Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_lfRvOPW9hHYEqCkpfmDAAbVzes.roa
File: _lfRvOPW9hHYEqCkpfmDAAbVzes.roa (raw, json)
Hash identifier: wbtBUcWti3nMHvJejTsMQBsDGFaN+rCQWsNot6iTgsw=
Subject key identifier: FE:57:D1:BC:E3:D6:F6:11:D8:12:A0:A4:A5:F9:83:00:06:D5:CD:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182FB89B67A5AF033E194265EDD5E3D3DB7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_lfRvOPW9hHYEqCkpfmDAAbVzes.roa
Signing time: Fri 02 Sep 2022 00:11:22 +0000
ROA not before: Fri 02 Sep 2022 00:11:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fb:89:b6:7a:5a:f0:33:e1:94:26:5e:dd:5e:3d:3d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 2 00:11:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe57d1bce3d6f611d812a0a4a5f9830006d5cdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3c:d7:f0:d2:a3:8f:e6:d4:eb:a7:4f:c7:39:
d8:b0:45:8c:c4:1b:78:8e:3a:70:07:35:14:ff:95:
90:4b:35:78:6d:80:04:bb:af:10:3a:b5:4e:98:24:
06:24:d4:db:6a:4d:03:3a:89:fc:09:3c:f4:ac:f2:
00:5b:9b:69:b2:01:ad:17:9b:b1:5d:5f:34:86:9a:
7b:55:2e:1f:ca:d0:5b:03:f3:69:94:30:81:13:74:
8f:1d:9d:3d:34:14:ff:6d:49:73:fb:96:c7:df:25:
b3:70:1e:7e:b7:37:1b:40:0e:94:35:1c:69:08:59:
c5:db:91:ed:f0:09:92:87:6b:12:ee:4d:52:eb:b8:
90:8c:8b:b0:79:44:dc:a7:37:86:fa:ae:d8:2a:70:
42:b5:8a:6a:78:b4:42:ed:c6:bc:0c:af:57:33:2b:
bf:22:f5:ea:fc:f5:51:85:d7:3f:f3:2a:b4:94:df:
7c:a1:04:59:c9:2f:30:97:1e:70:83:09:bb:8b:dd:
4e:26:17:23:d8:20:6e:e9:6f:be:39:af:33:cf:c8:
d8:2f:30:51:b2:ed:9d:7e:6f:aa:7c:42:45:09:bc:
d0:6c:89:0c:37:44:ab:cc:7c:db:0c:be:92:e2:07:
82:bc:d9:f7:24:69:8b:56:4a:45:4c:46:b8:bc:50:
e0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:57:D1:BC:E3:D6:F6:11:D8:12:A0:A4:A5:F9:83:00:06:D5:CD:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_lfRvOPW9hHYEqCkpfmDAAbVzes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:bd:fe:6a:10:a3:7f:1e:c7:d1:77:c6:35:41:d3:25:c9:f5:
6b:f5:54:6f:7f:e7:72:8a:30:72:1f:c9:f4:23:bd:8d:fe:f9:
ef:cd:f8:53:57:0b:c1:52:e9:cd:14:d5:33:6e:77:56:dc:bb:
a4:07:45:86:56:08:28:3a:5c:8f:8e:2e:d8:c1:0f:c1:24:78:
c8:d9:88:c4:51:bf:75:f6:ba:73:e5:3d:43:a4:e0:15:fa:21:
2b:2b:43:41:c8:ff:5c:5a:f9:b4:a7:25:92:02:9d:1b:99:6c:
eb:33:e9:4f:28:c8:c2:7d:38:5f:4c:8d:ed:b8:d0:85:4e:e2:
c2:5c:f5:05:18:9d:c6:46:81:6f:05:44:51:57:f4:3a:bb:c8:
29:c5:29:3a:4f:98:3e:80:9c:f9:96:0e:21:84:7b:b5:40:33:
5e:ae:57:cb:fe:dd:bf:11:78:a1:69:2f:46:25:80:be:42:cc:
28:81:9e:77:0e:03:be:0a:4c:d3:cb:bc:36:41:36:e7:22:c3:
c0:6b:f2:28:42:2c:fc:e4:01:9c:16:5d:d3:95:58:24:07:5e:
2b:59:3d:cd:27:c7:db:21:1c:bd:ef:46:2e:fa:54:d7:b8:b6:
fd:ff:7c:d7:9b:6c:45:fb:4a:b9:3b:5c:8c:ff:59:65:05:0e:
1a:1a:70:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:15:05 2025 by rpki-client