Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Lg_7McKfLxcfJfBcIssStWNX8w.roa
File: _Lg_7McKfLxcfJfBcIssStWNX8w.roa (raw, json)
Hash identifier: wpQ4WDEuIpQ6w3uP4Dbm+gdqX6DIsCho7WopIl6/duE=
Subject key identifier: FC:B8:3F:EC:C7:0A:7C:BC:5C:7C:97:C1:70:8B:2C:4A:D5:8D:5F:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018565BB26622B84EE3385AE73F7DD19A5C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Lg_7McKfLxcfJfBcIssStWNX8w.roa
Signing time: Sat 31 Dec 2022 01:10:41 +0000
ROA not before: Sat 31 Dec 2022 01:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:65:bb:26:62:2b:84:ee:33:85:ae:73:f7:dd:19:a5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 01:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcb83fecc70a7cbc5c7c97c1708b2c4ad58d5fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:84:be:89:1d:dd:f7:79:7c:8b:0c:d2:f4:
39:48:ce:65:2e:a2:01:84:1e:ba:c9:37:10:5c:ae:
be:2d:f9:90:3e:b7:ff:df:7f:4a:5e:d2:ed:fb:cc:
ca:56:04:1c:04:9b:68:d6:f7:e3:b5:6c:08:28:d1:
19:0e:21:98:d5:26:2e:dd:7f:a9:9c:63:70:9e:a8:
32:14:4e:fe:1c:fc:cf:f3:d8:ba:c1:59:de:28:3b:
88:ad:32:69:c6:dd:d8:aa:4e:57:6f:76:ea:ca:d3:
8c:c2:61:88:b2:8f:46:bf:99:c5:32:07:07:d2:3f:
f8:4b:4b:90:0b:b3:7c:94:e3:4e:bb:b2:47:c4:40:
41:30:54:c3:5a:b9:37:3f:ad:b5:2e:cf:73:9f:9b:
be:a3:6e:e2:f1:2f:e9:7c:92:d7:bd:a6:5d:52:f3:
ae:44:35:dc:8a:34:d2:7d:19:36:79:9a:f7:32:1f:
41:d8:56:b4:b0:53:7c:c4:59:6c:ca:98:e1:eb:21:
4e:42:17:33:24:68:ba:5a:cc:f3:45:cb:12:49:05:
d4:13:60:cb:0f:84:57:07:d1:de:37:99:77:ad:79:
f6:04:99:11:29:88:62:02:28:c7:98:c3:93:e2:cc:
ba:dc:11:c2:2b:2c:3b:69:d1:b2:eb:b0:4d:00:cf:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B8:3F:EC:C7:0A:7C:BC:5C:7C:97:C1:70:8B:2C:4A:D5:8D:5F:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Lg_7McKfLxcfJfBcIssStWNX8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:ca:4b:55:05:aa:eb:8a:bd:4a:a7:af:8b:32:6e:b9:2c:81:
ae:17:21:17:5c:d1:d8:eb:7d:5a:df:a4:75:7a:be:8f:9d:9b:
9f:0f:eb:42:c5:7d:a4:08:89:13:dc:6b:37:f6:6b:80:83:d7:
14:d4:48:9c:18:96:7b:ce:af:8e:96:09:77:2f:8c:19:3e:cf:
df:72:3d:cd:62:16:52:f5:8a:0f:38:4f:25:08:15:fd:fd:69:
4c:d2:10:4b:d5:8d:f7:54:04:28:81:6d:8b:6b:49:3c:ac:15:
86:96:7c:38:ce:3c:44:d0:a8:6d:94:c8:4e:71:76:26:7e:26:
2b:8d:37:cd:30:81:d2:af:e2:e0:2b:62:b0:8b:3a:bc:e0:da:
3e:a4:f7:0f:21:1b:39:4c:b0:0d:c4:29:6a:b3:b9:3a:de:bf:
0e:91:b8:54:1b:99:47:90:49:e6:8a:f4:aa:94:39:7d:46:19:
a3:66:b3:f2:49:e5:30:50:ee:ef:47:7b:c9:e4:8a:d0:a1:87:
b7:38:ce:6f:fd:b6:e4:f3:c8:36:20:86:6e:02:73:06:68:b4:
e3:49:c6:f0:4e:6d:96:1c:50:7e:82:b5:4e:59:80:a3:3b:d4:
79:85:77:56:11:d3:35:15:68:27:4c:42:bb:d6:c3:cc:52:21:
0f:9e:36:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:22:31 2025 by rpki-client