Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/__LmILLpHacsFIQh4JLtK6tjXfc.roa
File: __LmILLpHacsFIQh4JLtK6tjXfc.roa (raw, json)
Hash identifier: kjobvJxfNSo7yCM8IP+Fn7uKautht5XGEupEhejhkTg=
Subject key identifier: FF:F2:E6:20:B2:E9:1D:A7:2C:14:84:21:E0:92:ED:2B:AB:63:5D:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182CDD7EAAD184C5749B1AA8A0A54AEAC03
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/__LmILLpHacsFIQh4JLtK6tjXfc.roa
Signing time: Wed 24 Aug 2022 03:14:15 +0000
ROA not before: Wed 24 Aug 2022 03:14:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cd:d7:ea:ad:18:4c:57:49:b1:aa:8a:0a:54:ae:ac:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 03:14:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fff2e620b2e91da72c148421e092ed2bab635df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:9e:c9:79:e6:00:f0:69:bf:1e:b3:b6:ce:
39:23:32:93:7c:41:5c:58:1f:ca:04:e8:69:ef:5e:
ef:0d:a2:8d:db:b5:56:e5:3e:8c:cc:d2:8e:40:ef:
28:99:e8:d0:ef:bb:10:e9:71:e2:f1:ef:1c:e2:bf:
8c:a8:d3:a3:34:af:a6:8d:60:16:f5:b9:24:9d:0d:
20:96:19:a9:a7:83:b0:4a:a9:3b:cf:55:1f:36:a5:
29:de:6f:75:57:1e:2a:4f:e7:7b:d4:5a:a3:0a:e3:
19:20:7a:01:a2:c8:56:2e:53:ef:12:9b:39:96:24:
de:87:69:3a:fa:2d:98:7f:46:22:15:8f:8c:30:d2:
4a:c2:85:ae:ad:2c:d5:b9:57:52:12:e7:8a:7d:41:
23:a1:e0:5d:48:35:af:40:98:4a:6f:64:10:55:4b:
42:e3:f5:9f:de:f4:d6:b7:10:66:fe:a0:c6:c2:05:
aa:67:39:50:f0:2c:a8:50:65:29:75:ac:0b:99:6c:
4e:44:5f:ff:8b:7b:1e:14:f6:b2:20:46:61:8c:3a:
40:5a:bc:4b:18:9a:7c:ab:25:04:7d:4b:48:fd:7a:
c0:75:28:8f:19:63:f3:26:3c:ef:55:b2:c7:97:55:
db:2d:5a:98:97:23:89:f3:8e:2a:6e:ab:e1:f5:32:
e3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F2:E6:20:B2:E9:1D:A7:2C:14:84:21:E0:92:ED:2B:AB:63:5D:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/__LmILLpHacsFIQh4JLtK6tjXfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:3f:61:ec:2a:cc:0d:0b:01:b2:84:77:9a:f0:08:8b:49:43:
e4:92:2c:6e:28:eb:64:17:e1:b9:ae:60:6b:8e:d2:03:7b:72:
3e:c9:55:76:da:62:2c:a9:6d:c9:4a:7a:91:1b:41:3c:5d:39:
a0:b8:12:ca:57:cf:09:73:6a:ef:26:a2:b6:3e:2d:9b:35:c5:
ed:5f:5e:c5:fe:55:5f:64:fb:4f:17:41:c5:91:57:10:0f:4d:
25:eb:dc:4f:30:6b:9c:50:92:a0:82:d5:c1:96:77:3c:1f:4e:
16:7c:80:71:e3:89:8f:3d:ef:29:96:49:19:60:ad:d1:7e:d2:
dd:4f:54:70:9c:c9:ee:f3:d3:fc:44:a2:77:e1:a9:24:81:f2:
04:2f:5f:23:eb:64:ca:a3:7e:b2:07:2d:3d:ab:8a:9d:77:6b:
c0:c4:41:e9:92:0e:2c:55:df:e0:a7:60:66:e3:a5:32:03:42:
e1:bd:24:d0:41:c4:48:a3:fe:22:78:3c:ec:bf:e3:31:37:0f:
2f:87:86:78:4d:3d:a7:24:ac:ab:4c:bd:d3:7a:46:bb:6e:5a:
04:08:ba:09:ea:8b:6d:f1:ee:6b:b8:07:7c:6b:2d:51:7e:2d:
22:75:7c:8f:d3:a5:f7:38:f6:35:80:19:68:6f:16:99:03:85:
18:e1:73:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:29:49 2025 by rpki-client