Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lVV_HhiAvoMgd4Yy9l-g_lG_Vks.roa
File: lVV_HhiAvoMgd4Yy9l-g_lG_Vks.roa (raw, json)
Hash identifier: U1kAyd/GADwMO67261gs/4lZBm2A50hEfVGJR4hOMnM=
Subject key identifier: 95:55:7F:1E:18:80:BE:83:20:77:86:32:F6:5F:A0:FE:51:BF:56:4B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D15B5CD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lVV_HhiAvoMgd4Yy9l-g_lG_Vks.roa
Signing time: Wed 23 Feb 2022 19:14:37 +0000
ROA not before: Wed 23 Feb 2022 19:14:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1830139341 (0x6d15b5cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 19:14:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95557f1e1880be8320778632f65fa0fe51bf564b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:c3:a1:f5:03:17:0a:b0:97:7a:39:e2:c7:
65:d2:f5:d7:20:3c:54:15:eb:36:a7:f2:c4:72:3e:
08:20:e0:70:17:3a:11:a2:a7:08:1a:b0:ad:f4:ab:
d1:9c:d8:af:68:f5:49:da:73:ab:0f:32:cb:c0:84:
dc:a8:45:80:db:21:7f:3e:b6:5c:54:20:be:05:41:
65:88:99:88:28:d3:b3:7e:0b:ed:a2:f6:a0:1d:63:
41:24:ce:ca:d3:3b:98:42:6a:d3:38:8f:39:02:98:
a3:32:04:f8:5f:af:25:bf:31:c4:c8:ad:0b:39:6d:
ca:03:2d:99:05:9d:5a:85:50:a1:66:f0:8d:8f:21:
46:82:b8:c0:d1:50:98:fb:8f:08:b2:93:54:c2:2d:
5b:6b:3c:c8:cf:3b:4e:39:2a:5e:eb:28:b3:26:21:
0a:a4:2d:61:06:fb:87:92:f2:01:17:68:a1:4c:7d:
7c:f3:f5:4b:97:6b:57:7a:91:de:48:b6:c7:36:13:
08:95:8d:c1:98:7d:6e:d5:e5:7e:95:8d:1e:03:57:
a6:de:43:a5:0c:18:0b:7d:0a:95:9c:38:ad:37:a1:
48:02:2c:aa:68:3c:7c:95:b4:2e:57:1c:61:a4:a7:
65:fb:7a:35:bd:9f:e2:0f:2a:2e:06:24:a2:76:58:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:55:7F:1E:18:80:BE:83:20:77:86:32:F6:5F:A0:FE:51:BF:56:4B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lVV_HhiAvoMgd4Yy9l-g_lG_Vks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:5d:02:f1:66:ea:1c:2e:44:80:86:66:72:3a:23:28:3a:db:
8f:d3:32:d9:f4:f0:ba:a6:c2:7d:e6:be:9f:00:62:b7:8a:4d:
ac:4e:d4:8c:96:aa:40:f1:c6:9e:cd:9e:4d:90:9c:1c:b1:ba:
da:0b:62:10:8c:9a:43:dd:72:6a:2d:b7:8d:ed:1b:bb:b0:16:
d2:8e:6e:a2:0a:1c:6f:e7:e1:08:cc:a1:01:a0:6a:90:a9:9f:
7b:d7:39:d8:0c:f6:08:0d:ad:73:14:83:8b:12:c3:e7:c5:3e:
66:37:70:8a:0a:49:bb:5b:9b:1b:b4:20:09:00:49:bc:df:a3:
04:01:07:87:dc:05:83:e8:9e:58:b2:09:48:3e:14:a7:87:94:
0f:83:7b:df:96:42:1e:7b:51:de:41:b8:39:4b:9a:c0:9e:c3:
43:af:f1:d4:7b:0b:d4:51:f8:00:0e:dc:6a:16:09:4b:0e:65:
71:5b:c7:ed:dd:60:52:ea:fc:4d:71:96:0d:71:75:39:0c:69:
13:f8:3a:ef:0c:c8:63:5f:00:d9:66:be:67:b9:d8:27:f9:2f:
ef:ad:85:72:2c:95:af:c0:2b:82:0c:58:8f:e6:c9:81:80:d3:
25:9a:77:5b:4c:be:99:e1:34:9a:0c:01:aa:11:35:85:65:ae:
f3:ba:59:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:21:18 2025 by rpki-client