Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LylZ2W6eXpXqkT6SoIPw611Kl0k.roa
File: LylZ2W6eXpXqkT6SoIPw611Kl0k.roa (raw, json)
Hash identifier: Zy362cZ1UgNpcSSwHAK92okE3em3hr+8puS8HbYwQto=
Subject key identifier: 2F:29:59:D9:6E:9E:5E:95:EA:91:3E:92:A0:83:F0:EB:5D:4A:97:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C9BC131405D59720DBED9555A85B4071
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LylZ2W6eXpXqkT6SoIPw611Kl0k.roa
Signing time: Thu 19 Jan 2023 11:13:44 +0000
ROA not before: Thu 19 Jan 2023 11:13:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c9:bc:13:14:05:d5:97:20:db:ed:95:55:a8:5b:40:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 19 11:13:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f2959d96e9e5e95ea913e92a083f0eb5d4a9749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:20:29:8c:b0:0c:3d:3d:c1:60:01:cd:de:90:
57:3c:c2:f3:ca:d5:fc:81:da:84:d4:a2:de:a2:d2:
cd:53:81:9b:af:b3:09:69:b9:6a:0d:26:f0:07:ea:
c9:a6:70:72:d8:16:6f:84:ed:c9:a4:07:3b:7f:9e:
fe:7f:ea:07:63:5a:9f:ff:96:96:31:0c:dc:e3:e3:
5a:9c:fb:0d:61:77:0e:74:b3:2f:bd:0e:d5:e7:eb:
80:b5:77:07:86:c9:78:a1:dd:a7:c5:af:00:13:5a:
8b:d8:41:4e:b8:b1:60:be:90:0c:95:ce:8d:7a:4f:
52:38:0a:27:a8:cf:3d:7a:fc:6c:73:f0:28:ac:f8:
8f:3e:35:85:7d:0f:05:33:84:75:a8:2c:fb:e0:bb:
c7:2a:f9:15:9f:75:77:48:66:df:5b:3d:6d:de:5b:
dd:b2:f4:d4:49:4c:5a:50:33:92:05:af:c6:bd:ea:
27:cd:5d:73:07:7c:cc:68:2d:4c:f1:33:e5:64:eb:
51:cf:f6:7c:bd:6f:62:5f:e5:c9:0e:f4:62:35:72:
aa:f7:a2:02:8f:00:a6:37:c9:07:40:11:ce:2c:cf:
03:ec:28:b2:52:c5:e1:a3:4f:0c:2c:b9:ab:8e:b3:
d7:56:cd:cb:65:a4:75:0e:fb:08:54:79:a2:ba:ad:
dd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:29:59:D9:6E:9E:5E:95:EA:91:3E:92:A0:83:F0:EB:5D:4A:97:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LylZ2W6eXpXqkT6SoIPw611Kl0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:f7:f6:d0:fd:a8:90:c3:42:94:a3:f7:ad:0e:f7:66:cf:19:
91:c4:60:2b:7c:04:e1:03:5b:b3:4a:c1:94:17:11:91:be:c9:
bf:b3:e3:a6:c4:1e:05:af:00:4f:6c:dc:de:4f:92:b7:b7:9d:
69:d5:5b:1a:1e:a2:21:56:bc:bb:91:dc:76:20:1b:16:4e:0c:
0d:5b:c1:47:f4:9d:26:4b:6b:75:a0:98:e5:35:89:29:38:25:
d2:ee:b0:77:ea:95:15:91:20:f6:9e:6b:94:75:78:cf:a1:5d:
bb:b6:24:93:e0:aa:e6:75:5b:cc:b6:46:84:31:67:91:13:be:
ce:65:b5:48:03:31:ca:c3:00:57:23:2c:54:38:b1:be:ab:26:
9a:64:3a:f8:3a:93:79:4b:13:34:08:ff:f3:01:a7:95:a6:0e:
60:a2:68:63:9a:d0:46:3f:20:37:af:a1:1f:aa:45:4f:1d:37:
99:ae:dd:72:13:9f:e9:6e:14:b7:b1:60:ad:da:54:27:c2:16:
c3:34:df:81:93:dc:87:3e:6f:c6:ba:1d:3d:6f:6e:08:3e:60:
2c:ac:ac:e6:c5:8e:85:c6:4e:a8:ec:ec:6e:a5:a9:36:84:7f:
25:3a:a5:69:57:27:5e:ea:9f:2f:ac:3e:58:13:bc:65:a6:63:
38:89:f5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:59:51 2025 by rpki-client