Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lf9GKO13tckt80iqN5jhWesFZwk.roa
File: lf9GKO13tckt80iqN5jhWesFZwk.roa (raw, json)
Hash identifier: sLTwmD3j+WSIiNs+tPyAUxbC3Od/dkf8J+/B1W8fbCI=
Subject key identifier: 95:FF:46:28:ED:77:B5:C9:2D:F3:48:AA:37:98:E1:59:EB:05:67:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182BE2EDA282B90C085F0BA2140ECF88C8C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lf9GKO13tckt80iqN5jhWesFZwk.roa
Signing time: Sun 21 Aug 2022 02:15:17 +0000
ROA not before: Sun 21 Aug 2022 02:15:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:be:2e:da:28:2b:90:c0:85:f0:ba:21:40:ec:f8:8c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 02:15:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95ff4628ed77b5c92df348aa3798e159eb056709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6b:d8:8f:db:aa:3c:8b:8b:11:33:50:11:6c:
65:8e:0e:6a:ae:29:8e:ee:96:44:9f:88:4f:92:7c:
0b:4b:26:22:5b:7a:bd:a0:a3:21:bc:ee:d7:90:d6:
03:7a:ae:89:66:ba:98:9b:fd:eb:95:8d:d0:46:b2:
c1:1f:04:f1:85:41:e8:ad:95:27:c0:fa:61:da:2b:
d6:c6:d3:6b:65:4e:b4:c5:01:ec:19:9c:2c:37:a4:
cd:fc:7d:77:a7:f2:d2:ec:30:d2:bf:2d:25:3d:01:
0b:30:ee:8c:75:65:4e:18:38:c9:ea:29:4a:f6:ed:
c5:28:6d:a3:4a:c2:11:7b:9e:02:3a:68:0c:b6:ed:
19:7d:e4:58:69:dd:b5:60:b0:6d:84:b0:0d:1f:92:
82:01:59:d2:e3:52:10:34:30:01:29:b5:56:e9:0f:
bc:51:d5:f8:19:cc:dd:1e:c5:23:fe:b6:28:5a:24:
07:67:a6:83:5f:80:fc:23:1f:03:e4:55:f1:06:4b:
a3:db:68:3a:d1:5f:1f:e0:a0:7d:3d:c6:1f:bf:6b:
cc:9d:46:1c:cd:18:2d:02:b6:b2:07:05:7f:aa:95:
d2:85:ab:26:f5:07:4a:19:4c:9b:97:fb:cb:ee:f4:
23:de:7c:4c:01:bf:5a:51:70:cb:e9:21:3a:85:7c:
39:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FF:46:28:ED:77:B5:C9:2D:F3:48:AA:37:98:E1:59:EB:05:67:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lf9GKO13tckt80iqN5jhWesFZwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:85:eb:c5:4c:c9:51:b6:a9:9f:15:05:6d:b0:4c:3a:04:75:
f2:36:f9:77:4e:7d:39:9f:a4:54:83:38:ad:c8:73:60:01:ca:
93:28:86:84:fb:ad:a2:1d:57:1a:3b:ab:8b:da:68:2c:b0:e9:
87:14:dd:9d:ea:ef:ba:bf:a4:ab:64:5a:0b:2b:92:65:79:9f:
f1:49:a2:ea:ca:a9:d9:a6:5b:1d:7d:c1:bd:e4:7f:46:00:1f:
bf:d1:3b:f2:90:aa:5d:1d:52:ca:a6:51:c2:91:e1:f0:be:d0:
49:e3:a1:7c:b2:c1:bc:f1:18:99:27:0b:1e:fb:aa:51:80:43:
16:e3:1d:e1:a5:a5:41:60:c0:97:2d:46:53:7a:ff:2a:d5:3c:
f3:c5:80:61:07:26:18:5e:7c:a7:74:a2:b4:d9:8a:23:99:89:
e7:18:fe:d5:ad:4c:63:e7:02:ae:56:d1:ad:9c:3d:d5:b1:45:
fe:86:01:e2:3f:d5:a8:95:8f:b4:e4:d8:a7:06:07:d0:f4:3a:
d0:7b:c2:23:fc:30:7a:68:cc:11:7a:b8:f8:ef:48:ef:c5:45:
c0:86:ef:84:90:b1:80:49:47:88:51:23:48:22:18:b5:53:92:
47:f7:5f:54:b8:f8:8b:9a:c0:7c:a4:61:31:39:92:2b:a0:41:
42:b9:91:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:21:50 2025 by rpki-client