Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lu5eXlCyKo2q9Dk9-8i1MpWg9sQ.roa
File: Lu5eXlCyKo2q9Dk9-8i1MpWg9sQ.roa (raw, json)
Hash identifier: RpYo7c7J5QTQMlx3X+qZLs7HA+32Z3o8Sjk/zsXjSAA=
Subject key identifier: 2E:EE:5E:5E:50:B2:2A:8D:AA:F4:39:3D:FB:C8:B5:32:95:A0:F6:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018596A86F6FEE854F659460521E9BEFDA10
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lu5eXlCyKo2q9Dk9-8i1MpWg9sQ.roa
Signing time: Mon 09 Jan 2023 13:11:38 +0000
ROA not before: Mon 09 Jan 2023 13:11:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:a8:6f:6f:ee:85:4f:65:94:60:52:1e:9b:ef:da:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 9 13:11:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2eee5e5e50b22a8daaf4393dfbc8b53295a0f6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:3d:b9:fd:95:85:19:ba:8a:98:68:98:32:
e7:57:63:3f:aa:e1:4c:64:68:7a:4e:63:55:54:fc:
5b:68:0c:1c:13:1a:40:9b:eb:b1:e9:3f:51:bd:ec:
d9:d7:03:95:b3:8e:e2:45:47:96:87:e9:78:4f:da:
ea:5f:31:74:c3:ef:72:b5:cd:d4:c9:3b:d6:0e:bf:
d8:57:82:94:15:3d:9a:6b:5b:58:f8:12:ad:4f:6c:
62:c1:65:29:ec:cd:63:f0:5c:19:7a:f4:1d:a0:10:
5d:bf:c1:2a:8f:8d:78:b0:8c:3b:ee:df:21:10:d0:
f0:4f:e5:71:19:36:2d:5c:a0:6a:ed:42:34:ea:df:
2b:73:1e:a7:aa:fe:d5:87:ea:45:b6:b6:26:ab:1b:
a6:f7:00:cd:23:d8:31:6c:41:29:45:6b:92:20:37:
1e:96:1d:b1:5a:ab:cd:d1:8f:16:67:c9:fa:e9:89:
28:17:5e:25:69:df:0e:4a:59:a6:26:0f:5c:b3:b5:
85:d8:1a:a9:42:12:7d:7c:e6:5c:d6:40:f6:70:4b:
cc:7c:19:96:5c:5d:d6:38:e5:47:7c:fa:a4:d0:bc:
0e:23:87:21:0a:22:8d:98:f8:3e:0b:45:e2:2b:37:
b6:1d:9f:a3:d9:75:e4:3d:54:47:cf:b1:99:99:1e:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EE:5E:5E:50:B2:2A:8D:AA:F4:39:3D:FB:C8:B5:32:95:A0:F6:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lu5eXlCyKo2q9Dk9-8i1MpWg9sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:19:d4:8f:19:51:2a:40:18:cb:fc:68:7d:bb:ee:be:11:ce:
e8:50:fb:be:78:56:9f:2e:bc:3a:d9:65:c6:02:62:80:c7:cb:
ee:47:7f:2b:76:32:a4:6e:0d:4f:9f:22:02:91:df:7a:d5:be:
72:09:fb:b0:e6:25:be:fa:d4:85:ad:c6:77:9f:c8:de:5e:6a:
a5:69:b5:b2:fd:1e:c6:07:35:80:0e:6a:f1:97:c3:8e:49:01:
22:2c:4e:c7:ec:15:67:1e:e3:e0:25:9b:ed:88:8d:69:2b:e0:
b1:26:25:f1:2e:ed:3d:66:5d:a1:9f:2b:46:6f:ac:e4:b5:f3:
c4:cb:aa:7b:a9:27:87:43:58:c6:27:42:e0:1b:f4:9d:d9:93:
f3:5b:ae:6e:90:2a:59:ab:78:94:2d:ea:69:fd:25:0c:64:56:
0f:6f:6a:17:3c:32:c9:cf:78:58:c5:91:75:af:16:83:ab:d2:
be:98:6f:cb:44:49:89:c8:1e:5a:ce:5f:fb:d9:0e:32:b7:86:
0d:eb:f9:21:67:05:44:98:6f:b1:79:0b:f5:ac:a0:69:f5:ef:
8d:28:45:a3:1c:01:ae:61:f7:23:7d:48:ce:6d:6d:4b:9e:fe:
b0:98:1f:1f:09:ae:26:71:ce:bf:34:7b:dd:18:9e:89:8a:26:
f9:db:e6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:17:04 2025 by rpki-client