Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LxPKGAGS-Efn6wxQZV4rk6QCfZ4.roa
File: LxPKGAGS-Efn6wxQZV4rk6QCfZ4.roa (raw, json)
Hash identifier: Dz4sbj11ExAsH5I+OesDQ3igDUibH2AIJfS6EwgV6zY=
Subject key identifier: 2F:13:CA:18:01:92:F8:47:E7:EB:0C:50:65:5E:2B:93:A4:02:7D:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018606045E5224E3A13E3F7BA8FF44A27D51
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LxPKGAGS-Efn6wxQZV4rk6QCfZ4.roa
Signing time: Tue 31 Jan 2023 04:09:54 +0000
ROA not before: Tue 31 Jan 2023 04:09:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:06:04:5e:52:24:e3:a1:3e:3f:7b:a8:ff:44:a2:7d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 31 04:09:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f13ca180192f847e7eb0c50655e2b93a4027d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:27:c8:33:92:93:f3:c6:b0:92:c0:be:02:
bb:5a:7b:bc:6d:d7:54:eb:d9:a0:40:80:42:03:d8:
a3:13:75:b9:4d:bf:21:80:11:e5:47:96:25:08:10:
7b:b9:1b:3b:1e:59:d7:05:a7:c8:60:aa:93:70:b6:
b9:f1:e2:9f:ad:b3:7d:b4:14:c6:05:82:29:f4:93:
d0:e7:e6:36:29:0a:b2:bf:87:d5:e1:54:cc:d0:9f:
f1:31:ca:64:6b:99:d0:e4:69:10:88:7d:b8:70:5e:
3a:bc:50:03:6f:95:d9:e8:3e:fb:21:81:73:23:e5:
76:94:86:2e:be:fa:16:8d:6e:e8:dd:94:b2:9a:63:
9f:d4:6f:02:d6:eb:5a:b0:68:50:79:1c:7c:4c:95:
de:22:3a:e6:8b:bf:e5:a7:0c:1d:e3:a0:46:2c:05:
25:1d:44:7c:bc:87:37:93:a6:b9:ea:40:7c:4f:62:
6a:24:b4:49:6e:77:ee:ca:36:b1:33:c6:bf:80:1a:
3f:48:22:b6:00:dc:4a:dd:5b:78:d5:24:be:27:0b:
90:9e:95:ea:0d:ae:4f:ad:6b:32:c6:51:45:f6:66:
5a:0e:b2:5d:33:9a:42:ec:f7:96:8a:0c:55:3f:df:
e0:e9:d3:73:6c:42:9b:9f:bd:78:f3:14:9f:28:0a:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:13:CA:18:01:92:F8:47:E7:EB:0C:50:65:5E:2B:93:A4:02:7D:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LxPKGAGS-Efn6wxQZV4rk6QCfZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:4c:73:bc:91:0d:eb:da:89:53:49:bd:be:b2:e4:6b:70:bc:
ce:5c:6a:d1:4a:6c:bb:41:c9:4c:3e:ad:a9:2d:7f:49:6f:d3:
ee:5f:4e:12:c8:4c:f3:55:32:a5:32:e3:34:f8:05:f1:a5:65:
b4:de:11:6f:da:27:d6:6a:d5:d5:c7:1f:ec:a4:6e:cc:ad:24:
e6:b6:39:6f:f8:fe:99:32:bc:ac:88:db:d1:e3:cf:fc:d5:3d:
e7:f1:6f:00:26:ee:62:2c:43:11:77:70:20:5a:64:a8:e8:9e:
6e:05:22:3b:8e:4a:2f:96:af:32:98:c3:d2:7d:a9:0c:da:40:
94:ab:67:b8:ca:d0:d2:86:3f:77:ed:a5:4b:fa:45:5b:a5:40:
a9:33:13:11:28:00:12:b1:80:ef:cd:4c:7b:be:85:42:49:7d:
2a:20:e4:c1:d1:ef:8d:14:5f:91:26:e3:f4:64:bb:68:c6:a3:
a1:ba:fe:0a:3f:f8:d5:24:7a:8f:23:94:03:bc:c8:06:8e:b6:
cd:96:bb:a5:49:c1:33:ce:e3:36:2e:3d:bc:93:aa:55:88:7f:
91:68:4a:6c:69:18:73:1a:a0:40:ba:29:e8:21:e4:1d:50:b5:
dc:5a:aa:0f:ae:49:38:ae:e1:03:1c:9b:6f:b6:25:44:42:59:
e7:55:9e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:13:10 2025 by rpki-client