Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LKePpCJ57V-rjAhq1CmZ_MPtAsM.roa
File: LKePpCJ57V-rjAhq1CmZ_MPtAsM.roa (raw, json)
Hash identifier: ZBfpaRaUHKKezUwgVN6z/7tvKHplkwuxfckCpvnF3KA=
Subject key identifier: 2C:A7:8F:A4:22:79:ED:5F:AB:8C:08:6A:D4:29:99:FC:C3:ED:02:C3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897BC6173080CE2102487D333A8ED74E12
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LKePpCJ57V-rjAhq1CmZ_MPtAsM.roa
Signing time: Sat 22 Jul 2023 04:05:26 +0000
ROA not before: Sat 22 Jul 2023 04:05:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:189:7bc5:6815/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7b:c6:17:30:80:ce:21:02:48:7d:33:3a:8e:d7:4e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 04:05:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ca78fa42279ed5fab8c086ad42999fcc3ed02c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d2:63:c2:24:dc:a9:ff:d3:59:c2:1c:53:de:
dc:09:b9:f5:64:de:87:78:45:e1:bb:b0:1c:d2:ea:
09:f9:ec:e9:6f:ab:65:ab:08:4e:c6:12:d9:53:bf:
d8:01:7a:e9:c4:d4:ca:ed:66:c8:10:cc:f7:a9:26:
40:dd:56:31:7a:ae:f6:e7:37:46:fc:2d:b4:09:0c:
86:5f:a0:1e:70:50:0a:ee:8c:c2:f7:40:5f:83:37:
25:0b:cb:19:4c:0a:b7:0f:6a:fe:66:bd:cc:40:33:
ed:f9:2f:5f:44:8f:06:7d:f4:66:a8:5e:2b:f8:9a:
93:34:07:cd:4d:f6:ac:6e:2f:d2:e5:83:9d:b6:8e:
9d:52:4d:7b:7e:8d:bb:44:36:97:0e:48:50:07:e8:
d4:2b:3e:6a:69:0a:f1:78:43:b5:d9:f0:a0:a7:22:
16:3e:6f:f7:c7:87:ed:4d:3f:a4:2e:c7:24:42:b1:
c3:44:d4:9c:45:89:9f:35:be:6e:2d:af:b0:3c:dc:
da:f0:a8:58:a8:60:ff:61:16:d3:dd:0e:05:01:30:
2d:22:0c:c5:e3:39:21:cf:f4:5d:ad:a3:15:6a:8b:
bd:34:32:c4:a9:7f:8c:d0:3e:32:56:be:ce:fc:22:
6e:aa:da:a6:d0:6e:f9:d0:a5:46:9c:89:16:70:65:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A7:8F:A4:22:79:ED:5F:AB:8C:08:6A:D4:29:99:FC:C3:ED:02:C3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LKePpCJ57V-rjAhq1CmZ_MPtAsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:83:aa:19:58:a6:8b:e6:63:20:5f:18:54:6e:5b:83:dc:4b:
af:ef:f4:bb:d9:f2:34:42:83:45:80:79:ae:e7:49:14:71:c7:
9d:6f:23:87:6c:94:3d:e8:0a:66:c0:aa:e7:c0:79:8a:35:fd:
73:18:44:04:41:b3:1e:62:2a:4c:46:1a:b3:ae:b2:72:96:82:
6d:6d:07:0f:b8:21:a1:46:60:a2:ac:ce:f1:6c:03:60:6b:83:
63:c4:f0:5c:df:26:4b:c6:03:c6:18:73:d9:19:fc:5a:83:e2:
64:b8:c6:fa:bd:41:61:cf:56:b9:d7:78:55:96:f5:1d:a3:e5:
ee:69:7e:f2:3f:5d:e1:fb:8f:72:ef:75:cb:8e:5c:39:94:73:
08:27:8f:3a:c9:39:4b:db:56:e7:66:6e:96:c4:59:59:d3:57:
13:ba:bc:b4:a5:ae:75:d2:09:a1:4c:0d:4e:6f:20:2a:02:1c:
51:c0:1d:b8:0a:17:b9:14:f0:39:7c:50:6e:6e:4d:84:25:43:
26:94:bd:98:cd:09:7e:89:37:fb:a4:33:11:1f:c6:65:e2:5d:
4e:84:e3:c1:18:61:e4:85:b7:ce:37:af:dc:b5:7e:5c:25:6e:
61:2e:b8:25:64:4b:db:5e:73:b4:20:99:cf:4b:a8:60:05:a5:
8d:2d:f4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:18:40 2025 by rpki-client