Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lq3v3LT_KsuCXNWKTo4xp8O8Aa8.roa
File: Lq3v3LT_KsuCXNWKTo4xp8O8Aa8.roa (raw, json)
Hash identifier: 6TtXXLE/2zWaAVZIKC2VurdhabbP3o/UtjlTz/8+ulw=
Subject key identifier: 2E:AD:EF:DC:B4:FF:2A:CB:82:5C:D5:8A:4E:8E:31:A7:C3:BC:01:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869D0F76AE498ADFDA047E6B713CE14247
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lq3v3LT_KsuCXNWKTo4xp8O8Aa8.roa
Signing time: Wed 01 Mar 2023 12:04:41 +0000
ROA not before: Wed 01 Mar 2023 12:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:9d0f:75e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:0f:76:ae:49:8a:df:da:04:7e:6b:71:3c:e1:42:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 12:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2eadefdcb4ff2acb825cd58a4e8e31a7c3bc01af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:10:09:4e:f4:2c:55:31:37:05:7b:51:61:
85:4d:e4:fa:1c:34:93:39:19:08:69:de:89:e7:35:
94:3e:bd:78:75:4e:0e:c7:b0:1c:b7:54:27:2c:71:
7f:08:dc:34:16:2e:8d:3e:c4:da:f8:99:f3:75:5c:
80:cd:58:39:d2:ee:0c:ef:03:fa:40:f7:3a:e2:43:
6e:e3:19:40:7c:c6:6a:e2:ea:d8:ad:20:9a:e5:cb:
1f:2e:4a:87:3a:ee:a2:8e:2e:4c:0e:47:6b:75:82:
b9:58:bf:17:36:ff:35:69:74:09:b6:23:1b:be:b6:
e1:97:41:fa:a9:86:43:df:ff:5f:9d:4c:15:5c:04:
24:9d:59:01:75:99:f9:b1:11:4f:c7:3f:fb:3d:5e:
b9:d8:8f:df:d5:46:56:d3:c4:05:25:88:76:50:d1:
7b:9a:24:7b:73:5f:7f:a3:61:d7:5b:27:a2:84:01:
be:17:e4:1c:17:47:36:a6:90:1a:b3:44:b3:14:21:
e2:b8:65:c6:86:3f:da:36:03:a2:80:44:8e:33:8e:
5c:b9:74:56:f9:78:62:84:f7:6d:21:ea:11:09:59:
84:8e:a9:16:6e:4c:ff:d7:4a:2a:f9:01:35:39:e8:
81:74:fe:e2:4e:86:d9:8d:43:4a:37:b8:2c:1a:24:
44:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AD:EF:DC:B4:FF:2A:CB:82:5C:D5:8A:4E:8E:31:A7:C3:BC:01:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lq3v3LT_KsuCXNWKTo4xp8O8Aa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:55:a2:8f:89:4c:d2:3f:0d:94:f9:ce:18:67:ed:df:95:c6:
e0:b4:8e:86:85:9b:dd:f1:d6:44:ce:ba:3f:10:ec:d4:07:9f:
6d:71:15:22:e7:5c:46:4f:70:c1:5b:af:57:9e:28:3a:69:0f:
47:56:22:74:50:e7:69:7d:ca:1e:54:6f:77:83:d6:01:d2:95:
14:11:8a:6b:98:9f:6d:43:8e:43:6c:6e:8a:d6:2f:7a:e6:39:
21:f7:01:0f:72:a8:8b:dd:5f:69:68:e0:39:f4:52:0b:02:63:
a0:99:ea:09:0f:ff:75:ad:1d:d6:ef:ae:07:d8:a8:62:6b:9b:
a6:82:32:5e:a6:40:9f:95:d1:cf:ae:87:84:a4:29:ab:aa:42:
dc:15:df:2c:5b:1e:29:b3:eb:29:37:2c:f6:89:2d:8f:04:8a:
df:91:e6:55:b6:a3:e9:05:8e:29:95:fb:cb:26:e6:06:f0:e5:
a5:77:af:4a:02:34:71:62:64:7c:5c:bf:60:7b:3f:7d:84:b4:
b3:ec:df:ab:3b:5b:15:2d:6b:3e:b2:44:23:d6:33:56:11:8c:
e0:85:18:eb:ce:2f:65:0c:3a:d5:42:d8:8f:a5:a9:dd:0b:7c:
fe:01:2d:bb:10:23:4a:47:6b:cb:ea:ef:5a:68:37:bc:4c:bc:
a5:99:1a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:27:10 2025 by rpki-client