Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mLUSNb_SAX2QykdUz7Y3Q3-UIOs.roa
File: mLUSNb_SAX2QykdUz7Y3Q3-UIOs.roa (raw, json)
Hash identifier: JS0Cum/XY8SpalKVuhb+nmGga6sXLrEZyfEsFeahwL4=
Subject key identifier: 98:B5:12:35:BF:D2:01:7D:90:CA:47:54:CF:B6:37:43:7F:94:20:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880AEEE92F4DC2C948AC249D22C96B697E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mLUSNb_SAX2QykdUz7Y3Q3-UIOs.roa
Signing time: Thu 11 May 2023 13:10:09 +0000
ROA not before: Thu 11 May 2023 13:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:ee:e9:2f:4d:c2:c9:48:ac:24:9d:22:c9:6b:69:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 13:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98b51235bfd2017d90ca4754cfb637437f9420eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8b:f4:b6:db:6d:77:07:8a:e1:b6:36:08:12:
64:f8:59:d7:ca:0f:c6:77:d2:ba:bd:bf:b7:5b:35:
97:25:2c:f8:14:8c:fa:d7:43:0d:a6:81:80:7f:29:
1d:4f:30:75:df:6a:c2:72:0b:fe:ec:28:71:d5:99:
ea:49:bb:6c:4e:34:c7:e2:e3:ab:79:b2:aa:76:f9:
aa:90:9b:dc:d6:21:ea:64:58:8c:ea:4e:6d:0a:97:
01:2d:48:f1:c1:7d:53:ba:e1:b2:73:e2:a8:85:bc:
ef:c2:7d:64:08:bf:e0:b3:9d:51:e6:d9:80:1b:cb:
57:44:45:78:4a:07:59:14:3a:cb:b3:c3:70:21:1a:
87:40:96:2d:70:92:dc:57:80:0a:29:e1:58:ec:66:
65:b6:2f:fe:0b:64:44:61:d6:18:54:fd:55:b0:51:
6d:18:d8:a3:f6:a9:28:a4:e6:bb:d2:a2:e6:39:ed:
b5:4e:9d:c1:70:35:b5:55:fd:fc:e2:ca:7c:db:7b:
61:75:8a:0f:7d:7b:cb:83:08:e2:d5:a6:d8:e5:05:
5d:0f:ef:d9:36:32:8e:b3:ca:7f:43:8d:83:00:75:
f8:d1:a4:d4:8d:f4:1d:71:15:c9:81:cd:75:1a:90:
f7:e4:8c:49:9b:da:86:be:46:51:00:ee:fe:a3:cd:
97:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B5:12:35:BF:D2:01:7D:90:CA:47:54:CF:B6:37:43:7F:94:20:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mLUSNb_SAX2QykdUz7Y3Q3-UIOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:fe:42:75:34:79:49:d4:ac:d8:1e:7d:e1:5e:85:53:51:68:
88:1a:97:d7:b8:4a:26:10:7b:ee:ee:e1:94:1a:6a:b8:90:96:
78:4b:ab:42:b7:10:bf:06:a0:8b:b9:8c:08:04:82:3c:dc:d4:
97:30:73:36:ef:35:f0:48:18:ed:51:b6:48:22:5b:53:84:8b:
8d:e9:98:4c:db:8d:59:56:8b:0e:7a:da:d6:d1:d1:b8:c0:96:
e9:ca:80:91:87:3e:09:1a:33:2c:42:9e:2c:58:ba:68:d1:22:
6d:4b:5b:19:31:b2:ac:dd:92:7f:4b:25:32:7f:53:a2:ad:d3:
a0:0f:77:9f:90:dc:8e:a0:1e:b9:13:13:57:2e:b8:95:ca:dc:
6f:66:88:b9:0c:9f:fc:04:3f:2e:25:65:4f:e2:19:b8:2a:e6:
4d:ec:42:6d:a2:4b:81:ea:0f:2e:21:d1:a4:5f:e2:44:d0:77:
2a:50:d7:00:77:75:99:98:c1:0b:85:47:d9:c6:d2:ad:30:af:
e7:c2:94:c7:50:79:93:b9:f1:88:35:46:c7:3d:7e:1c:90:f4:
4d:5d:7a:c7:e4:a9:85:f4:a4:03:59:da:a7:18:bf:0f:45:38:
b1:7c:62:55:2a:e1:b9:41:09:ef:fe:87:3a:e1:78:57:10:b6:
aa:73:d6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:48 2025 by rpki-client