Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LYUZF4hBDVkGJsfqS-hjAwNYGvk.roa
File: LYUZF4hBDVkGJsfqS-hjAwNYGvk.roa (raw, json)
Hash identifier: C+2ZQH3kjTc+M5Nc6fqQP+KHzqN9/0NseysmLuuc1Qc=
Subject key identifier: 2D:85:19:17:88:41:0D:59:06:26:C7:EA:4B:E8:63:03:03:58:1A:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8B86B95D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LYUZF4hBDVkGJsfqS-hjAwNYGvk.roa
Signing time: Fri 10 Jun 2022 10:14:02 +0000
ROA not before: Fri 10 Jun 2022 10:14:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2340862301 (0x8b86b95d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 10:14:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d85191788410d590626c7ea4be8630303581af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:45:a6:f7:d6:8a:13:5f:c7:e9:78:89:12:
27:90:17:d9:b1:8d:ed:a7:87:1c:54:04:a7:90:bf:
38:97:2e:85:fa:ac:95:82:d0:6a:97:82:25:a8:3a:
bd:b1:62:88:bf:01:d4:fa:4f:bc:8e:3a:ae:a8:42:
bf:b8:55:a7:81:9a:8c:56:e1:60:b1:0d:d9:3a:60:
f6:72:1e:47:bb:ca:3e:08:d3:65:56:59:1d:cd:e7:
b0:08:8d:05:ad:53:c7:62:e5:47:a9:20:b8:70:11:
d2:a4:74:36:34:da:4c:a5:60:04:70:70:52:85:5d:
7e:fe:87:55:49:c0:31:fa:9d:c4:60:44:0b:34:23:
e3:f4:dd:c3:86:12:6b:fc:ff:4e:42:ad:9a:37:e9:
00:5e:e8:42:20:34:8a:de:da:68:4f:a3:6d:00:ff:
e1:67:03:32:3c:41:78:e2:05:0f:d6:73:66:c6:cc:
2a:3b:68:cb:cb:2f:58:3b:16:ff:ec:b6:79:41:09:
9f:2d:cd:d9:c9:99:b9:2e:19:9f:75:d4:75:82:13:
bb:87:09:30:2c:cc:62:3a:02:49:18:c1:4f:ed:85:
e3:a8:60:02:74:27:92:81:cd:18:0c:0e:2d:68:9b:
4a:bc:0a:e7:d7:23:36:d4:1a:21:ac:db:e2:00:ec:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:85:19:17:88:41:0D:59:06:26:C7:EA:4B:E8:63:03:03:58:1A:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LYUZF4hBDVkGJsfqS-hjAwNYGvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:cc:11:8b:f7:ec:a1:68:04:47:f8:69:7d:17:8c:25:bb:65:
c0:a9:a1:b6:ee:0e:6d:91:ed:12:1a:f8:1f:c3:67:5f:42:92:
37:19:35:40:9c:b2:10:df:59:e2:11:cc:10:00:aa:f9:af:3b:
b8:53:20:00:a6:2a:9b:64:5d:af:eb:7e:1f:5a:0e:25:ca:b4:
53:fd:18:f0:30:31:97:7f:0b:49:92:69:c7:13:b5:e8:8b:f9:
0e:6a:a8:43:26:70:b2:f3:a2:77:2e:ee:2e:d7:a3:54:1b:b3:
0d:c2:a0:12:1c:c3:0e:41:90:46:9f:83:6b:9a:7c:08:fd:62:
e9:33:0b:0e:78:21:e2:f5:c8:41:4b:18:e2:1f:93:5b:23:b3:
10:84:bc:bb:70:89:ca:d2:66:91:0e:d3:7f:1b:50:ce:39:e6:
22:7c:7f:c6:f7:16:ac:25:db:f8:45:4d:09:e2:c1:e0:4b:77:
1e:77:f2:a9:fb:c2:ab:79:34:2f:56:d4:95:bd:1f:c5:37:07:
9c:a2:d4:06:47:f5:22:35:f8:c9:a6:1e:07:f1:9e:59:f7:15:
f3:65:fe:9d:b3:99:67:f8:c8:2b:a4:6e:20:95:d5:c2:06:fa:
2a:b6:da:5b:77:01:59:a5:c6:41:3d:c6:c1:26:39:66:4a:c9:
7a:6a:b5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 07:09:50 2025 by rpki-client