Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lQhU_G3k7D5TbadtiBmiWr8HyF8.roa
File: lQhU_G3k7D5TbadtiBmiWr8HyF8.roa (raw, json)
Hash identifier: wP9GPBEVqeQtKuXF4gP0auteO0p52u+BSabNGtJQkFg=
Subject key identifier: 95:08:54:FC:6D:E4:EC:3E:53:6D:A7:6D:88:19:A2:5A:BF:07:C8:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018829D0423DA8CCA42FC8E820DD7DEAA7AC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lQhU_G3k7D5TbadtiBmiWr8HyF8.roa
Signing time: Wed 17 May 2023 13:04:54 +0000
ROA not before: Wed 17 May 2023 13:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:29cf:caed/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:d0:42:3d:a8:cc:a4:2f:c8:e8:20:dd:7d:ea:a7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 13:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=950854fc6de4ec3e536da76d8819a25abf07c85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1b:8a:c3:8f:f5:e3:e5:a5:ce:c3:02:5e:2c:
e6:bd:71:6f:bf:c6:31:64:65:78:12:f1:01:46:eb:
62:d6:e3:b4:64:2f:79:7d:21:98:71:7d:f3:2d:8c:
cb:35:08:d5:73:ae:f0:ba:bb:f1:d4:de:5f:ae:02:
e7:c0:7f:f0:3e:b3:15:74:a0:b0:11:00:ae:44:23:
fd:63:05:f4:25:2d:5e:69:d9:61:02:b8:37:4f:6a:
ef:52:07:77:29:b2:28:42:9f:45:a9:4b:6c:5f:6b:
e3:d3:ad:ac:72:46:33:de:07:6f:c4:86:ab:4c:b8:
cf:c2:43:1e:96:d5:44:6d:d0:0d:f3:24:ac:5a:a2:
cd:26:3c:f6:4e:d3:cb:0f:6c:ab:d6:06:f4:46:ef:
41:ff:46:34:5a:6e:ee:8f:03:89:68:d2:e4:9d:ac:
3f:43:0c:b2:ca:c3:4f:d8:2d:8b:6e:0d:45:3d:bc:
20:fc:b8:68:ee:ae:5f:f1:09:f7:d7:0e:43:2d:51:
1d:68:54:29:cb:79:30:49:5b:5b:f7:c3:44:cc:2a:
c0:48:7c:67:d7:69:54:01:a5:a1:7f:28:63:f5:7d:
fa:a9:dc:c2:af:96:cb:96:f1:1d:f1:fe:8e:db:4c:
fb:88:f2:fc:12:a6:5e:9d:4d:b1:75:7a:05:cc:97:
9f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:08:54:FC:6D:E4:EC:3E:53:6D:A7:6D:88:19:A2:5A:BF:07:C8:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lQhU_G3k7D5TbadtiBmiWr8HyF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:13:ee:29:35:5a:74:d5:0d:57:c4:6e:53:cf:ad:45:a5:e6:
e0:e6:b4:4a:da:b0:30:99:1e:7a:9e:05:db:cd:9a:59:df:11:
5b:f8:7e:62:44:91:2a:18:18:29:18:34:65:b0:d8:e2:2e:ad:
8f:d7:72:fe:53:b2:6f:e6:26:2e:e5:8a:12:95:f3:af:ef:40:
06:ff:94:8a:92:a0:4b:14:63:b3:de:a8:71:5d:74:62:a2:f6:
2a:19:37:ca:a8:b0:c7:c5:f2:17:34:f8:31:18:03:05:8c:57:
18:be:89:42:2f:ef:ac:92:91:af:a1:8e:09:c1:ca:6b:55:f4:
a1:85:55:bf:1c:a0:ad:dd:a2:bc:82:d3:60:8c:26:f3:ce:db:
68:6a:5f:d9:fe:00:94:bf:c0:60:e0:76:67:01:8d:f3:72:2d:
1a:cc:24:2d:4c:81:92:fe:c1:c4:e0:aa:05:fe:10:f4:41:74:
f1:8a:be:bb:d0:49:0c:c1:51:bb:9c:cf:fa:94:fb:7e:01:e4:
90:31:9e:c4:0e:e7:ce:09:0c:62:4b:2e:07:f0:b0:6e:1e:46:
a0:2c:a6:4f:a3:cc:24:5e:23:08:de:82:7e:ef:94:88:c1:3f:
ab:82:56:b4:4d:3d:08:3e:ac:73:74:46:f3:b8:47:ea:fa:41:
5a:c4:da:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:45:33 2025 by rpki-client