Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LpRenpkVUTuK2p-2kAtyfKaSDj8.roa
File: LpRenpkVUTuK2p-2kAtyfKaSDj8.roa (raw, json)
Hash identifier: EU5xQmkE7CFxbi8xm+5ak6iXfi9SpJKeF84nz6kYE6A=
Subject key identifier: 2E:94:5E:9E:99:15:51:3B:8A:DA:9F:B6:90:0B:72:7C:A6:92:0E:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188E302DFB817730FAF40EF26FACC16A094
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LpRenpkVUTuK2p-2kAtyfKaSDj8.roa
Signing time: Thu 22 Jun 2023 12:09:56 +0000
ROA not before: Thu 22 Jun 2023 12:09:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:02:df:b8:17:73:0f:af:40:ef:26:fa:cc:16:a0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 12:09:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e945e9e9915513b8ada9fb6900b727ca6920e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d4:ce:76:36:70:e0:ff:68:b8:37:4f:a3:29:
36:85:3d:4e:81:00:04:92:76:50:b5:10:8e:a6:fc:
c5:98:31:0c:32:cf:d7:bf:4a:f2:b1:d8:6a:fc:fc:
b2:92:2b:3d:9f:d0:65:03:2c:ce:e9:72:59:17:f3:
03:17:41:79:ec:c9:48:56:0f:4e:50:5a:26:61:23:
6c:71:96:4e:7b:64:2a:59:bf:ad:e0:05:84:34:88:
70:db:0d:32:a3:30:f3:43:97:d4:4a:a4:06:ff:47:
ea:6a:d8:a7:d9:bb:67:e5:88:6c:c8:e9:a6:ac:34:
ad:51:56:a4:d9:ba:5e:ad:9a:e4:3b:c5:7e:03:4b:
64:41:b8:0a:f0:5f:39:40:e2:4f:d7:4e:69:49:76:
88:ab:52:4d:0f:35:99:f3:5d:89:95:bf:ac:42:33:
e0:90:3d:c8:67:7f:a5:47:67:9a:60:08:ac:9b:b8:
1d:f2:fc:9e:54:05:ff:ca:4f:23:03:7d:d6:80:86:
20:8b:12:fa:d8:f0:8a:59:6f:bb:71:9f:f1:62:58:
af:6c:a3:04:f7:d1:6a:07:22:2c:81:f9:7e:6e:77:
b3:19:4e:53:7e:02:ef:4a:cd:b7:ff:20:aa:99:47:
cc:a2:dd:01:28:0f:64:ae:ab:cc:a9:71:b5:f7:f0:
07:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:94:5E:9E:99:15:51:3B:8A:DA:9F:B6:90:0B:72:7C:A6:92:0E:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LpRenpkVUTuK2p-2kAtyfKaSDj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:6c:46:19:bb:40:12:e5:81:07:fb:ab:ee:43:75:1e:72:2d:
96:61:98:a3:30:7e:11:9b:c0:56:7f:c0:82:4c:b5:50:6c:58:
a0:3d:1e:42:79:89:0e:d3:de:9e:1e:57:f4:e5:4c:2c:94:15:
8a:cf:6e:8f:58:9a:3b:fa:3d:1f:33:07:11:bd:46:3c:08:b1:
e3:50:fe:09:20:a6:c9:a3:fe:4c:ee:67:5f:d7:db:3a:70:2a:
bd:ba:25:4b:90:7b:39:53:ba:78:24:1b:cc:f8:c5:f5:f2:ba:
8c:04:32:5a:5b:39:74:56:7d:31:e9:e7:59:dc:7b:19:1d:7b:
c3:cb:d9:35:05:9f:de:2d:df:e3:d4:a9:41:fe:7b:9e:e5:44:
4a:0b:c8:ea:7c:6a:a6:be:7c:30:18:ed:69:25:67:b3:79:b0:
40:36:b7:e8:31:a4:09:8f:8d:3e:eb:58:be:5a:28:9d:da:7c:
a8:02:36:ea:e1:be:f8:27:8c:c0:4a:2d:2e:72:00:20:a9:5b:
13:bb:dc:41:54:31:81:70:0e:ff:86:11:97:0a:98:7a:52:6e:
aa:96:f3:88:a1:83:94:79:bc:d3:02:da:43:0b:2b:1c:24:07:
a4:8d:02:30:33:71:1a:3e:73:dd:66:2f:5c:99:4c:69:95:01:
1e:97:50:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:33:54 2025 by rpki-client