Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lf1_apbcnQyi1lyz3Iu4ZVSZ-Eg.roa
File: lf1_apbcnQyi1lyz3Iu4ZVSZ-Eg.roa (raw, json)
Hash identifier: AdYCi2ElNrRqeUoASa9XUqU5USezwZKS/1UtvGQKRa4=
Subject key identifier: 95:FD:7F:6A:96:DC:9D:0C:A2:D6:5C:B3:DC:8B:B8:65:54:99:F8:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FFF3092884A51074FD0429678B0A7DB9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lf1_apbcnQyi1lyz3Iu4ZVSZ-Eg.roa
Signing time: Wed 16 Aug 2023 20:04:24 +0000
ROA not before: Wed 16 Aug 2023 20:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:189:fff3:3ff/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ff:f3:09:28:84:a5:10:74:fd:04:29:67:8b:0a:7d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 20:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95fd7f6a96dc9d0ca2d65cb3dc8bb8655499f848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:23:d9:5d:a7:e1:46:60:39:19:72:07:1f:06:
02:ce:25:8e:8a:50:8f:14:a8:ff:5e:22:90:e9:c5:
30:2a:a8:d7:09:07:c6:15:f3:88:d0:d5:5c:48:8a:
4b:7b:91:5f:c0:6d:ae:61:b2:a0:e9:e2:c5:d0:bb:
89:d3:5f:a7:d9:b4:57:b2:00:53:64:c7:2e:de:3d:
3c:c3:1e:3a:68:28:51:b6:f8:8b:cf:62:3a:22:01:
9e:0d:99:9b:1d:34:ae:fc:45:43:3d:8b:bb:c8:86:
13:bf:83:5d:fb:16:e7:b1:c5:ef:b5:ab:69:70:c6:
5d:9a:cd:e1:dd:e7:cd:49:2c:59:cf:76:41:fc:5d:
cd:93:e5:aa:3b:c3:1a:f2:d6:e7:f7:71:e5:d7:0a:
00:50:53:01:f2:96:73:96:09:04:51:1c:21:65:57:
4c:63:30:79:74:a1:02:ae:ef:d6:9a:7c:a0:a4:7e:
60:33:aa:68:2e:f4:84:12:b8:f9:1c:e2:65:ce:3e:
2f:fa:1d:56:98:a0:c3:fe:87:01:2e:0b:4d:56:14:
26:69:4a:79:93:9b:c2:ce:25:1a:7b:7c:da:14:b7:
1d:bb:69:69:57:17:b0:5d:0b:58:5d:a7:57:f0:8c:
88:73:2f:e3:3f:f5:95:af:86:9e:ed:6b:4c:ca:f8:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FD:7F:6A:96:DC:9D:0C:A2:D6:5C:B3:DC:8B:B8:65:54:99:F8:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lf1_apbcnQyi1lyz3Iu4ZVSZ-Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:74:35:d3:8e:1e:f7:1d:65:f8:40:11:55:5d:ce:dd:f9:01:
16:72:f3:6f:c0:bb:5c:e1:67:7e:94:18:2c:21:60:7b:ee:63:
f5:a8:49:7f:f6:56:49:53:74:dc:44:b5:c8:25:a4:94:bd:be:
6a:7e:19:76:bb:7e:c2:1e:08:4e:1c:ac:b7:ba:bf:c4:22:31:
a8:ea:e9:39:59:60:6c:1b:f4:92:03:4b:38:61:12:79:cb:e0:
ac:b1:68:f7:60:ae:cb:f3:2c:9f:6d:8d:0c:31:44:9f:67:76:
d2:f2:d3:b2:1a:48:04:9f:3d:a2:8f:af:b6:4f:bc:31:10:94:
5a:db:35:42:5e:3a:93:2b:7d:77:5e:53:d2:e2:e6:b6:e4:1c:
2b:ef:63:0b:86:15:8e:7d:95:fc:c6:1f:51:7e:94:e2:c2:8e:
34:c9:8f:5f:64:f8:24:5e:4b:3b:ac:18:09:ce:24:8f:ae:ca:
a9:3d:10:f5:54:14:5e:7f:04:0c:55:a2:c9:c4:79:fc:cc:00:
63:ee:45:6e:dc:97:38:f4:70:be:2e:ab:cb:52:e2:6c:51:2d:
56:cf:92:f1:9d:15:92:1d:8e:46:a9:db:19:c6:79:64:8d:b1:
f8:7e:4a:4d:9a:3f:22:0e:eb:20:e2:d4:25:fa:a2:69:96:fc:
15:96:49:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:43:34 2025 by rpki-client