Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Luh4djhDJQgGvXZzCratIaCvlVw.roa
File: Luh4djhDJQgGvXZzCratIaCvlVw.roa (raw, json)
Hash identifier: xZuV8N42onWZNdRYNWU8cJuEUgvghD3CfT6MlEdZjHY=
Subject key identifier: 2E:E8:78:76:38:43:25:08:06:BD:76:73:0A:B6:AD:21:A0:AF:95:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864D414DA7427E5C1C6D0956AD65D3FDFA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Luh4djhDJQgGvXZzCratIaCvlVw.roa
Signing time: Tue 14 Feb 2023 00:09:30 +0000
ROA not before: Tue 14 Feb 2023 00:09:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4d:41:4d:a7:42:7e:5c:1c:6d:09:56:ad:65:d3:fd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 00:09:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ee878763843250806bd76730ab6ad21a0af955c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:50:35:85:60:8f:ff:72:05:fa:17:bc:01:
fe:d8:30:64:46:0f:4e:fe:79:a0:64:5b:41:8c:9f:
f6:08:5f:bd:59:4c:37:26:7e:9c:b2:40:e8:03:0d:
1b:be:80:6d:51:4c:a3:27:b6:b1:ea:15:35:a6:79:
cc:04:81:36:c5:88:06:4e:e6:18:05:46:69:ba:be:
f2:ba:b5:4a:4d:c0:cc:9e:d6:46:28:69:b7:c2:c0:
c4:01:14:c0:63:5d:dc:cc:35:c6:07:09:c7:30:f8:
7d:a9:8c:69:6e:03:62:6c:74:ff:ca:37:09:c4:58:
4c:9f:99:21:33:3c:90:4e:75:a4:a6:58:e8:c0:0e:
9f:98:3a:46:d4:14:30:5f:09:2d:63:fa:6b:30:2d:
d4:50:36:d5:1b:20:c2:77:00:e1:e7:49:2e:6b:0e:
51:b2:cf:02:db:63:ff:3d:54:23:f9:5c:36:ad:d9:
9f:69:be:df:9b:92:2a:ae:a2:5b:c7:9b:28:4f:5f:
e1:21:99:ae:a5:4d:cc:0f:19:54:3c:e0:dd:34:50:
8e:1f:ae:4e:87:eb:03:36:21:1b:94:9f:75:9f:b4:
e9:d5:ea:75:59:11:a8:44:ea:15:03:be:f9:55:06:
0c:6d:8e:85:13:4b:6e:8c:fd:45:f6:4f:52:26:22:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E8:78:76:38:43:25:08:06:BD:76:73:0A:B6:AD:21:A0:AF:95:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Luh4djhDJQgGvXZzCratIaCvlVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:cd:a2:73:43:6d:be:a1:7a:a7:7e:20:dc:fc:44:74:ee:f0:
13:fb:8a:7d:a7:32:6c:30:b8:cf:e3:94:07:de:23:36:e6:28:
7c:69:66:ee:02:2f:e1:ed:fa:66:e7:69:83:af:dc:25:39:b2:
4c:84:ac:0e:21:da:c4:2c:c4:97:32:3a:da:1d:2a:0b:49:8e:
1b:eb:2e:76:a3:9c:f5:4e:11:b2:cd:b5:a3:6b:af:48:10:80:
63:d1:cf:1e:d0:f4:54:95:60:72:07:b8:c5:28:ed:c1:87:c9:
90:04:0d:8d:54:76:12:d4:15:6e:00:c0:ed:2d:29:2b:4f:bb:
d9:92:65:03:ae:d7:1f:31:48:31:19:92:92:d2:8b:5a:f7:cb:
88:28:0b:e8:d0:85:ad:3e:c4:ab:68:a6:2d:44:bb:a3:45:85:
a7:a4:67:5a:85:71:33:00:c6:6a:30:f1:69:19:24:6c:92:1e:
ce:31:81:55:0f:9f:9e:a3:dd:03:9f:0d:bb:28:77:cf:84:78:
d0:74:ef:64:55:ff:a4:e3:a8:0b:bb:bc:40:1e:e4:a3:bd:1c:
e6:5a:72:0b:87:02:38:d7:a0:86:4d:b4:8a:46:57:f2:dd:be:
14:c9:9a:93:5c:6a:a6:f5:a1:20:53:e9:e8:35:b4:0f:f4:1f:
5a:e3:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:24:15 2025 by rpki-client