Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aLQLUuHCiUmqZSfFqr9rdRqnqLY.roa
File: aLQLUuHCiUmqZSfFqr9rdRqnqLY.roa (raw, json)
Hash identifier: zvIQNaHW2t+rRNKWDcS2qMGsnOyDgMmuI61nFe4tu1Q=
Subject key identifier: 68:B4:0B:52:E1:C2:89:49:AA:65:27:C5:AA:BF:6B:75:1A:A7:A8:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01829FEC0710D6D7A688031321DE2E4C428A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aLQLUuHCiUmqZSfFqr9rdRqnqLY.roa
Signing time: Mon 15 Aug 2022 05:13:41 +0000
ROA not before: Mon 15 Aug 2022 05:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9f:ec:07:10:d6:d7:a6:88:03:13:21:de:2e:4c:42:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 05:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68b40b52e1c28949aa6527c5aabf6b751aa7a8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:16:ad:17:2e:ad:2a:3a:31:1c:8d:82:5f:
5c:39:0f:96:95:75:d8:fe:fc:b9:fd:2c:ba:6b:55:
d4:f5:2a:43:7a:b2:5d:41:b5:a1:20:7d:2c:8f:1a:
e8:3b:5e:ee:a7:8c:59:40:76:6d:12:b1:4a:be:f2:
e6:24:ff:32:be:ed:74:24:29:46:43:33:88:23:f9:
5a:b2:ad:08:92:a4:f0:f7:53:1a:ee:27:ef:a1:1f:
0a:ae:c0:f9:36:84:c2:bb:46:fb:f5:e9:31:8a:6c:
1a:1d:f8:be:27:f7:78:ad:49:1a:f6:96:d1:83:dc:
72:91:88:a5:10:03:36:51:cf:f5:ad:89:71:12:12:
61:80:a8:e6:33:26:cb:d1:c9:2e:58:07:2b:35:97:
8c:60:7f:a7:db:62:c5:94:ce:fa:f3:a2:d9:30:58:
c1:29:e7:8b:7f:8e:d0:fd:d6:6f:d9:a8:05:92:a1:
0c:61:e4:5c:2d:df:3b:69:d0:3b:88:2c:52:95:d1:
f2:02:42:00:32:84:88:e6:5f:85:80:ae:ba:56:19:
dd:2e:5b:33:ed:ea:22:0b:d4:7a:ae:6c:6f:f6:39:
29:b3:68:a8:8b:e4:ef:9e:ab:48:07:ee:b1:ee:4a:
c7:cb:b2:38:68:04:af:f3:96:33:e0:5a:a8:e9:55:
ff:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B4:0B:52:E1:C2:89:49:AA:65:27:C5:AA:BF:6B:75:1A:A7:A8:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aLQLUuHCiUmqZSfFqr9rdRqnqLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:da:f6:74:4d:aa:36:8d:3c:2f:22:ea:7f:71:45:a0:a7:3c:
6a:8c:4d:05:e6:0d:58:85:a6:8a:9a:a3:26:df:18:8d:a1:f8:
16:d1:ad:a0:c3:a5:94:d3:95:5e:04:bf:42:f9:62:c4:f7:24:
98:da:69:78:11:77:ce:18:af:88:df:53:75:b5:ba:ea:f4:da:
5a:b5:cf:1c:64:0a:f6:79:6e:64:1d:bc:c0:67:ea:d3:33:48:
31:66:18:73:0a:73:26:ee:fe:e8:e9:c4:9c:54:cf:7e:27:33:
b2:69:ed:d9:5e:2f:78:fd:cc:bc:62:7b:20:5a:e0:18:e7:0d:
c2:db:32:5a:d9:c8:b5:97:2e:42:d3:8d:9c:11:9a:de:4f:22:
0d:84:68:56:e3:8f:a6:12:66:36:74:dd:d6:ce:a1:b8:b2:76:
c5:b4:1c:4a:5f:47:e8:d8:06:47:4c:5e:9c:85:84:31:bd:eb:
87:73:98:9b:20:be:9a:01:01:1c:1f:a5:ff:23:28:d8:40:5c:
8c:ce:01:b3:ec:83:cc:48:30:72:9f:f0:5c:5d:84:19:f1:62:
7f:02:a3:c3:b8:43:d7:d5:0c:01:95:bb:68:54:76:70:73:2c:
b8:02:f4:e1:68:7b:2e:2f:f6:d0:c3:8e:70:69:28:9a:00:b1:
c9:70:6e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:23 2025 by rpki-client