Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/luq1iMSKCJEcFjsI8knvYoxSg6A.roa
File: luq1iMSKCJEcFjsI8knvYoxSg6A.roa (raw, json)
Hash identifier: WlZ7+WMlrgO6iMGhuhuNDvaTBKm7GFFk4FfwjlXdSok=
Subject key identifier: 96:EA:B5:88:C4:8A:08:91:1C:16:3B:08:F2:49:EF:62:8C:52:83:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865EDD28D35285EC9F611F190916E0C41C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/luq1iMSKCJEcFjsI8knvYoxSg6A.roa
Signing time: Fri 17 Feb 2023 10:13:17 +0000
ROA not before: Fri 17 Feb 2023 10:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:dd:28:d3:52:85:ec:9f:61:1f:19:09:16:e0:c4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 10:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96eab588c48a08911c163b08f249ef628c5283a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:31:ef:2c:07:b2:3f:17:8f:92:94:86:01:
91:0b:f0:ae:db:11:ff:67:90:69:02:af:0d:16:1e:
61:ae:8d:4e:8b:0a:10:94:85:3f:a5:8c:a0:bb:77:
45:c9:f8:01:d8:c2:b1:c4:c8:19:6b:14:e4:5a:33:
5d:ed:d8:28:3a:93:e5:1e:cc:12:9c:41:53:32:c6:
c7:6d:fd:56:11:bb:f9:9a:1b:8a:62:1f:33:5b:85:
24:ff:54:35:52:4e:0a:6f:e9:7b:e4:e6:9e:0d:29:
f4:00:f0:f1:b5:b0:8b:1f:c7:5a:c3:45:9a:0a:97:
28:0c:03:51:9b:47:07:39:9a:db:fa:de:00:82:f7:
aa:7b:d6:c1:04:f4:e9:a0:7c:ee:5c:fc:81:92:5a:
8a:c0:1b:67:d7:c0:fc:ba:de:ac:ed:91:4b:8d:7f:
c4:30:c9:e0:f6:8f:43:f0:3a:35:6e:36:90:6b:6e:
ae:b2:72:06:d7:b2:a3:19:11:4b:e5:9f:86:df:e6:
93:c2:8c:19:ca:0e:48:25:50:8e:89:2f:dd:0b:86:
71:8e:4f:7b:8d:d7:63:df:dc:d0:51:60:b4:98:87:
40:b8:92:75:71:35:9b:76:5c:c2:25:ef:b1:ef:a3:
fd:bd:42:08:65:12:6b:a2:c5:95:1b:3b:a5:d1:89:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EA:B5:88:C4:8A:08:91:1C:16:3B:08:F2:49:EF:62:8C:52:83:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/luq1iMSKCJEcFjsI8knvYoxSg6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:4c:b4:cd:e0:74:e3:b0:6a:da:9a:41:3f:06:9c:94:7a:b9:
b5:35:fb:c5:bf:44:4e:27:48:3b:ff:c2:db:59:a4:1f:f3:4c:
7d:51:e1:55:a6:58:42:b1:d1:a9:d4:48:73:c4:87:88:31:15:
2c:8a:05:66:82:b5:22:ee:cb:9c:1e:e8:21:c8:9e:fc:fd:4d:
9d:03:ab:b6:81:da:27:7d:da:8b:95:fc:fe:09:a9:6c:52:0b:
f8:a3:1d:65:6c:9b:00:c6:89:97:cb:43:00:63:af:91:5c:f9:
5f:62:57:8d:be:4b:ce:37:3b:aa:db:d1:7a:fb:31:ef:cc:aa:
03:9d:b7:23:7f:ed:88:72:bb:ea:6a:d6:e7:01:71:fe:2b:63:
8d:86:1a:6a:1e:94:be:9d:ec:69:12:73:7f:6f:5d:c1:e6:27:
d3:fa:96:bf:2b:31:f2:3f:9b:4b:2e:b9:4a:f7:1b:57:00:77:
46:ae:5b:3b:3c:dd:1e:70:1e:8b:81:7d:55:4f:57:3c:47:05:
8f:c2:31:79:b4:f0:a2:a2:a8:ae:ef:e1:ec:2a:d6:ee:47:6e:
88:80:eb:d0:c3:7c:3b:b9:c8:19:63:17:b9:ae:b3:ae:e0:3a:
2e:27:85:81:04:59:f9:06:dd:b6:ad:6a:44:7d:19:ec:43:a3:
6c:fc:d0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:14 2025 by rpki-client