Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lOGXeOB7Zs-s_ULVu85NqAJ20hU.roa
File: lOGXeOB7Zs-s_ULVu85NqAJ20hU.roa (raw, json)
Hash identifier: BlSzbyRjJrTMJYEhvs/o5ydnHVq31RLW9IyLdn2nLEs=
Subject key identifier: 94:E1:97:78:E0:7B:66:CF:AC:FD:42:D5:BB:CE:4D:A8:02:76:D2:15
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A345A2C3413AAE3051DA7866A175B9CD5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lOGXeOB7Zs-s_ULVu85NqAJ20hU.roa
Signing time: Sun 27 Aug 2023 00:17:19 +0000
ROA not before: Sun 27 Aug 2023 00:17:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:34:5a:2c:34:13:aa:e3:05:1d:a7:86:6a:17:5b:9c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 00:17:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94e19778e07b66cfacfd42d5bbce4da80276d215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e3:cf:b0:fe:b7:78:f4:f6:a5:47:d8:67:28:
6b:70:e1:a6:ad:89:ee:d9:39:40:fc:d9:46:ab:de:
f4:26:1d:7e:ef:e5:d6:a1:c1:96:fd:c7:08:44:5e:
cf:d0:5d:d1:42:5c:b5:ee:09:6f:d3:ac:4e:55:db:
f4:35:2f:39:8b:e9:9e:56:d9:e3:4d:e8:2e:0f:09:
2d:60:b3:aa:7d:12:49:a9:14:c9:45:f6:96:ef:0b:
fa:bc:5a:df:fd:80:11:14:26:1e:57:b9:ce:ff:3f:
91:76:94:52:66:5a:e1:e4:cc:39:1f:45:95:3b:fe:
73:b3:2a:71:eb:d6:a1:13:69:43:10:f8:6a:eb:34:
d1:c2:38:57:81:1b:3e:34:fa:82:ff:71:b0:19:7c:
3e:72:1f:7d:15:2a:bc:9d:c1:45:ad:c6:f2:5f:74:
db:61:b4:83:72:64:c9:e6:d9:ac:1a:1c:e6:a8:8c:
0a:b7:5b:c0:40:43:0e:a0:f5:70:3d:06:06:61:72:
12:c0:b5:f2:ab:2d:02:e1:5a:2a:5b:a4:6e:91:c3:
df:e4:12:06:51:e9:04:e2:a9:8a:e8:a8:81:f1:82:
2c:4c:05:0c:3b:a8:12:68:62:fb:a8:81:4e:f8:4e:
98:9b:d6:c0:ec:ed:9d:55:89:73:45:f7:e4:b6:68:
6e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E1:97:78:E0:7B:66:CF:AC:FD:42:D5:BB:CE:4D:A8:02:76:D2:15
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lOGXeOB7Zs-s_ULVu85NqAJ20hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:b7:d5:3f:00:a1:b2:b7:ed:c4:6b:f7:e4:0e:a8:a5:72:07:
b3:9f:3c:e3:e3:4b:e5:c6:5f:4d:85:57:a2:7d:66:b5:69:bc:
68:db:75:b2:cc:24:a5:c2:04:57:16:52:9b:12:80:db:76:59:
77:c9:fe:e0:20:9c:aa:c5:6a:06:16:41:6a:c4:a5:46:fe:56:
60:81:98:84:a1:a6:74:34:2a:89:61:3d:6a:b6:ac:4b:15:41:
86:9e:c7:7e:a3:6f:57:d0:32:48:9f:8f:d9:52:5e:45:57:75:
8f:6c:3e:7e:7f:16:39:4b:3e:9b:c6:e2:0a:85:03:51:38:0d:
31:fc:6f:1c:84:0f:aa:c7:81:6d:62:b2:06:fe:b9:e3:9a:80:
95:f7:46:9a:0b:2c:2c:5d:5e:d0:d6:7a:aa:20:65:48:ad:51:
51:0d:79:1a:46:aa:f6:44:cc:59:a3:25:5b:cd:27:46:bd:2f:
0b:e1:16:25:38:40:97:d5:b2:ef:c8:46:03:c2:25:a9:8d:3e:
a9:c1:97:49:fc:93:8f:36:97:47:de:8b:b2:03:85:49:49:1f:
f9:1a:65:06:34:23:03:6d:6b:14:77:3f:bb:bf:7e:ce:88:5c:
c8:34:48:62:ff:c4:27:b2:95:0b:b6:2a:c4:2c:6e:ab:7f:07:
49:8b:4b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:14 2025 by rpki-client