Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LqVgZpOBkXYeicbj8r4EYx1buQM.roa
File: LqVgZpOBkXYeicbj8r4EYx1buQM.roa (raw, json)
Hash identifier: ZwBIwUINUiObGgJ59/T+0gbuStX+3ivReA6orMO3vmM=
Subject key identifier: 2E:A5:60:66:93:81:91:76:1E:89:C6:E3:F2:BE:04:63:1D:5B:B9:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8D39ED18
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LqVgZpOBkXYeicbj8r4EYx1buQM.roa
Signing time: Thu 16 Jun 2022 13:17:43 +0000
ROA not before: Thu 16 Jun 2022 13:17:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2369383704 (0x8d39ed18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 13:17:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ea56066938191761e89c6e3f2be04631d5bb903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:10:a5:0f:ad:7a:2c:3c:21:a4:be:27:c2:
4e:3a:c2:28:dc:55:97:b1:d1:1b:8f:01:f2:f7:50:
cf:e9:af:55:f2:a2:c3:14:be:94:0e:2f:f7:8f:24:
53:31:da:ab:fd:bb:cc:f9:df:a8:81:f8:64:f8:7c:
b9:cf:a5:0d:09:b4:c1:bb:15:74:c9:7f:02:67:5e:
80:ab:2d:db:21:21:8a:c4:d8:df:fb:ca:66:e2:ef:
6f:c7:91:2c:67:7e:7f:f5:c6:4c:5b:17:33:48:78:
bd:bb:db:d3:db:4e:a9:e8:4d:26:7c:09:4f:cd:87:
a6:2d:ca:53:79:7a:a3:2b:7a:ac:2b:d8:2d:fd:24:
7d:e0:84:81:f7:09:a0:e7:94:e4:c2:af:40:d7:d5:
b4:dd:b1:2e:97:26:0b:ac:c6:3d:1c:38:32:a2:f2:
37:d1:e1:b1:67:a3:77:04:f1:08:83:32:3e:cc:da:
e0:85:cb:ff:ae:d2:59:c3:78:64:7d:13:b3:dc:98:
06:19:02:5d:f2:a8:bd:79:94:fc:7e:c1:88:c4:aa:
a4:0c:d4:17:87:f8:da:44:75:d6:a3:4e:1c:26:92:
a1:46:e4:4f:d2:61:6d:65:fb:84:fe:a0:44:f0:2b:
a8:63:3b:a2:4f:b4:c0:63:12:86:d5:3d:bc:29:dd:
4a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A5:60:66:93:81:91:76:1E:89:C6:E3:F2:BE:04:63:1D:5B:B9:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LqVgZpOBkXYeicbj8r4EYx1buQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:9e:af:b7:e7:e8:98:48:63:10:02:b2:19:bf:73:31:6f:f3:
6b:b3:d9:ce:0a:04:97:6e:6f:72:5e:0b:3f:e7:db:24:89:25:
dd:b0:bc:7f:0c:7f:ea:39:0d:21:68:cd:6f:40:4a:59:76:7e:
4d:2e:1e:ea:e3:eb:c3:f5:af:8b:1e:48:60:1d:62:23:87:d7:
85:d3:ca:e7:e0:39:fa:1e:f1:a8:70:9e:90:80:2b:d2:56:b5:
1f:44:fd:d9:6b:b2:b8:4c:c6:e2:b9:72:86:1c:cf:56:85:06:
ab:a3:ec:64:32:4b:7d:22:b8:18:c4:55:a2:9d:cf:37:75:ff:
2e:eb:f6:17:23:37:8e:f8:3b:59:58:65:6d:20:cc:3b:16:74:
1c:37:57:a7:f3:86:27:40:5b:32:0e:20:78:02:17:75:3d:d6:
22:25:3e:ea:ab:a1:20:23:7a:3f:4e:b4:4a:37:b7:d5:57:72:
9d:46:23:72:6f:ef:aa:41:71:df:c9:d5:0f:17:1a:e6:19:25:
34:f9:dd:e7:5e:61:e2:f0:3e:af:12:26:02:e8:75:44:13:d3:
1f:4f:6b:d3:45:98:9b:69:42:93:53:ae:58:98:8f:59:df:4d:
ad:81:31:d9:98:b3:23:68:83:42:e6:39:2d:4e:a5:7c:dc:41:
58:1f:ad:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:34 2025 by rpki-client