Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lhMap5FAi34AQ0X_6PvsgP5kKRw.roa
File: lhMap5FAi34AQ0X_6PvsgP5kKRw.roa (raw, json)
Hash identifier: v7giNj77NOa969mpH1lEclrV6L8jAyWJ6OUFyGJ8yjU=
Subject key identifier: 96:13:1A:A7:91:40:8B:7E:00:43:45:FF:E8:FB:EC:80:FE:64:29:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864408BB1408FA34687A28AD0044641E39
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lhMap5FAi34AQ0X_6PvsgP5kKRw.roa
Signing time: Sun 12 Feb 2023 05:11:08 +0000
ROA not before: Sun 12 Feb 2023 05:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:44:08:bb:14:08:fa:34:68:7a:28:ad:00:44:64:1e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 05:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96131aa791408b7e004345ffe8fbec80fe64291c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bc:38:a1:35:b1:81:b1:40:e3:ab:ec:28:f5:
d1:be:e3:bd:da:50:d8:1f:f6:0f:05:d4:40:cd:62:
fa:ba:5a:e5:7c:28:27:79:27:11:02:39:98:95:b1:
2c:76:95:e3:2a:ee:e4:7a:3d:07:e4:c9:db:5a:de:
e4:89:7f:1a:7a:69:e1:3f:3b:50:c2:83:17:12:1e:
d0:73:14:56:c9:ac:e5:82:50:56:83:9e:41:f6:b2:
07:67:cb:6a:72:2f:03:bb:a5:9e:8c:89:6b:64:ef:
61:ea:47:de:fd:94:d1:75:7a:f6:a4:ef:13:51:74:
3c:7b:7e:00:48:2b:5f:39:b8:25:a9:0b:19:57:6f:
32:da:49:2d:97:07:95:d4:bc:0a:6b:dd:bc:f9:51:
29:b9:95:94:19:39:ec:cf:39:ca:95:38:4d:a1:57:
6d:51:c0:af:77:70:b1:43:c9:85:42:1b:91:ae:55:
61:03:ab:ba:65:0f:74:99:ae:8f:4a:9f:96:c3:d7:
9d:89:6f:47:d9:f6:2f:dc:19:ac:6a:32:72:40:8b:
ca:d7:bc:9d:25:3f:8b:60:2e:4a:fc:e6:09:a3:08:
a1:f8:7b:7a:d2:bd:74:cf:a5:fc:fa:ae:75:26:41:
93:72:db:6a:6f:ef:b9:b8:88:ed:3b:96:51:e8:06:
e4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:13:1A:A7:91:40:8B:7E:00:43:45:FF:E8:FB:EC:80:FE:64:29:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lhMap5FAi34AQ0X_6PvsgP5kKRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:cf:20:f0:5d:a8:9c:36:8e:11:6a:00:55:89:1c:21:58:7c:
da:5a:b1:73:6a:fe:4f:14:a9:84:8f:80:9e:bc:03:44:d4:3d:
32:14:51:e0:d5:c2:53:70:82:46:fc:12:3b:67:0e:fa:49:e5:
1c:33:02:04:d7:b8:f0:58:a8:fa:6b:bc:28:88:5e:8b:7d:3a:
6a:ae:89:2c:3d:a5:6c:ac:2c:8d:3f:06:55:02:7a:11:22:40:
7c:bd:44:28:20:87:b3:cc:5c:6f:61:03:4e:8c:70:79:b4:6a:
93:6d:64:cc:2d:51:aa:b7:a2:19:91:54:56:b7:5f:86:0b:a7:
a8:78:f5:0c:a8:a9:80:6a:ca:ff:f2:03:49:0a:5d:7f:f4:81:
74:4a:0f:ad:c1:f4:2c:e1:e9:c7:42:7b:f9:6e:ac:43:88:e2:
fd:de:5a:ad:28:6c:82:9f:0a:d1:42:e5:04:56:c9:c4:4a:9d:
43:21:82:ea:a2:02:df:7c:e0:a1:e3:e8:9c:0e:3c:22:a1:d6:
58:26:9d:d2:6d:1d:54:e4:4a:15:ac:51:a5:84:63:7d:01:08:
52:fc:ed:0b:e5:85:ab:c4:f8:b0:1b:80:fc:39:33:1a:6b:46:
0f:4c:60:1c:1b:b2:29:56:c5:71:89:7e:22:8f:01:1e:6f:dd:
a6:2e:35:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:55:20 2025 by rpki-client