Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LuZrAVTvM7PI23A4v3-KV7VTEYA.roa
File: LuZrAVTvM7PI23A4v3-KV7VTEYA.roa (raw, json)
Hash identifier: U9r99v37AjxI/9aIpqPrioNB9IjUPiX7T2o69IQJqq4=
Subject key identifier: 2E:E6:6B:01:54:EF:33:B3:C8:DB:70:38:BF:7F:8A:57:B5:53:11:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186718576554DE87F1B746303F57793B4BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LuZrAVTvM7PI23A4v3-KV7VTEYA.roa
Signing time: Tue 21 Feb 2023 01:10:17 +0000
ROA not before: Tue 21 Feb 2023 01:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:71:85:76:55:4d:e8:7f:1b:74:63:03:f5:77:93:b4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 01:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ee66b0154ef33b3c8db7038bf7f8a57b5531180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:63:91:98:30:82:5a:6a:76:86:69:7c:99:cb:
71:84:a1:b0:66:6f:fe:45:49:9a:e1:91:cf:72:42:
4c:a2:bb:b8:d9:17:a7:0d:e2:8a:ed:e0:1b:95:e3:
e9:34:26:1c:77:0f:66:7d:c6:2e:9a:1d:84:c7:25:
68:04:60:06:1d:43:42:7a:c2:0c:18:f5:dd:8e:b9:
aa:02:52:4e:16:a1:0f:ec:85:49:94:3f:f1:f7:31:
00:3d:60:17:49:cc:99:83:79:8e:f3:97:8d:8a:d7:
5a:1b:f5:5c:ce:49:f6:29:ee:f6:de:7d:e9:3a:96:
f4:9c:31:d4:4a:43:ca:bf:cc:cd:db:fb:a5:a1:f1:
e1:f4:6c:2d:62:d3:76:3b:8d:c9:ce:3f:56:d2:5b:
b1:33:99:72:ab:7d:28:fd:2a:88:e0:f2:e6:ed:70:
83:f7:6f:44:79:3c:c5:3f:a4:e5:91:3e:6a:c7:10:
53:f9:df:9f:44:bf:47:be:24:74:3e:75:ca:61:a9:
26:6b:5b:d5:d0:3f:18:cf:9a:ec:81:c6:30:62:16:
33:c3:cc:3a:78:e5:5c:18:41:e2:46:b5:c8:5a:5d:
be:5b:c9:62:fe:4d:15:6b:47:56:27:7c:d3:d9:92:
d1:0d:98:6d:49:5d:40:b2:dc:fd:65:aa:ff:12:62:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E6:6B:01:54:EF:33:B3:C8:DB:70:38:BF:7F:8A:57:B5:53:11:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LuZrAVTvM7PI23A4v3-KV7VTEYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:e5:41:c9:e6:14:e5:36:d1:8c:4d:61:18:ce:a8:e2:f0:56:
d7:75:32:95:88:5c:eb:03:9b:38:c9:32:96:fe:d0:66:87:f3:
f4:0f:cf:0c:cd:d8:32:ea:09:54:0a:ef:b5:33:d1:c1:51:e2:
25:98:bd:b2:19:cc:74:f1:31:f1:95:85:bb:1f:72:04:77:d6:
c6:51:71:3c:89:78:90:6c:f8:38:13:e3:d0:72:e3:66:c0:46:
fe:66:c5:90:91:01:79:24:1d:17:7d:2e:2f:ed:75:21:4a:bc:
60:3b:31:19:19:f6:6b:8b:a3:cb:ed:9d:a1:c5:b0:7e:3b:b3:
65:32:03:4c:5c:fe:bd:bc:4c:87:00:e9:ee:12:aa:43:6f:da:
83:9e:2f:52:01:5c:e8:2b:06:6c:5b:c3:d4:91:bd:3f:12:4a:
bc:96:e4:36:12:d5:c4:22:a5:2c:66:ad:e3:5c:91:7d:b4:da:
de:78:7c:54:68:cd:7d:6a:13:09:78:1c:8c:ef:d0:ee:2f:17:
e1:00:5c:dc:6d:cc:d1:26:fa:a2:d2:2f:e5:83:e1:1d:7c:b6:
97:26:07:bb:57:31:e3:a2:1f:b5:29:3e:b0:40:ae:51:c2:3f:
6c:f1:c6:ae:60:58:7c:05:ae:07:d3:48:35:67:c6:5b:ed:bd:
4e:55:0f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:06:30 2025 by rpki-client