Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lXVpWN8ZOxKg_5GT7cWpdoL03vM.roa
File: lXVpWN8ZOxKg_5GT7cWpdoL03vM.roa (raw, json)
Hash identifier: 5E4K48oS1yeCFt8WvP0RNghxLwLNOQKaf553cD86cOU=
Subject key identifier: 95:75:69:58:DF:19:3B:12:A0:FF:91:93:ED:C5:A9:76:82:F4:DE:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01844F3C79735476065AF119E4F4459EB192
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lXVpWN8ZOxKg_5GT7cWpdoL03vM.roa
Signing time: Sun 06 Nov 2022 23:17:54 +0000
ROA not before: Sun 06 Nov 2022 23:17:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:4f:3c:79:73:54:76:06:5a:f1:19:e4:f4:45:9e:b1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 6 23:17:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95756958df193b12a0ff9193edc5a97682f4def3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6e:10:a8:e1:42:f3:1f:56:d6:fd:b7:c7:a8:
d3:94:bb:b8:8d:17:0e:0a:19:de:5f:dc:89:c6:04:
66:44:95:75:81:22:52:ac:2e:50:5b:9f:a6:69:a6:
66:42:38:03:10:ee:a1:8e:23:cb:66:a5:a1:97:8c:
28:d6:ff:b5:99:a3:b7:27:19:47:fe:d1:ae:a5:57:
62:e9:d1:d6:b4:37:37:9d:aa:4d:99:de:0f:1c:30:
98:14:f4:1b:e4:ee:0f:0d:ac:da:53:15:f3:fa:e9:
66:d9:a1:f7:80:f4:2f:d3:33:53:f3:14:97:a9:08:
33:73:8a:f3:5b:da:d2:da:53:01:14:f6:b1:ce:c1:
a9:37:23:4a:54:a3:c2:11:eb:32:4d:30:f3:73:7f:
ce:e2:3f:b1:db:3b:3c:7b:54:41:38:0f:38:2b:fe:
c7:e6:d0:4f:7e:28:2d:0f:1d:d2:a8:5c:15:ef:1c:
8c:31:71:c0:4d:6b:94:e5:74:83:89:64:4b:a5:19:
50:64:1f:82:0e:04:2a:b2:06:8f:34:07:c6:f2:a4:
ba:26:60:c1:5b:36:6c:2c:1f:c6:58:5a:c5:68:6e:
f6:1e:eb:74:e3:b5:37:f3:8f:73:96:c5:06:aa:a1:
68:e8:06:c0:e3:43:16:b3:09:a3:00:1b:10:8f:8a:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:75:69:58:DF:19:3B:12:A0:FF:91:93:ED:C5:A9:76:82:F4:DE:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lXVpWN8ZOxKg_5GT7cWpdoL03vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:be:28:71:ad:c9:90:ba:d9:49:aa:85:1c:3e:7b:41:ab:35:
b8:71:1f:4f:cd:63:e3:fb:77:1c:36:34:24:d6:41:8b:8f:59:
bc:a8:f5:b1:6d:3f:36:1e:b3:3b:58:e1:0e:5b:12:e7:cc:89:
93:15:e2:c3:42:82:82:74:a2:73:7a:6f:4d:67:01:44:0f:5d:
56:42:6e:86:56:74:ec:a3:23:aa:fc:1a:e1:1b:43:28:08:ed:
8b:8e:0c:d4:04:4a:6a:89:54:0d:99:39:56:59:2f:ed:74:08:
a9:c5:d2:3f:c6:4a:ee:d2:8d:41:f6:75:15:a4:de:3d:4c:c7:
11:19:a5:31:74:04:42:05:78:f3:d3:a8:ae:a2:46:19:a0:70:
a2:e5:b1:3f:2a:e5:92:f2:2c:6d:d8:5c:2f:96:0a:bb:2c:df:
19:b2:a3:27:21:2b:60:53:84:95:ad:51:bb:91:15:f1:cb:fd:
77:9e:1e:bb:1e:fe:7a:72:ab:ca:d6:28:a5:79:22:53:a5:d8:
1c:98:ef:41:80:ba:c0:86:d9:d9:7d:09:79:2e:3e:03:82:a1:
9e:5d:92:87:0a:a7:1a:22:9f:74:5c:1d:39:03:93:1b:a9:d8:
0c:4b:65:7e:13:b4:d8:cf:a7:67:d2:0c:5b:25:c0:89:44:16:
b0:7a:ff:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:12:09 2025 by rpki-client