Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lXZC6d_ClJjlS6IdFaBCIYMDV5Q.roa
File: lXZC6d_ClJjlS6IdFaBCIYMDV5Q.roa (raw, json)
Hash identifier: 9hgtz7yq3hsQ3Di2hdCkwHdjHEVzP7QPG58mFzEE37s=
Subject key identifier: 95:76:42:E9:DF:C2:94:98:E5:4B:A2:1D:15:A0:42:21:83:03:57:94
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 88C0F42B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lXZC6d_ClJjlS6IdFaBCIYMDV5Q.roa
Signing time: Tue 31 May 2022 15:09:13 +0000
ROA not before: Tue 31 May 2022 15:09:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2294346795 (0x88c0f42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 15:09:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=957642e9dfc29498e54ba21d15a0422183035794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c7:30:6e:55:6a:61:62:5e:1b:86:a4:2b:2c:
27:a5:8b:17:d1:ab:d1:35:19:fb:ea:41:fb:4b:b8:
c3:06:23:02:52:e1:d0:1a:7d:69:f3:77:b8:e7:ec:
2c:18:07:40:d2:1d:bc:b3:64:b6:5a:4f:11:9d:f2:
85:f6:ef:36:b8:cb:77:a3:66:ef:7d:b5:90:65:a0:
da:91:e8:4d:6b:86:c2:b2:77:5b:89:bf:3f:23:62:
69:cc:79:8f:ae:6e:05:e7:d4:aa:38:7d:4a:03:b5:
89:0a:73:32:dc:f2:50:6c:ec:fb:77:15:51:fc:6f:
03:4b:9b:e7:bb:68:f9:3a:17:c8:3e:dc:8e:6b:7e:
56:48:4d:81:5a:ca:9a:24:3c:3a:3f:af:c3:c8:c0:
27:a4:44:e6:e4:3e:ec:3a:cb:e3:68:d3:c9:5a:61:
82:1c:98:29:7d:2a:54:a6:76:da:eb:59:41:0b:4a:
7f:17:7e:a0:18:75:34:bd:68:9f:cf:ae:e3:59:de:
f2:33:c4:45:4f:05:27:16:da:01:ad:53:ec:58:8c:
dc:24:85:a8:ca:e5:98:01:81:58:f0:39:ab:b6:2f:
67:bc:2f:58:99:a1:9f:cc:b8:17:12:1c:e7:0b:78:
72:b7:6f:51:a8:08:31:2a:85:4d:7f:66:aa:2d:2a:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:76:42:E9:DF:C2:94:98:E5:4B:A2:1D:15:A0:42:21:83:03:57:94
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lXZC6d_ClJjlS6IdFaBCIYMDV5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:a0:d9:76:9f:fd:50:a9:cc:fb:26:09:de:db:7a:18:89:9d:
d7:09:0a:84:df:ec:0d:3e:ae:00:1f:da:8c:4d:6a:c8:cb:6b:
5f:b1:96:6f:97:8b:af:28:bd:e6:bd:7e:c6:45:5c:b1:d6:87:
c2:7c:08:de:d8:e3:ea:a5:e5:f5:37:28:ce:38:84:71:13:5d:
ee:1a:34:99:1d:a5:db:be:47:70:32:93:43:6c:2e:f8:bf:92:
d6:f9:6d:cf:61:74:c9:e8:58:8e:95:3f:b2:87:04:88:a2:b9:
78:4e:2c:c2:85:6b:65:1c:60:c7:27:7e:80:9e:d4:47:7c:2a:
dd:47:27:49:00:b3:82:8f:ee:4d:15:4b:34:8f:8a:26:31:e6:
6b:69:c1:75:a9:56:c8:9a:09:02:4a:19:06:09:a4:ba:f5:10:
f3:71:4b:bb:70:df:05:c2:1b:85:9b:ca:29:71:a1:ba:1a:38:
17:0a:a9:15:34:62:7c:0e:2f:5b:49:92:ec:d7:de:ca:11:db:
c4:39:f8:59:36:df:e8:d7:f8:97:77:a7:5b:ab:e8:ba:df:7c:
35:a7:a5:9f:59:67:38:50:50:f7:48:ed:9c:f6:06:f9:52:98:
9c:13:25:04:dc:c7:4e:94:e0:41:67:a8:40:85:58:6d:77:73:
ba:1c:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:11:32 2025 by rpki-client