Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lPHo0H7QYkjoWQwq785sk1DV8Y0.roa
File: lPHo0H7QYkjoWQwq785sk1DV8Y0.roa (raw, json)
Hash identifier: JFowqfWrpGvHiYTjT01Fl5mrcXOzp80m6NrXgf94Rnw=
Subject key identifier: 94:F1:E8:D0:7E:D0:62:48:E8:59:0C:2A:EF:CE:6C:93:50:D5:F1:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 88757AFC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lPHo0H7QYkjoWQwq785sk1DV8Y0.roa
Signing time: Mon 30 May 2022 12:09:13 +0000
ROA not before: Mon 30 May 2022 12:09:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289400572 (0x88757afc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 30 12:09:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94f1e8d07ed06248e8590c2aefce6c9350d5f18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:20:dc:d5:93:11:25:e1:e4:ea:70:b8:a8:d8:
ff:a1:b5:11:74:40:e6:4b:90:54:f1:ed:c4:80:01:
b6:ac:2f:87:99:75:f8:5d:09:f8:07:30:fd:48:e1:
15:a6:b7:cf:21:c9:b4:a0:e1:a4:2d:0f:e2:2a:e5:
c7:a9:9d:7e:d3:f2:f1:7c:a4:45:20:d7:f1:74:e8:
dc:3a:d4:0c:b1:ec:6b:24:b8:0a:73:af:97:8b:07:
e7:91:b3:57:d1:0e:78:0e:c5:c8:b7:e7:a8:4a:3f:
7d:00:0b:0c:ee:d7:03:a0:02:ac:30:a7:1a:d1:91:
cf:ec:ed:59:d0:25:4c:4d:e8:f9:d5:4e:5b:0d:c7:
89:60:5b:48:5e:0e:0a:c2:35:ab:15:66:fe:e8:eb:
7a:2f:82:d4:98:7b:e3:b2:66:8e:c5:a5:e1:dd:a6:
bf:b5:8a:21:20:17:b0:55:e7:da:82:9c:cf:f1:cd:
8f:f2:51:49:cf:27:f3:25:10:1d:eb:da:a9:80:e4:
04:44:2d:75:fe:30:ba:e5:f0:28:08:46:94:5d:f9:
b2:15:21:70:ca:45:b9:8e:20:74:4f:8a:71:7c:b0:
e1:8b:aa:d7:63:84:60:17:17:b3:9f:8b:eb:e7:18:
cc:e6:f4:11:dd:dc:f7:be:f2:b9:ad:ba:1e:c7:67:
6f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F1:E8:D0:7E:D0:62:48:E8:59:0C:2A:EF:CE:6C:93:50:D5:F1:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lPHo0H7QYkjoWQwq785sk1DV8Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:a6:dd:a5:5d:73:39:93:76:79:c3:5d:31:1c:ea:48:15:3a:
57:a6:83:96:85:e0:32:67:b6:a6:df:d3:68:db:e2:bf:bd:2a:
81:cb:a2:d1:96:91:e0:aa:4e:b9:03:e3:5e:ab:87:62:ba:88:
74:65:ae:3b:1d:29:4d:d1:4e:5d:3d:a4:45:a4:04:52:8b:dd:
22:1e:cd:6f:03:5d:e1:a5:5a:20:f1:86:2b:fd:44:a6:4e:1b:
ab:b4:f1:49:0a:bf:05:e7:8d:be:bd:1a:53:fc:4d:bb:bd:f4:
71:8b:82:3a:55:a8:31:86:eb:a7:a7:db:a7:3f:ce:49:e8:78:
3e:cc:f2:0f:97:f9:e7:b4:c1:37:f8:c9:89:3e:b2:39:00:2d:
6f:17:da:c3:19:5a:7f:e8:c2:53:ea:1e:07:fb:f4:45:cd:eb:
39:38:ec:18:56:84:5e:45:36:87:08:f3:4c:10:c1:8a:06:59:
0f:62:a6:90:3e:cf:15:eb:98:fd:58:db:45:01:01:52:c0:50:
b9:67:65:02:23:a6:2c:5c:27:9d:b5:f9:5c:52:76:47:77:95:
74:47:6b:11:5b:08:29:66:43:25:9a:8b:e1:f9:c9:6b:53:aa:
30:21:32:fd:e9:21:8c:ae:10:7b:55:15:33:f2:80:46:bc:cf:
f0:aa:c0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:37:27 2025 by rpki-client