Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LqaxxwrVBfggcJQxwzo8W5OyHKw.roa
File: LqaxxwrVBfggcJQxwzo8W5OyHKw.roa (raw, json)
Hash identifier: kn6l+8gIqWwiyM4/4cQmK55LyKyjdrGH0GKko9bNlR4=
Subject key identifier: 2E:A6:B1:C7:0A:D5:05:F8:20:70:94:31:C3:3A:3C:5B:93:B2:1C:AC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186590E45E3F689D0A46232D8C67ED3F7BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LqaxxwrVBfggcJQxwzo8W5OyHKw.roa
Signing time: Thu 16 Feb 2023 07:09:12 +0000
ROA not before: Thu 16 Feb 2023 07:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:0e:45:e3:f6:89:d0:a4:62:32:d8:c6:7e:d3:f7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 07:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ea6b1c70ad505f820709431c33a3c5b93b21cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:88:4f:25:7f:d2:5a:a7:30:16:8d:47:a9:
21:f4:8d:26:9c:ea:f1:41:b4:26:39:19:4f:a7:52:
8e:75:2f:7d:41:a9:53:3c:34:87:e6:29:d3:0d:41:
61:a4:cb:4b:82:9f:0e:82:8a:71:55:56:83:2b:d5:
0d:da:65:85:fa:d6:fc:8b:54:00:99:f0:37:2f:8b:
1b:b5:0c:57:a4:2d:7e:47:1e:ac:39:2c:2f:70:c0:
a1:f5:f6:e5:39:ed:b2:b5:20:08:e0:f9:6b:c1:0c:
11:91:d2:c9:f4:dd:93:35:24:6d:e0:56:75:20:7e:
14:a3:2b:a2:1d:60:e0:2a:01:07:28:a9:3d:21:b6:
30:4f:f4:aa:55:96:29:52:2f:e6:8a:7b:5f:8c:2b:
42:4b:41:e4:45:68:0c:05:05:4f:11:b6:91:fe:f0:
05:6a:fc:a0:88:98:1e:fb:f8:df:7d:11:92:65:2a:
73:38:2e:d0:ed:8e:c2:fd:55:12:2f:ce:f8:ed:43:
a2:5a:63:ca:26:8d:2a:99:a5:38:e1:05:e5:6e:40:
26:55:fa:11:6f:a6:b6:35:aa:c8:c9:0a:a6:04:3d:
16:28:e9:d1:a7:8d:fc:de:78:d3:bb:9c:51:bc:bb:
a2:89:64:ed:f8:3b:34:07:9a:8a:a6:ea:e0:c4:99:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A6:B1:C7:0A:D5:05:F8:20:70:94:31:C3:3A:3C:5B:93:B2:1C:AC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LqaxxwrVBfggcJQxwzo8W5OyHKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:ed:05:5e:14:cd:c1:c5:b9:4e:73:2a:30:82:8e:9e:3e:aa:
49:a4:33:1e:7d:94:28:c1:cf:00:95:71:d7:94:4d:9f:5b:7f:
12:f2:4c:44:85:55:82:d4:71:9d:78:38:44:35:6b:49:15:c3:
7c:4a:e3:05:53:79:76:50:87:cc:bb:45:25:0b:bb:19:21:e7:
35:c3:2a:c2:04:0b:31:c4:07:6c:3d:17:cb:aa:f9:02:2d:0c:
9b:71:be:22:0e:77:39:0b:1c:15:74:a2:3b:6d:d2:54:a9:7e:
7a:ea:91:d0:10:50:e6:07:bb:b7:b5:2c:0e:b9:ae:c5:ce:1f:
0f:ed:a3:92:c4:9f:58:e8:98:e0:4e:a5:a2:85:f1:64:56:87:
c3:d7:40:4d:9d:cd:24:16:14:66:c9:05:5b:24:8b:7f:ca:3b:
ca:21:a2:45:d0:2a:fd:9e:77:47:af:6f:8b:b6:94:bb:14:91:
af:c7:39:9b:66:cf:16:c7:2f:ff:5b:db:54:e5:02:6c:39:1d:
b3:0d:c5:8c:d7:99:e2:44:bd:f4:e1:33:d3:4c:40:55:66:be:
ba:1b:19:4e:7e:63:e5:a3:87:17:70:0a:12:e9:ad:b8:aa:00:
23:71:cf:ec:47:aa:48:aa:0e:94:78:c6:26:68:6c:d3:a4:b7:
15:74:39:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:12:34 2025 by rpki-client