Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lm317aBUwD1m9P7Hnkt5whTYTO4.roa
File: lm317aBUwD1m9P7Hnkt5whTYTO4.roa (raw, json)
Hash identifier: zhPPZIjssWitvnmtmJltGarOubrvoKam65091Sigo4k=
Subject key identifier: 96:6D:F5:ED:A0:54:C0:3D:66:F4:FE:C7:9E:4B:79:C2:14:D8:4C:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181D859BEF8DE9CA20E19D8F9D2FAAEFC54
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lm317aBUwD1m9P7Hnkt5whTYTO4.roa
Signing time: Thu 07 Jul 2022 11:09:29 +0000
ROA not before: Thu 07 Jul 2022 11:09:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:59:be:f8:de:9c:a2:0e:19:d8:f9:d2:fa:ae:fc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 7 11:09:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=966df5eda054c03d66f4fec79e4b79c214d84cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:48:23:d2:46:09:66:6c:85:59:c5:a6:2b:ea:
7d:18:5e:d0:db:50:cb:ea:43:d2:18:16:c3:45:f0:
7f:14:9e:fa:6f:4f:97:78:e6:d5:e5:d7:d4:82:15:
72:ba:ab:b4:58:ef:8e:78:c6:0a:50:ee:6d:10:4b:
6c:f5:71:b6:49:2a:da:81:09:3a:69:6c:b0:15:fd:
98:ac:c2:9d:be:54:49:58:be:27:31:96:34:e1:a0:
70:08:fe:6d:53:dd:39:b7:9f:9c:b2:cf:66:df:7b:
f9:20:13:cc:bf:4c:0c:ff:15:0e:4b:54:7a:c4:79:
ce:9e:b6:69:ed:50:f6:92:68:86:54:f0:1b:8b:95:
4b:5a:df:b8:69:82:76:cb:43:42:30:75:b3:e9:ea:
4b:8a:3f:4f:f9:a6:e3:3a:bc:cb:78:d1:80:60:21:
52:97:6c:6d:40:49:b2:24:ae:a5:74:53:88:35:a5:
9d:10:b4:27:40:a1:65:b8:ae:50:ec:9c:6d:f1:63:
58:a3:25:00:5d:2f:4d:7e:31:5a:62:e2:24:0c:97:
06:42:cd:97:2e:5d:9c:8e:48:a5:ef:03:2c:ac:d9:
de:8a:17:07:96:af:11:ed:64:d6:27:97:68:e7:45:
4f:f4:b5:0f:f5:43:da:6b:b1:06:d8:b2:cc:1a:aa:
9a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6D:F5:ED:A0:54:C0:3D:66:F4:FE:C7:9E:4B:79:C2:14:D8:4C:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lm317aBUwD1m9P7Hnkt5whTYTO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:6f:6d:a5:77:d8:8a:0a:5d:d7:76:a2:73:2d:1d:c9:64:ab:
25:da:91:da:8e:f7:c3:a0:82:c6:95:f4:ec:31:0b:c9:6d:b6:
c6:db:fe:d2:5c:ef:4c:40:80:a5:07:7d:ed:73:8d:ed:ef:ad:
37:66:e2:93:d0:09:17:63:c4:4e:38:4e:bc:d9:3a:4d:7d:37:
d2:66:95:7a:c3:f9:f0:ba:05:79:cc:d4:b3:27:b5:4e:3b:0c:
63:61:51:b3:e0:9d:12:ac:73:36:ba:77:d5:cd:f4:39:d8:df:
b8:29:ff:aa:2f:9f:2b:d8:15:23:8e:5e:25:a2:cd:ef:61:c3:
8a:9f:75:cc:e0:d9:aa:5c:55:d8:a7:cc:59:0d:85:56:7c:c4:
f9:b2:3f:ec:24:14:24:82:1d:13:d7:a5:a7:38:64:5e:d5:35:
6c:f5:7b:a3:9c:ae:0e:a0:d3:93:5e:e0:29:fa:ff:53:9c:13:
9c:95:e8:84:8d:9f:45:4a:64:22:41:d9:ea:44:67:61:da:2f:
a7:f2:10:3d:56:7a:8a:2e:ca:0c:e4:a4:66:e5:ce:01:39:51:
92:3f:24:1e:b2:a8:d4:e3:3f:0c:98:39:47:a7:55:0e:7d:4f:
b3:9a:7d:01:44:de:c8:a6:28:40:41:43:37:ad:72:7c:17:dd:
51:45:72:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:02:13 2025 by rpki-client