Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lu_RNYOvsua_3s6ypOyxV-zrrKU.roa
File: Lu_RNYOvsua_3s6ypOyxV-zrrKU.roa (raw, json)
Hash identifier: ktXtItA8wAQCg8MnN2FQUZNg4kiwApUcMIYXaj2fi88=
Subject key identifier: 2E:EF:D1:35:83:AF:B2:E6:BF:DE:CE:B2:A4:EC:B1:57:EC:EB:AC:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01875D57B71E343DEBCF424B890C05006680
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lu_RNYOvsua_3s6ypOyxV-zrrKU.roa
Signing time: Fri 07 Apr 2023 20:10:42 +0000
ROA not before: Fri 07 Apr 2023 20:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5d:57:b7:1e:34:3d:eb:cf:42:4b:89:0c:05:00:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 7 20:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2eefd13583afb2e6bfdeceb2a4ecb157ecebaca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:8d:79:59:54:44:b3:c7:9e:fc:6c:da:43:
8e:92:81:fa:45:c6:d1:3a:02:01:94:2a:8c:5f:a0:
9f:1a:13:41:95:65:cb:03:ec:2b:e7:56:ea:82:28:
a8:52:29:4f:54:b0:82:03:bb:0b:7a:86:8d:c7:a4:
43:28:56:17:da:73:53:d4:b1:0f:21:9c:73:c7:be:
b8:6d:a6:92:97:d9:3c:6d:f6:39:ee:4e:8d:03:7d:
e1:96:05:03:43:19:d4:6f:e3:14:43:63:2e:4d:c9:
5d:15:9d:a9:96:fc:64:db:21:26:2e:d0:18:90:74:
4c:0e:00:d7:81:7e:85:ae:77:74:be:3b:71:21:95:
3b:d1:31:44:ab:a2:9b:58:97:1d:bf:5d:82:be:f1:
1f:8b:50:72:9b:e0:f8:d9:09:00:35:f1:79:07:4b:
94:57:25:83:83:fd:5f:20:c5:45:22:24:6e:83:48:
b6:f8:cc:18:aa:f7:4b:35:4c:2d:c2:ff:1b:85:12:
82:6c:75:53:2b:e6:86:44:67:29:f6:6b:df:f1:08:
a2:0c:1a:92:7e:8a:89:d9:6e:ec:31:b7:dd:4a:3a:
d5:1c:27:f7:47:25:f5:f4:c8:77:47:1b:c7:8d:d8:
47:bb:54:71:7d:2d:df:94:fb:b7:db:8c:0d:67:1d:
04:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EF:D1:35:83:AF:B2:E6:BF:DE:CE:B2:A4:EC:B1:57:EC:EB:AC:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lu_RNYOvsua_3s6ypOyxV-zrrKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:d3:92:9f:ce:fe:66:3d:3a:b8:62:8b:90:bc:1d:8c:80:fc:
b9:21:9a:b3:2c:ca:e7:73:24:fc:69:9f:63:b2:82:40:5e:9b:
86:f9:bc:b3:d0:1e:d4:d9:b4:d3:bd:92:62:fa:05:a8:46:6b:
5c:e1:35:64:53:f3:d8:0b:39:86:44:81:62:d4:01:9f:ea:6c:
52:7d:64:76:bb:c7:ec:32:97:c9:1c:3c:29:d1:3b:7f:38:8f:
fe:0c:39:97:30:90:67:ef:c2:9c:ce:57:ac:37:cc:a6:6d:ce:
bf:2d:36:f7:d2:ce:6c:94:88:58:98:15:b5:be:27:af:a5:65:
4f:81:34:f1:d3:48:b3:e3:3f:62:30:23:a4:cc:7e:4b:30:c1:
72:31:61:8f:f1:ec:a1:af:83:a0:9f:9f:69:10:40:eb:89:2c:
03:e2:d9:8a:8e:d1:7f:11:cc:45:09:db:58:0d:ce:84:b7:46:
96:b1:fa:4f:02:b8:e9:9e:d2:6c:8e:60:2c:dc:ac:cb:40:4b:
69:64:94:bb:72:86:22:2f:74:fa:ec:ec:5d:50:f3:7c:e0:27:
b6:97:98:f8:2a:36:a3:68:b1:f6:aa:0f:d4:f0:2f:60:f0:12:
cd:30:72:0d:62:ed:6d:8c:7d:d5:a2:13:bf:38:45:e9:41:19:
5d:e0:34:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:03:30 2025 by rpki-client