Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/le8CQAZzCnObNF56Xu_fmDizLA4.roa
File: le8CQAZzCnObNF56Xu_fmDizLA4.roa (raw, json)
Hash identifier: q8SVpg1dLoTlVDXHVy00Ho3+WD3O2zmQmMxK4ZEzBT0=
Subject key identifier: 95:EF:02:40:06:73:0A:73:9B:34:5E:7A:5E:EF:DF:98:38:B3:2C:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899D44EBBE091E6C4869B5C2D47DFEFF19
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/le8CQAZzCnObNF56Xu_fmDizLA4.roa
Signing time: Fri 28 Jul 2023 16:11:26 +0000
ROA not before: Fri 28 Jul 2023 16:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9d:44:eb:be:09:1e:6c:48:69:b5:c2:d4:7d:fe:ff:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 16:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95ef024006730a739b345e7a5eefdf9838b32c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:6f:58:ec:3a:64:3f:14:ed:e5:23:01:9a:
81:e6:a9:f4:cd:12:aa:72:35:84:21:fe:f5:69:80:
f6:bd:53:8f:74:ed:63:54:80:3d:46:df:27:b1:36:
3a:93:e2:da:a0:e6:c6:1b:8d:51:07:4e:32:75:36:
73:b3:6a:7a:9e:af:5c:29:1a:3d:31:6e:56:6e:40:
84:21:8b:42:ff:de:6e:00:78:f5:bf:d5:a0:f6:57:
54:4f:c2:aa:53:5d:fa:89:55:53:1c:06:e3:2c:97:
d4:55:df:22:7b:3e:a6:d0:3e:3d:f1:0e:3a:03:ca:
b1:d3:d4:18:85:c9:58:47:a1:08:54:77:5e:32:4f:
5e:06:d0:6c:8e:08:6f:9b:42:04:91:e7:d8:19:38:
be:17:d3:bb:8e:ca:b5:09:48:da:9b:83:48:bf:d4:
c3:fe:be:87:a1:d5:88:06:0c:be:f8:78:30:3e:4f:
9a:9e:95:82:d9:9a:e9:8b:f6:4b:b8:38:05:9e:73:
44:5b:4e:64:a5:b4:7d:8d:5c:72:f3:7e:1f:de:18:
88:43:44:da:f0:63:96:8f:df:88:9c:de:87:07:ac:
90:af:91:78:a0:18:73:f5:75:05:14:d8:19:9a:f4:
e2:a6:30:28:1d:31:90:f4:5c:71:e8:c8:30:84:4e:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EF:02:40:06:73:0A:73:9B:34:5E:7A:5E:EF:DF:98:38:B3:2C:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/le8CQAZzCnObNF56Xu_fmDizLA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:54:7a:d5:56:d9:4c:03:83:16:b2:d5:26:38:b4:b0:7f:b5:
6e:63:7c:ec:b6:4f:8d:cc:4a:75:b0:2a:04:66:a2:fb:b1:83:
fd:44:17:d5:45:16:85:c1:5b:e0:27:73:5e:71:60:17:1d:87:
2d:72:c2:66:84:ee:d7:43:b8:9d:af:5c:0f:15:c5:e0:a1:1b:
54:4e:0f:86:43:d5:23:bb:dd:92:38:b6:9c:7c:ea:87:f7:e2:
2c:1b:d3:51:57:65:6b:17:aa:85:e4:48:5a:8e:47:a6:6e:9a:
93:08:ca:dc:3a:d2:3b:76:5b:de:ac:68:c1:d5:dd:78:9b:6b:
cc:63:28:2b:b2:2c:01:86:cf:83:c9:0f:c4:10:c2:f5:97:f3:
4b:93:fa:31:15:bb:0a:35:e7:23:ac:b0:26:50:99:cd:0c:6d:
c8:96:ac:b4:8f:aa:cb:03:f2:e7:38:41:0f:76:b0:2d:0d:fa:
33:a1:e1:92:e2:0a:d4:a7:13:11:02:7c:a2:e4:fb:c6:51:8f:
af:f9:f6:5e:0e:27:71:84:37:e1:10:8a:b3:cd:99:e8:05:3f:
5e:b7:d3:92:5d:f5:5f:60:08:17:3a:d9:72:47:97:83:3d:81:
5f:df:e3:d4:5e:9b:7f:35:ad:33:69:66:ba:b6:e9:ea:6e:02:
ab:46:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:44:53 2025 by rpki-client