ef:2d:
91:ed:3e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:54 2025 by rpki-client