Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LCbUpgWNSAZqCMvIUAwgmpP048U.roa
File: LCbUpgWNSAZqCMvIUAwgmpP048U.roa (raw, json)
Hash identifier: UHqEB+L9w0fcDkup6ZZIn2oZNGIJsShBRz61lGlkId0=
Subject key identifier: 2C:26:D4:A6:05:8D:48:06:6A:08:CB:C8:50:0C:20:9A:93:F4:E3:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183A8EDB300B6BF86A2188B04A2CB5A8A7C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LCbUpgWNSAZqCMvIUAwgmpP048U.roa
Signing time: Wed 05 Oct 2022 16:14:53 +0000
ROA not before: Wed 05 Oct 2022 16:14:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:ed:b3:00:b6:bf:86:a2:18:8b:04:a2:cb:5a:8a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 5 16:14:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c26d4a6058d48066a08cbc8500c209a93f4e3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3f:8d:a7:be:f0:a2:4b:f5:50:90:d0:6b:81:
36:18:08:e8:99:a4:19:06:49:ef:18:bf:4e:a8:3f:
fb:47:d2:79:f1:7b:49:6a:f0:7f:a2:ed:9a:f3:b5:
dd:74:e6:00:b6:cc:b5:30:f6:80:1c:cb:59:9e:62:
55:0a:0e:e1:2e:4f:69:d9:82:3e:5e:c6:5f:ff:18:
f6:bf:95:28:d9:5f:9a:e0:b0:aa:9b:e4:62:a2:f5:
e8:0b:d1:76:dd:76:0d:d0:f4:25:52:1b:9c:80:e2:
f0:a8:d2:38:40:86:e9:17:c9:c7:f0:aa:9e:2d:5e:
4f:00:08:e4:56:a4:e2:60:20:e9:57:c0:27:c8:23:
44:c1:ed:45:8b:d9:08:05:37:7c:4d:35:33:c7:8d:
4b:fb:36:a9:4b:62:ce:4b:af:c9:ca:ff:b8:d3:13:
b5:f3:8b:8d:8d:90:48:ec:23:be:67:7e:c9:43:90:
01:fc:60:32:4a:8d:9d:2c:fb:19:86:22:75:68:d4:
bf:75:56:61:21:25:d1:8a:26:ae:fa:ab:c0:fb:c3:
cd:c3:c4:3e:5e:ae:b1:3d:f6:2d:ad:9c:6c:c2:17:
b2:8f:4c:00:7b:4e:cd:86:51:b0:bc:9c:09:30:2c:
65:93:5c:7d:5c:c2:4f:25:1a:de:7b:9d:75:26:34:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:26:D4:A6:05:8D:48:06:6A:08:CB:C8:50:0C:20:9A:93:F4:E3:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LCbUpgWNSAZqCMvIUAwgmpP048U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:be:d3:9f:30:0e:48:5a:b5:c9:00:40:71:b8:10:90:6d:75:
21:36:28:4e:7a:10:b5:53:35:c0:cc:b7:a0:c1:de:99:c3:15:
cf:c7:a0:14:8f:f6:0b:cf:52:b0:33:db:23:43:5a:85:13:3c:
bf:9b:f3:58:cf:2b:5c:52:3c:63:e5:f2:6b:80:23:69:c1:e6:
8e:a5:05:b7:56:8c:df:c6:27:bf:07:52:f5:4b:ba:40:69:58:
30:bf:ac:fa:d1:3f:a7:a8:f9:75:d4:20:89:ba:2a:92:d8:f9:
57:df:36:93:03:f3:de:4e:77:68:7e:02:3a:4b:bd:ae:6e:89:
f5:f3:e0:75:21:cd:75:84:94:20:41:51:80:b5:8c:f9:d7:65:
aa:72:b2:73:89:08:df:6f:40:62:8e:d7:65:7a:b2:9b:85:b2:
2e:ab:b3:68:3c:73:78:1a:dd:83:5b:e7:ab:1c:0b:18:c5:03:
bd:56:87:47:7a:f3:9a:30:ae:6d:c3:94:16:4e:3c:17:f6:63:
9a:77:4c:76:97:99:fd:c0:1b:c5:9e:0f:b5:66:96:6a:80:c8:
55:eb:d3:55:a4:a1:fe:23:e4:9f:f4:d4:85:0f:98:1e:f3:b5:
f4:7d:88:d8:d8:20:15:a2:0e:8d:ea:2d:7a:a0:f9:3f:d5:46:
90:df:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:10:22 2025 by rpki-client