Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LufTmj23_NwriUTv4Il9IAOvNfQ.roa
File: LufTmj23_NwriUTv4Il9IAOvNfQ.roa (raw, json)
Hash identifier: 9YMmV0EMNB8K2E0kQJzCyla+AqvYJMp4yI5FfYOGOxE=
Subject key identifier: 2E:E7:D3:9A:3D:B7:FC:DC:2B:89:44:EF:E0:89:7D:20:03:AF:35:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01879E27CEBBDF600BBF1970B0322BCB08EB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LufTmj23_NwriUTv4Il9IAOvNfQ.roa
Signing time: Thu 20 Apr 2023 10:13:41 +0000
ROA not before: Thu 20 Apr 2023 10:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:27:ce:bb:df:60:0b:bf:19:70:b0:32:2b:cb:08:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 20 10:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ee7d39a3db7fcdc2b8944efe0897d2003af35f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8a:20:3f:fb:93:ae:ca:72:21:ae:db:13:05:
80:11:49:2c:71:5c:e0:a9:64:65:d9:e2:20:e0:96:
46:98:69:d6:3e:23:f3:87:d8:d2:d7:c4:6c:c9:07:
ca:7c:82:50:15:1b:48:3d:17:e1:0d:44:53:b5:25:
b1:bd:60:89:09:d5:f9:b7:36:f5:23:4b:59:31:cf:
e3:fe:92:e5:29:9f:1b:fa:0d:b0:e9:5f:97:d0:11:
18:d2:a6:d7:d1:66:b0:69:38:69:25:0c:e1:53:9a:
ca:b1:37:60:05:66:0f:58:f2:40:ac:58:c3:01:32:
f5:56:3d:bc:6c:a2:6c:87:cb:37:dc:f4:a4:19:32:
c2:88:77:57:22:e1:18:17:79:b1:96:3d:12:42:40:
c7:34:44:68:d7:37:c1:18:50:70:2c:2b:fa:d6:40:
f7:73:46:70:7d:c9:d6:71:54:88:5f:6d:06:9a:09:
03:99:89:20:ab:30:28:c9:dc:b7:d4:59:21:22:18:
58:07:8d:1c:0b:97:b5:e2:13:38:e3:24:a2:e1:f7:
05:ce:72:31:b7:bb:59:9b:3b:5b:0b:e8:77:e1:d5:
51:5a:c1:10:fa:b7:86:1a:76:af:08:84:23:63:8f:
0d:5b:8f:a7:b3:a1:eb:a7:27:7d:29:79:18:ab:47:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E7:D3:9A:3D:B7:FC:DC:2B:89:44:EF:E0:89:7D:20:03:AF:35:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LufTmj23_NwriUTv4Il9IAOvNfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:fa:39:33:8d:44:d0:90:50:43:84:ae:f0:73:9b:ad:28:9d:
7f:26:88:6b:4b:1e:f4:d1:5c:c4:9b:70:b5:23:ca:21:af:ba:
4d:26:00:9a:34:68:db:1a:8b:21:77:de:4d:00:da:1d:d8:77:
ef:3f:3c:32:5b:4d:93:4b:d7:97:bb:37:a4:18:09:ab:e1:ac:
1d:6b:d5:51:31:c8:24:d9:af:78:14:3f:a2:59:92:48:bf:a3:
93:1e:d4:7f:25:f9:a5:d5:f5:be:a8:b2:c7:68:51:54:b4:28:
fb:4f:f3:fe:f8:3b:b1:b7:eb:79:e7:43:dc:a8:78:6d:f7:b1:
74:fe:fb:0c:c0:61:d7:99:3e:11:c8:04:11:1a:97:cd:e0:3e:
2e:5e:f7:26:6c:26:59:a7:d9:e6:8c:59:70:90:18:8c:7b:49:
a2:75:c3:14:82:fe:dd:55:b6:aa:61:75:42:2c:9c:b2:08:63:
69:26:24:f5:10:31:2d:8d:3e:32:d0:ac:88:37:b3:a0:67:b9:
d4:87:03:ff:c7:ed:1f:a0:16:d3:73:d0:fd:b4:92:be:cd:d9:
94:35:e2:fd:a7:5a:dc:b4:a0:14:a7:0f:9a:6c:ce:c9:61:1e:
93:c7:70:da:22:d6:1a:6e:63:92:00:4c:b8:6a:2b:6a:bf:fa:
5d:1f:46:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:13 2025 by rpki-client