Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rLVL3Of-LUNs6Lk3yQQZdwdaOPs.roa
File: rLVL3Of-LUNs6Lk3yQQZdwdaOPs.roa (raw, json)
Hash identifier: Kr95/QcqKh6cvoIoNv87lq6q8cUAmssDXlHMkSbjWYI=
Subject key identifier: AC:B5:4B:DC:E7:FE:2D:43:6C:E8:B9:37:C9:04:19:77:07:5A:38:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6788D06F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rLVL3Of-LUNs6Lk3yQQZdwdaOPs.roa
Signing time: Thu 03 Feb 2022 15:04:33 +0000
ROA not before: Thu 03 Feb 2022 15:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:c01d:9eed/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1737019503 (0x6788d06f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 3 15:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acb54bdce7fe2d436ce8b937c9041977075a38fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:f9:c3:21:95:27:d2:88:37:79:72:c6:2a:
54:95:8e:0a:b0:cf:f4:f4:59:51:88:d6:bf:96:7f:
c5:f9:5c:9a:f5:9c:45:13:7d:cd:89:45:57:d2:22:
55:fe:63:54:0a:ae:24:aa:35:07:e6:94:30:86:09:
13:ea:33:78:a3:68:ab:70:5d:5c:68:ca:28:0c:7b:
82:36:b9:5e:f8:71:b0:6e:9b:ba:6d:cc:03:70:69:
9d:bd:9a:ef:90:66:b5:8c:a5:56:24:46:99:b5:b5:
46:fc:63:fc:a9:3b:35:3e:97:3a:11:73:4c:54:3d:
9c:e1:0b:0e:1a:79:20:b1:bb:65:4a:be:e3:29:45:
f6:56:c1:9a:1b:86:7a:f3:5d:e4:20:06:df:6d:7e:
f3:6f:43:e9:46:7b:75:d5:57:26:15:ad:ba:19:7c:
67:71:d2:66:4c:06:9e:22:c1:d5:f6:61:69:96:ea:
e1:41:25:a3:6f:a2:cb:29:fe:3d:5b:2c:77:bb:f3:
d8:28:05:e2:9b:c2:c3:71:c3:24:68:39:23:6c:1b:
87:5c:8b:1e:13:65:82:1a:66:e6:77:8a:0e:c8:e3:
1f:7f:ec:3b:90:43:7f:5b:88:db:09:30:c1:30:6e:
fa:96:74:47:11:e0:67:57:21:8b:7c:37:ad:3e:11:
a4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B5:4B:DC:E7:FE:2D:43:6C:E8:B9:37:C9:04:19:77:07:5A:38:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rLVL3Of-LUNs6Lk3yQQZdwdaOPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:bd:0b:37:2f:25:ce:1d:61:cc:16:8b:a6:29:36:cf:77:72:
69:02:37:37:06:e5:47:c2:a0:ce:a7:ac:68:b0:90:80:0f:58:
1d:ee:9b:2b:9f:37:3d:a3:17:a0:2c:12:03:da:8a:9d:e9:f8:
d1:98:01:16:0c:8a:04:64:73:b8:8a:c8:f6:fa:44:ae:26:80:
08:fa:da:23:e5:b3:ff:8f:c1:c2:d7:21:fa:04:dd:ca:c7:54:
34:d9:69:b4:3f:13:97:52:d3:9a:f9:ab:56:a4:2c:b6:0d:a5:
ce:d2:33:72:f9:39:23:cf:3d:87:d6:a5:91:5a:be:b9:f5:27:
08:df:2a:d7:67:54:24:0e:37:e6:05:45:18:0b:37:02:4a:be:
4e:fa:84:49:9f:b1:1e:17:31:6a:f2:ff:84:ad:3a:90:7b:19:
43:2a:98:00:82:40:ed:53:57:49:1b:7f:2b:f1:0f:c7:15:42:
6a:ba:97:93:46:7f:53:5c:50:b1:3c:37:34:c9:da:c1:29:40:
f7:e2:bf:b3:fd:36:c7:85:ad:8d:cc:9d:c9:83:41:3c:c3:c1:
82:4f:f1:fc:e2:03:1b:18:85:dc:c1:d7:74:61:be:80:fe:95:
33:22:1f:16:44:49:60:71:9d:72:30:43:09:9d:3e:69:e7:36:
26:34:de:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:11:22 2025 by rpki-client