Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lX-bYiAoDRdu4F2uudCjD8zFKWs.roa
File: lX-bYiAoDRdu4F2uudCjD8zFKWs.roa (raw, json)
Hash identifier: qO89xzt2y+NKwCX3sbKEce3hAXOkYjMkOFZna8AS/4E=
Subject key identifier: 95:7F:9B:62:20:28:0D:17:6E:E0:5D:AE:B9:D0:A3:0F:CC:C5:29:6B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182A7A48C7A2776A518349FD25C6BE52E02
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lX-bYiAoDRdu4F2uudCjD8zFKWs.roa
Signing time: Tue 16 Aug 2022 17:12:35 +0000
ROA not before: Tue 16 Aug 2022 17:12:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a7:a4:8c:7a:27:76:a5:18:34:9f:d2:5c:6b:e5:2e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 17:12:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=957f9b6220280d176ee05daeb9d0a30fccc5296b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4c:1c:02:1f:34:56:61:8e:8c:37:69:cc:28:
48:c6:2b:e5:df:a5:16:ab:3f:f2:ac:eb:0d:45:8a:
d0:8d:2b:89:6b:44:7c:c3:fc:f7:e9:5f:d2:cb:12:
27:88:2e:67:d9:05:b1:98:02:e2:b4:8c:c4:ec:5e:
29:17:dd:7f:2a:7a:03:44:aa:cb:8d:64:5e:a1:f6:
ed:68:85:07:0b:05:00:80:7d:e8:c4:f2:5d:40:8b:
01:d2:bd:19:87:2f:14:31:d2:bd:9f:5b:4d:86:20:
16:b0:1f:7a:1b:99:85:b9:91:23:73:ba:90:83:b3:
5c:15:28:19:95:54:70:36:a7:64:9b:c3:dc:22:ff:
5c:89:b9:94:d0:30:7c:d3:4a:85:93:a5:55:85:b3:
03:93:87:09:9c:78:15:23:69:9a:60:3e:87:6f:ea:
77:df:81:60:fe:cb:5e:bd:ba:b8:71:fa:a6:2f:da:
c8:d0:c5:39:15:11:e8:be:80:37:13:30:1e:ca:f3:
51:25:a3:84:b1:c8:17:7d:34:60:3a:80:80:cc:2a:
27:91:9f:c4:56:df:86:b4:a5:e5:de:d8:87:51:65:
2a:d7:b1:88:8e:8b:9b:31:fe:d0:9f:3d:9f:a8:31:
80:74:e8:48:a9:32:8d:63:1f:4b:e7:35:e6:ed:fc:
99:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7F:9B:62:20:28:0D:17:6E:E0:5D:AE:B9:D0:A3:0F:CC:C5:29:6B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lX-bYiAoDRdu4F2uudCjD8zFKWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:53:97:d7:a2:57:a0:31:4d:dc:28:f6:9f:86:c7:13:b0:73:
ab:37:f6:d4:b8:b6:83:9f:8d:5e:94:77:9d:44:3e:5c:06:2d:
0f:05:bb:e3:71:0c:6e:b6:3e:63:d2:fd:e7:b2:8c:67:b3:93:
31:bd:a2:1f:e2:07:59:c8:24:b4:77:15:3b:15:c7:17:3f:5b:
5d:7a:23:aa:c8:16:5c:8b:e8:c6:fe:26:b6:3a:08:72:a5:f6:
45:7f:22:a8:41:92:b7:ad:25:21:d0:36:8f:5b:05:4f:f0:f0:
8e:6e:22:53:a1:44:fb:53:f4:6b:25:61:1f:e5:11:67:0b:4b:
ba:d2:45:66:50:09:e6:2b:d4:89:81:29:d8:9b:34:0f:83:66:
b4:91:8f:c2:c7:bc:91:79:fd:35:2f:a8:52:65:3b:c1:70:70:
c4:41:f3:cd:36:3e:10:6f:77:cd:3a:f6:41:ab:f3:12:5f:80:
40:f5:ee:ce:af:62:72:5d:fa:90:b7:3c:3f:47:ca:85:83:97:
77:8a:6b:30:37:18:da:db:0f:96:03:04:81:aa:08:40:4c:45:
50:7f:8e:1f:31:03:0a:fe:54:39:44:7c:c8:fc:ee:47:54:1e:
cb:4a:d4:bc:86:c0:23:64:80:47:a4:f2:ff:fd:e4:8d:37:cd:
2f:09:ab:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:20 2025 by rpki-client