Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lu-B6VY1_clIj_v0oTjkleMSEJg.roa
File: Lu-B6VY1_clIj_v0oTjkleMSEJg.roa (raw, json)
Hash identifier: fylCzKx5EF6dSjge5pndNacr0QFnfFQdmrN+J5Hm8GY=
Subject key identifier: 2E:EF:81:E9:56:35:FD:C9:48:8F:FB:F4:A1:38:E4:95:E3:12:10:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018799A37F948EC53F546CCFF4E71BBB0FDE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lu-B6VY1_clIj_v0oTjkleMSEJg.roa
Signing time: Wed 19 Apr 2023 13:10:41 +0000
ROA not before: Wed 19 Apr 2023 13:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:a3:7f:94:8e:c5:3f:54:6c:cf:f4:e7:1b:bb:0f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 19 13:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2eef81e95635fdc9488ffbf4a138e495e3121098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:01:4e:11:c9:14:b3:51:dd:4b:5c:c9:3c:2d:
83:8b:d5:26:ed:73:51:22:f7:4c:47:42:ce:49:93:
0e:7e:b8:61:7d:64:5c:31:d0:09:df:f2:1a:b1:72:
0c:60:cf:f0:e1:79:f5:11:2d:b8:4e:a8:84:1a:d0:
34:2d:19:ed:b2:c8:bb:b9:b7:5b:6c:ad:6b:7c:7f:
39:4e:20:be:82:cf:7c:4b:30:71:c6:6d:18:cf:6f:
64:7b:8b:89:af:dc:1e:8c:95:a2:24:94:39:2b:67:
85:96:c0:0e:db:ce:e7:4f:f9:6f:2a:61:13:74:7b:
55:91:69:00:0b:97:c1:b0:31:86:4b:68:5a:b5:c3:
f5:9f:25:e7:dc:5e:fd:8e:8e:83:87:8b:4d:3b:94:
ee:b4:71:a6:e5:34:20:54:34:56:d8:0e:08:ad:28:
c7:0b:0a:1c:5b:b0:53:57:69:56:68:4c:fc:77:fc:
22:48:34:fe:13:64:0d:ff:33:8b:2f:33:8c:79:7b:
eb:47:96:9a:ec:46:31:33:a4:50:0a:c0:9f:a1:50:
19:9a:ce:35:28:75:c7:d1:ab:6e:86:9c:2f:27:71:
c1:d7:f2:12:78:1e:92:47:58:e5:f9:a5:46:39:6d:
1e:a6:bc:5a:46:d9:19:18:8f:d6:71:67:ea:17:a5:
b0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EF:81:E9:56:35:FD:C9:48:8F:FB:F4:A1:38:E4:95:E3:12:10:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lu-B6VY1_clIj_v0oTjkleMSEJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:93:c3:29:af:7b:72:e7:c9:a0:f1:b9:d7:59:4c:43:a2:9c:
a8:5e:9c:82:83:82:82:b4:c8:f4:03:cb:1a:cf:30:33:fb:46:
77:3c:6c:6b:bf:4e:12:7d:1c:ce:3b:9c:02:ef:a4:83:4f:82:
79:65:c4:bc:33:d5:99:8a:61:b9:ec:38:93:74:e0:d6:42:b3:
23:ef:97:8f:b5:06:2d:e2:cb:80:4f:e8:b4:22:95:4d:1a:5a:
89:0d:3a:ed:e5:44:a6:68:b4:c3:d9:0b:59:d5:eb:bf:e7:42:
d2:d3:f4:3c:ab:76:52:82:a6:24:ed:1f:93:d5:fb:3b:75:4f:
c4:47:ae:0d:ea:12:eb:a0:d4:e9:54:c3:ec:3a:bc:a4:c0:18:
14:dc:6c:ed:e0:06:de:f1:cc:cd:04:fc:df:f2:96:ed:39:37:
5a:d0:80:45:f4:b2:89:72:5f:45:5e:c9:25:de:a8:f4:fc:ca:
99:a6:87:79:8e:86:23:c5:64:05:d1:52:f0:ec:b2:b2:40:76:
6b:87:04:09:c3:5f:8c:9f:ed:b9:86:39:8b:9b:76:ca:c4:f1:
05:94:b0:5c:13:7f:55:fa:f9:2c:ca:8a:65:a5:d7:51:11:c9:
b8:d8:db:94:9b:52:16:8c:ea:97:8a:5b:63:13:97:76:54:8d:
90:0a:ff:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:30:50 2025 by rpki-client