Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ls7x6EcXhGMSPOjUsjhBPbGGCp8.roa
File: Ls7x6EcXhGMSPOjUsjhBPbGGCp8.roa (raw, json)
Hash identifier: L5KwU529zC4TzsxAD7XrKa24xawtrdQ1Z/c7MkZARMA=
Subject key identifier: 2E:CE:F1:E8:47:17:84:63:12:3C:E8:D4:B2:38:41:3D:B1:86:0A:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870B91568F36A85AF9BFDA35AF8752B9A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ls7x6EcXhGMSPOjUsjhBPbGGCp8.roa
Signing time: Wed 22 Mar 2023 23:04:46 +0000
ROA not before: Wed 22 Mar 2023 23:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b90:cba2/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0b:91:56:8f:36:a8:5a:f9:bf:da:35:af:87:52:b9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 23:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ecef1e847178463123ce8d4b238413db1860a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:51:68:f3:53:2e:8c:4e:0a:27:62:3d:6d:72:
75:98:4e:58:57:fa:a8:91:22:87:6d:b4:d5:45:62:
2f:92:70:d3:49:17:18:da:e5:0d:29:57:a4:3e:3a:
06:f3:d6:53:90:81:1c:3a:e1:5d:97:69:9a:a4:8e:
b0:80:55:f9:b6:51:e2:bd:c5:3f:f8:73:69:d0:40:
c6:24:b6:08:d5:27:95:66:03:c7:78:42:2a:6c:8c:
fd:fc:6c:a5:fd:ad:6b:74:85:0a:f4:20:ba:2b:c1:
cd:60:2d:61:b0:c8:0e:3c:41:a1:d8:8d:3a:94:49:
79:4f:b4:2e:3f:61:a4:12:ee:85:ec:f2:07:be:eb:
f3:c3:ea:da:8b:18:5a:90:9d:cb:f0:fb:93:94:4c:
46:99:13:08:ce:49:01:df:5c:71:9c:97:96:16:49:
6f:24:cd:51:02:a5:b5:f6:e5:f2:ae:66:ae:11:45:
40:e8:c6:d2:13:01:32:cf:ca:19:d8:26:82:52:11:
00:a3:f4:2b:d6:73:59:14:d8:2c:82:3f:04:28:14:
6b:a5:87:d3:79:26:99:80:36:53:51:cc:ab:21:90:
61:c9:81:e1:4c:21:6c:31:89:2a:9a:7e:2a:a7:9b:
26:89:bf:f6:87:40:eb:8e:c4:12:b9:e7:2f:0b:b6:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CE:F1:E8:47:17:84:63:12:3C:E8:D4:B2:38:41:3D:B1:86:0A:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ls7x6EcXhGMSPOjUsjhBPbGGCp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:ad:85:16:e8:45:8f:7b:da:e5:a0:07:6b:16:cf:94:29:11:
25:9d:5a:6c:42:ef:de:24:2a:59:ff:d9:61:66:2a:83:d8:9a:
3a:81:70:49:b7:0a:93:cb:fc:ea:a6:e7:df:8e:1f:eb:55:ed:
34:e8:2f:6a:46:cc:f8:ed:d7:01:d6:77:37:b6:11:0c:31:a3:
5a:40:72:53:1e:20:0d:fc:2c:f8:1d:90:80:ce:5f:62:e6:0e:
ea:a5:39:2a:c5:4d:d8:df:e2:cf:0e:53:a9:d9:c1:68:84:2a:
35:6d:d9:8e:38:68:37:bc:52:75:8b:42:01:d7:ac:8c:eb:cb:
df:e7:b3:31:2e:67:42:17:9f:46:48:23:74:79:67:92:e7:b7:
c1:c3:0d:67:21:65:40:9b:19:c2:12:af:b3:7a:bf:42:1d:3f:
f5:c6:4b:d2:7f:1b:a4:e5:a7:e7:17:91:81:dd:ee:5a:0c:32:
10:3e:7f:3e:ce:ed:01:98:74:76:da:65:2d:6a:0b:54:d6:a5:
74:3d:90:d6:30:a8:cf:d4:a3:c2:2c:b9:88:36:6d:98:9b:11:
78:d8:18:ee:ff:7e:dd:51:e0:cb:c3:61:3a:79:88:c9:e2:90:
28:4d:e4:72:83:62:ff:29:8f:68:21:db:29:a7:82:5f:1e:1e:
d2:2b:59:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:16:56 2025 by rpki-client