Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_LHZyqJ2k9X6732FDeeUW2f-gGo.roa
File: _LHZyqJ2k9X6732FDeeUW2f-gGo.roa (raw, json)
Hash identifier: pZLBuudpDWe8d+CIPN3QUf8DyW4GnAfutrM6xI97G4g=
Subject key identifier: FC:B1:D9:CA:A2:76:93:D5:FA:EF:7D:85:0D:E7:94:5B:67:FE:80:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01832075F0745AF41977E710FE0776ED4049
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_LHZyqJ2k9X6732FDeeUW2f-gGo.roa
Signing time: Fri 09 Sep 2022 04:15:43 +0000
ROA not before: Fri 09 Sep 2022 04:15:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:20:75:f0:74:5a:f4:19:77:e7:10:fe:07:76:ed:40:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 9 04:15:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcb1d9caa27693d5faef7d850de7945b67fe806a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:82:65:36:b4:e2:15:70:50:48:43:2b:23:bd:
6f:5f:2d:14:2e:5e:41:d1:00:18:c1:1f:13:00:6c:
a3:20:04:e3:d1:59:3d:59:03:10:a3:68:9b:35:eb:
ee:69:f2:cf:8f:a6:3e:a9:75:6c:e3:8c:a4:12:8d:
22:f8:20:a0:8e:fa:dd:90:53:10:23:5a:70:55:64:
fb:5b:b3:13:9e:3b:7a:02:ae:36:70:7b:a5:04:2d:
64:c8:d3:59:4d:b0:4b:e4:eb:0d:b7:e2:3d:8a:c3:
da:43:a8:b1:f1:a4:0e:20:42:5f:f4:fd:19:96:43:
12:4f:55:c0:a3:7c:5e:85:f7:26:58:12:86:00:47:
16:6a:78:22:15:5d:15:49:5e:51:a1:ec:ff:cb:0e:
35:9c:a9:f9:55:ac:32:e4:3f:24:4a:c6:28:06:69:
ca:a3:54:40:b1:c9:a2:14:66:14:7b:f1:d3:0f:9d:
ec:95:89:f2:b8:80:f5:07:1a:4d:dd:d0:db:f5:70:
8d:66:94:9a:7f:fd:c1:57:69:c7:08:93:79:cc:ec:
a1:cf:1c:52:5c:ad:74:b1:cb:32:0f:51:fd:01:a7:
58:d9:4c:42:58:6b:37:bf:3d:22:eb:4b:15:cc:e6:
7d:4b:2b:a1:99:27:a8:ec:e5:6e:2f:67:17:c6:cb:
a7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B1:D9:CA:A2:76:93:D5:FA:EF:7D:85:0D:E7:94:5B:67:FE:80:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_LHZyqJ2k9X6732FDeeUW2f-gGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:b4:68:d7:5d:34:ff:1f:ac:7a:5f:6b:be:f9:f4:cc:89:87:
d5:1e:33:7e:16:f2:36:86:71:7a:0e:79:a3:a9:15:ef:2e:fe:
fd:60:96:47:63:63:4e:d0:7f:83:68:9b:f4:c1:4e:85:b6:58:
24:b5:74:32:ba:4d:91:cf:50:c2:bc:b1:24:17:7a:5d:28:30:
bc:19:1e:de:b2:34:c6:d3:e9:13:2c:2c:9e:84:af:a5:01:be:
01:d1:bf:5f:62:04:92:ad:ab:e4:23:6c:8c:a3:25:f5:fc:fb:
e5:f2:24:41:fb:a6:54:42:fe:a9:89:cb:41:43:6c:76:01:97:
d5:54:3b:a1:0e:80:1f:e0:e4:ed:2d:4f:40:32:ee:36:cf:6a:
78:fa:64:81:44:58:3f:fc:91:8b:b2:92:c2:a2:72:46:c1:3f:
9a:8d:5c:ec:cb:5e:15:59:1c:ec:dd:bf:c6:4d:6e:6b:e5:72:
55:79:d6:6b:c9:47:15:73:62:e5:10:6b:94:c0:f9:ae:d9:b7:
13:e4:67:b9:3c:6b:bf:f2:83:28:f8:59:20:33:e1:a4:9f:43:
6a:4f:61:f0:61:f5:c8:52:51:20:b8:09:50:6e:1a:3d:44:e2:
57:c2:4a:45:00:c2:b4:ab:eb:cd:a1:40:1d:1a:da:40:a3:92:
d3:b0:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:22 2025 by rpki-client