Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lSdLOHnfFhR2wLjWVvR9h9jHgGU.roa
File: lSdLOHnfFhR2wLjWVvR9h9jHgGU.roa (raw, json)
Hash identifier: Jwu6aERAyQhr3lImy26VyeZXHxeGlfcsXXyolVOOn4Q=
Subject key identifier: 95:27:4B:38:79:DF:16:14:76:C0:B8:D6:56:F4:7D:87:D8:C7:80:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018226AF5D8C35ADD61D49157DB29CDCD292
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lSdLOHnfFhR2wLjWVvR9h9jHgGU.roa
Signing time: Fri 22 Jul 2022 16:13:23 +0000
ROA not before: Fri 22 Jul 2022 16:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:26:af:5d:8c:35:ad:d6:1d:49:15:7d:b2:9c:dc:d2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 16:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95274b3879df161476c0b8d656f47d87d8c78065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:e7:f8:38:ef:10:0c:60:30:61:05:9f:a9:
a5:1f:96:4a:1b:fc:10:3b:53:46:69:ff:11:67:f3:
d4:08:14:15:5b:8f:e1:53:73:d1:43:90:2a:e3:90:
a6:55:ed:8f:ad:b3:b0:50:80:6d:7e:7b:22:1c:e8:
b1:f7:9f:44:fa:dc:9d:a0:da:6b:00:cb:25:8a:5f:
eb:b1:5d:28:fa:9a:5e:79:1f:c0:80:e3:a7:df:a5:
a1:a2:87:3f:20:a8:db:45:f7:e1:08:7e:01:c2:07:
3c:da:a7:cc:0c:68:9c:d2:cc:df:5c:81:82:67:d0:
7e:bf:20:6d:cc:c3:8f:c7:cf:7d:9b:da:c4:58:90:
b5:f6:12:25:19:06:01:e1:cf:06:d4:8e:e6:5f:5d:
e5:24:bf:44:06:3c:2c:c7:ae:7d:67:ca:99:a6:33:
65:41:f1:fb:50:1d:33:09:85:c8:bf:9e:80:44:d5:
2d:be:20:02:bf:d2:6b:c9:af:4e:0a:86:b5:3c:0a:
66:56:24:ac:23:6d:cf:e5:93:dc:22:8f:06:51:04:
2c:44:1a:31:b6:c4:f8:ab:fe:41:f0:82:df:ed:68:
a9:7d:88:4a:4c:be:88:9f:00:8b:a7:b8:85:ea:7e:
70:ad:45:48:63:be:52:3c:5b:26:79:da:e0:e7:ba:
b0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:27:4B:38:79:DF:16:14:76:C0:B8:D6:56:F4:7D:87:D8:C7:80:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lSdLOHnfFhR2wLjWVvR9h9jHgGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:d9:0e:bd:a1:8b:86:ba:cf:9e:1a:c7:d1:47:66:80:55:02:
bb:c6:8e:68:ba:41:34:82:47:65:7b:f5:f2:bf:76:2d:bd:0b:
13:01:e2:9a:d0:db:7e:fe:f7:d8:0f:02:02:3e:8e:21:6e:15:
5e:cc:91:9a:1d:f5:11:46:99:3d:42:62:9c:8a:bb:62:e2:2a:
d8:a8:4c:af:1a:b5:89:07:f7:1d:06:b4:ca:02:6a:cd:56:ca:
9e:ec:b8:e4:ef:1b:b7:59:e7:29:6d:ca:04:83:ed:62:98:9e:
58:65:f8:25:77:71:80:b8:d5:6b:93:ad:e2:b3:05:89:2b:bd:
a9:91:66:15:49:12:54:2c:d9:7e:bf:4c:0c:6b:f9:a5:b4:07:
86:c7:fe:f2:4a:f8:f2:80:a0:57:db:c5:be:81:bb:e4:f8:c3:
a0:da:49:d8:8f:25:61:85:86:96:3c:de:47:28:66:3c:30:79:
69:7a:16:8e:8d:5b:d7:71:5a:7b:cc:10:fd:ec:06:3b:d1:c8:
f5:d1:4e:e4:2a:83:1a:5e:3e:ba:63:b7:15:ed:91:2f:cc:f0:
9e:c8:cd:91:38:64:0a:a1:12:f5:5d:de:b1:88:92:f6:f7:d7:
79:b6:cd:ae:28:f0:2a:dc:13:2c:cb:aa:73:ff:e4:f4:f9:59:
c7:4c:00:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:05:13 2025 by rpki-client