Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lq_IXHvPCXZ-uJjN03sh_hVvaks.roa
File: lq_IXHvPCXZ-uJjN03sh_hVvaks.roa (raw, json)
Hash identifier: VFaSvX6AH64FivyJsTj85bzEdD/NeOcAuGbTRcZeqoo=
Subject key identifier: 96:AF:C8:5C:7B:CF:09:76:7E:B8:98:CD:D3:7B:21:FE:15:6F:6A:4B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184C04CAA6010003E8EB89E2BB84EB6331C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lq_IXHvPCXZ-uJjN03sh_hVvaks.roa
Signing time: Mon 28 Nov 2022 22:12:40 +0000
ROA not before: Mon 28 Nov 2022 22:12:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c0:4c:aa:60:10:00:3e:8e:b8:9e:2b:b8:4e:b6:33:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 28 22:12:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96afc85c7bcf09767eb898cdd37b21fe156f6a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:66:cc:3e:e1:11:b9:a3:23:b8:aa:0c:49:
76:65:17:b4:5d:dd:28:4f:8d:f5:2e:b9:c5:be:b7:
0c:2d:5a:8f:b4:88:92:a4:31:0b:f5:07:c6:f1:43:
52:17:02:94:b0:e8:66:14:5c:c7:3a:52:18:3d:cb:
c6:90:e4:3a:34:a9:ac:a5:88:e7:a4:59:ee:49:9e:
fc:ff:bb:f7:dd:ec:d9:ea:25:af:fe:a8:85:82:ff:
f3:6c:49:93:b8:1d:db:50:75:84:5e:c1:74:b2:4b:
bd:db:91:82:39:70:94:b6:f8:7e:da:03:1b:41:78:
97:19:ea:da:e8:c5:5d:5c:7c:d0:07:6c:e8:bd:67:
74:ee:86:2c:74:e2:a8:f3:b4:96:27:7d:a5:6a:87:
3b:91:01:d7:44:03:7d:d7:02:de:16:90:25:f3:cf:
8a:ff:36:34:ec:75:85:33:06:fc:2b:01:38:79:10:
3d:d5:14:75:61:93:8b:f0:f0:b3:77:81:6d:8b:3a:
37:19:cb:17:f8:fb:ef:31:24:0e:e7:d2:83:82:4b:
8c:5f:2e:b8:38:df:ac:3a:50:dd:cc:ea:3b:ad:cd:
89:ac:0d:20:0a:40:59:1d:48:c6:e1:e8:d0:c4:da:
69:5e:f2:48:d6:7a:fd:dc:9e:58:12:e8:de:8c:6b:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AF:C8:5C:7B:CF:09:76:7E:B8:98:CD:D3:7B:21:FE:15:6F:6A:4B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lq_IXHvPCXZ-uJjN03sh_hVvaks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:6d:80:ce:de:f6:ff:85:84:a7:4d:d7:6c:bd:40:1f:e4:10:
88:18:21:ec:96:35:4f:f5:49:10:c4:60:1d:2c:4b:49:55:84:
33:5e:7e:94:97:22:98:cd:9f:61:7b:4c:6a:4f:59:ff:29:1f:
70:1b:93:2a:01:1b:12:e7:9b:76:17:4c:80:d9:11:7e:df:df:
54:4f:1d:c2:54:ab:19:35:8f:4b:99:9a:81:5a:ad:6d:54:c0:
cc:f9:c9:c6:e8:3a:df:e7:95:a6:79:9e:31:c0:fb:2d:18:af:
95:c3:6b:03:5b:04:56:b2:bb:b7:13:25:44:e2:23:22:41:18:
22:65:fb:45:c1:bf:aa:61:45:79:17:23:c1:80:7d:0e:81:c5:
69:0d:df:7a:5d:fa:b1:dd:8f:62:00:cc:11:65:7a:db:32:f3:
78:3f:e9:86:a8:3b:6a:20:2e:b6:1a:f8:c1:23:c2:b8:9a:1b:
28:b5:a8:e3:65:b2:1f:f5:3a:05:6f:6d:cc:5c:44:55:b3:af:
b6:c2:3f:6c:80:6b:16:e3:b1:2e:7b:44:a1:0d:8c:6c:a3:f6:
ae:1b:62:f5:b4:66:69:5b:a4:e0:5a:86:47:e4:f7:20:9a:50:
af:0a:dc:39:16:9a:c4:e3:62:eb:d0:ae:fb:72:f9:55:9a:83:
7e:70:75:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:28:23 2025 by rpki-client