Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lm7zvZh1CIFr8UdhkAPTqIuOdQI.roa
File: Lm7zvZh1CIFr8UdhkAPTqIuOdQI.roa (raw, json)
Hash identifier: 8gokgXvB5LIzS5b9qEMvJTq2YKst5Jj66QBFUfI/bsE=
Subject key identifier: 2E:6E:F3:BD:98:75:08:81:6B:F1:47:61:90:03:D3:A8:8B:8E:75:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D36566CB752537E65AC6E56A9FB8D152
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lm7zvZh1CIFr8UdhkAPTqIuOdQI.roa
Signing time: Fri 02 Dec 2022 15:12:28 +0000
ROA not before: Fri 02 Dec 2022 15:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:65:66:cb:75:25:37:e6:5a:c6:e5:6a:9f:b8:d1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 2 15:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e6ef3bd987508816bf147619003d3a88b8e7502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:1b:11:9a:ca:9e:bb:51:aa:b3:67:6d:5f:
3c:1a:18:88:82:09:11:e6:f1:e9:47:36:86:3b:83:
3a:44:36:41:f2:d0:c7:83:28:d9:06:0f:09:a6:e3:
a6:6d:d8:f1:31:57:e2:4f:a0:4f:2d:c8:73:8d:ea:
95:f5:1c:94:b1:c2:97:11:31:9b:57:89:3f:c9:1f:
52:2a:7e:da:9e:02:7b:c3:98:7f:e6:54:6a:e2:6f:
3a:10:d0:dd:aa:dc:0b:67:75:7f:12:13:0a:ea:ec:
1f:15:f9:1f:18:4b:66:c8:f0:21:dc:68:29:70:1a:
4c:de:d2:4e:42:37:53:87:4e:d4:78:4c:df:11:20:
ae:d1:7b:c0:fa:86:2d:1b:8b:78:de:fb:30:af:32:
fb:e3:a6:e5:98:c0:cc:03:87:ee:6d:81:86:76:7f:
7a:29:2f:32:ac:08:36:d1:fe:4b:d9:39:64:79:ef:
3d:77:e2:63:4d:18:c5:45:6a:05:63:fd:79:0e:b2:
af:e5:e5:4a:84:93:4f:79:5b:62:02:da:90:c6:94:
ee:aa:70:45:4f:34:a0:9c:08:cd:72:c1:e1:2c:f1:
4a:e6:8c:1a:00:a6:4e:61:af:29:6b:3d:a5:49:c2:
6f:aa:b8:e7:6b:5e:74:5c:05:ec:fe:72:13:5f:b1:
86:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6E:F3:BD:98:75:08:81:6B:F1:47:61:90:03:D3:A8:8B:8E:75:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lm7zvZh1CIFr8UdhkAPTqIuOdQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:9b:b9:68:61:bd:57:55:ec:da:d8:ad:50:1c:18:a0:a6:5d:
96:5b:19:fe:70:12:fb:5a:54:a0:fd:c9:54:6d:63:04:82:2b:
e8:f1:c6:9c:f7:29:a5:b3:fc:a2:88:eb:7a:e2:06:84:73:87:
f3:d3:f5:5f:b2:87:41:04:bb:74:97:6d:32:92:1f:54:6a:7d:
ce:e1:59:6d:1f:8e:78:6f:e5:30:3b:9d:18:69:7a:87:9d:8c:
61:3a:13:92:7d:07:1c:81:e4:6b:37:b6:1c:c0:01:0a:c6:95:
83:0e:92:cc:95:41:32:a4:cf:e7:66:c3:c8:b9:7a:fe:04:3f:
53:95:92:82:61:55:2f:af:cc:1e:ac:06:7a:8b:fb:43:b7:9e:
0e:0f:0f:d9:0d:c3:31:2f:e8:c9:eb:27:ed:74:03:cc:eb:45:
e0:c5:57:d3:28:8a:1d:83:d6:c4:d4:20:76:4e:4e:24:2b:be:
14:b6:8b:e5:d3:f0:1c:8d:e8:f6:a1:c1:12:24:64:0d:ed:ac:
55:3d:9c:aa:7e:91:c8:cf:0b:3f:06:0e:87:57:40:b8:bc:b4:
99:b6:1e:1e:7d:26:27:06:f0:89:a2:a2:df:e8:c3:e2:45:d6:
f3:f1:5e:8c:54:98:fa:54:0d:1e:44:c8:11:37:e3:81:85:18:
93:1a:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:13:46 2025 by rpki-client