Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_LUwcTjOVtb01pjeRtEaXGYCeBQ.roa
File: _LUwcTjOVtb01pjeRtEaXGYCeBQ.roa (raw, json)
Hash identifier: 7r+HnRBubRvKeXDY33qce96ws5o4qKoUKrQhU3L6+mU=
Subject key identifier: FC:B5:30:71:38:CE:56:D6:F4:D6:98:DE:46:D1:1A:5C:66:02:78:14
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018677F653E48C648CA24C774517B844CE55
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_LUwcTjOVtb01pjeRtEaXGYCeBQ.roa
Signing time: Wed 22 Feb 2023 07:11:17 +0000
ROA not before: Wed 22 Feb 2023 07:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:77:f6:53:e4:8c:64:8c:a2:4c:77:45:17:b8:44:ce:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 07:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcb5307138ce56d6f4d698de46d11a5c66027814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:aa:b3:21:3b:03:94:51:05:68:80:d3:c6:
b0:6c:6e:b4:cb:6a:32:86:17:cb:f4:fd:5e:67:f9:
a5:2b:32:09:e2:af:5d:93:7f:aa:39:d0:64:26:4f:
e5:6d:79:94:3c:56:c8:c7:14:71:f9:6f:e7:64:9f:
e8:57:23:b5:78:5b:c8:c7:ba:1e:a2:93:e4:67:e9:
ad:28:37:97:0e:3c:5f:ac:45:93:58:30:6a:20:e6:
6e:bb:8c:bf:1b:53:ac:65:83:f2:69:51:13:34:97:
31:41:b6:87:26:ea:fa:e5:ac:b3:f6:c1:f4:fc:6f:
a9:03:c2:23:a2:2f:4b:a5:a4:50:a1:36:93:4b:90:
ab:57:3c:61:8c:9c:be:88:1b:97:03:c2:62:ad:05:
ef:88:52:8d:1e:b0:3d:06:86:ad:37:11:36:41:f8:
8a:c2:4b:9f:0b:fd:5f:90:cb:18:4a:de:12:33:5f:
11:10:15:8f:6c:a3:c9:9c:ba:0a:e8:4b:d6:28:19:
de:68:90:e2:55:be:c5:8d:2d:00:f4:37:74:77:60:
8f:ec:f0:9e:dc:03:21:9f:aa:12:c5:c3:8a:50:62:
47:f5:7c:ef:53:b2:fe:82:f8:59:39:71:20:9e:f4:
a1:81:01:b8:af:5f:83:12:e7:b9:f0:6d:5a:43:7e:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B5:30:71:38:CE:56:D6:F4:D6:98:DE:46:D1:1A:5C:66:02:78:14
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_LUwcTjOVtb01pjeRtEaXGYCeBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:77:a9:3d:d6:0e:f4:63:9a:12:fe:6b:9d:96:27:f5:f0:fe:
cc:b4:c7:31:5b:f4:77:e0:f4:0f:5f:ee:a2:8b:96:99:ad:de:
18:ce:7e:33:7e:f6:34:38:64:c3:cc:90:b3:df:52:89:17:6a:
4c:29:25:2a:06:b9:b2:90:1f:07:dd:fd:6a:2d:e1:57:04:c5:
c2:4f:b7:74:ae:1d:c4:34:5d:b3:d2:8c:43:4f:3e:66:ab:a8:
f4:70:bb:b6:49:26:25:b4:d1:e3:cd:54:6a:58:29:b0:91:1e:
8c:84:78:a5:b2:5c:df:b0:c4:21:e5:17:1d:05:66:60:45:9b:
34:81:7e:01:83:80:f1:b9:5e:e5:90:82:01:46:cf:fb:fd:e6:
19:d1:97:d1:20:0b:6a:1a:63:6c:ed:d0:09:b1:d2:50:86:7a:
95:e1:26:e5:ef:c3:e3:a0:04:06:a8:2d:b4:5e:95:2f:ce:7d:
70:ec:a1:0c:b9:d0:4f:be:5d:ff:11:a6:e4:9e:5b:b9:20:ab:
b8:ee:40:05:69:f4:89:ed:bc:6d:6a:26:54:29:fa:2d:f1:2e:
01:dc:6c:e1:0e:7b:6f:a6:00:1f:38:cf:70:1f:8c:0b:49:d1:
31:28:c8:bd:c2:55:e1:48:1b:39:23:67:cf:41:45:93:bc:fc:
78:8a:7e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:20 2025 by rpki-client