Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LlJMvYC_Nfa1yw_fT6CJr5r_Ho0.roa
File: LlJMvYC_Nfa1yw_fT6CJr5r_Ho0.roa (raw, json)
Hash identifier: Vkrky5KRgXYSaZOuA8EL8Q2+pAHZCDYOm3tSmCwpFgo=
Subject key identifier: 2E:52:4C:BD:80:BF:35:F6:B5:CB:0F:DF:4F:A0:89:AF:9A:FF:1E:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184665E410B8E790EEF0842C538408A9A58
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LlJMvYC_Nfa1yw_fT6CJr5r_Ho0.roa
Signing time: Fri 11 Nov 2022 11:06:03 +0000
ROA not before: Fri 11 Nov 2022 11:06:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64:ffff:0:184:665d:6532/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:5e:41:0b:8e:79:0e:ef:08:42:c5:38:40:8a:9a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 11 11:06:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e524cbd80bf35f6b5cb0fdf4fa089af9aff1e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:a2:94:88:cf:2a:50:87:27:3c:0c:eb:72:
2e:33:9a:ea:43:42:b6:9e:09:0c:93:4c:05:4d:16:
02:5a:cf:4b:c3:18:6a:2e:ba:f1:f9:06:c7:cd:f7:
13:3d:a1:e7:de:50:c8:c6:0a:74:03:c1:88:89:40:
69:86:2d:7f:55:0a:52:da:3f:1d:b2:de:e9:dd:85:
a4:e6:38:d4:dd:38:88:31:e1:9b:51:0c:9a:65:8c:
13:4a:8d:e9:32:b0:31:7a:b9:35:2a:71:12:d9:7b:
73:8e:31:08:17:5f:1b:ab:72:49:7c:99:70:53:8c:
1e:54:86:66:02:b7:5f:e9:09:c9:25:1c:db:e7:04:
e0:45:43:a4:05:68:77:ca:47:99:de:b7:52:e6:c7:
b1:33:33:e7:91:0c:4f:eb:62:10:d6:69:b1:1e:ae:
80:ca:51:c6:56:c3:97:e6:f6:98:97:07:55:fc:14:
8b:00:d4:a0:af:37:a9:d2:fe:e1:f3:35:21:3f:d4:
c8:ac:53:80:d5:d1:50:6a:c3:ce:21:ad:36:15:fb:
e3:4f:8a:ff:b0:d8:c4:4a:3a:d3:95:5c:bf:d8:32:
b9:bf:4f:dd:41:ed:15:b3:33:e1:35:93:ba:43:3a:
a1:62:23:e7:31:3f:13:89:eb:46:18:fb:82:0a:43:
98:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:52:4C:BD:80:BF:35:F6:B5:CB:0F:DF:4F:A0:89:AF:9A:FF:1E:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LlJMvYC_Nfa1yw_fT6CJr5r_Ho0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:c9:3f:8c:86:bc:eb:ac:a2:49:88:7a:72:6d:44:49:41:3f:
67:8f:a7:82:dd:45:43:0b:b9:67:41:15:50:cc:5e:b6:33:aa:
ef:4c:13:75:24:bb:e1:46:2e:07:00:f3:08:35:69:1d:42:6b:
b8:a4:99:d2:87:ac:94:b8:83:81:56:69:30:db:56:aa:71:14:
d0:bb:51:be:e9:4b:fb:37:f2:9c:65:eb:df:f4:c2:43:00:db:
68:65:c0:cb:ec:8b:ac:75:20:e2:ae:2d:1f:32:a2:71:9d:ae:
17:39:64:56:f1:de:dc:72:fd:83:9f:c2:f8:9b:35:6c:0a:61:
dc:e2:ae:52:f5:7e:f9:97:04:72:68:4b:c4:e0:cc:2a:3c:06:
c3:29:4d:4e:9a:ba:43:17:fe:cc:2a:be:bf:ac:8e:39:b2:6d:
a2:20:ba:82:8f:18:11:26:91:60:63:b1:e2:32:89:d2:fb:db:
a5:7b:4a:d0:ef:72:24:10:b0:e4:b1:dc:2a:d6:67:96:f2:3a:
82:7f:b3:59:d2:61:07:d6:e8:5b:34:66:6b:38:8d:b8:35:8d:
80:88:00:48:36:7d:a5:6f:22:30:26:4b:d4:6c:69:53:59:f1:
23:a3:3b:72:7e:43:e0:e5:e5:50:0a:69:7e:80:40:3a:23:42:
2a:eb:d8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:30 2025 by rpki-client