Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lr-O4C3tcXqlA8Xvpm463jcTAaU.roa
File: lr-O4C3tcXqlA8Xvpm463jcTAaU.roa (raw, json)
Hash identifier: aSZlV0Ec4bkVivlTft2NftY54BAGnOK5S7yklHPnzHk=
Subject key identifier: 96:BF:8E:E0:2D:ED:71:7A:A5:03:C5:EF:A6:6E:3A:DE:37:13:01:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018553E65334B4FE173C4C85546D346BAD2D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lr-O4C3tcXqlA8Xvpm463jcTAaU.roa
Signing time: Tue 27 Dec 2022 14:04:41 +0000
ROA not before: Tue 27 Dec 2022 14:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:53e5:e378/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:53:e6:53:34:b4:fe:17:3c:4c:85:54:6d:34:6b:ad:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 14:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96bf8ee02ded717aa503c5efa66e3ade371301a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:7e:30:8f:18:9e:7f:15:ed:10:08:93:f5:ad:
92:5c:63:62:56:78:b7:e0:bf:28:05:74:8e:1f:79:
78:60:02:16:b6:d3:3a:fb:97:e5:8b:29:7c:1c:5e:
94:a9:63:67:a8:90:0f:9b:aa:4a:c6:f3:6e:ad:29:
f0:fc:d5:b6:50:86:0a:9c:17:c0:c2:e9:e1:d4:e6:
60:92:b7:72:7a:af:3f:fb:c3:16:23:35:33:43:57:
c7:74:3a:43:9e:5a:ce:8b:05:da:05:cd:50:85:4a:
35:85:2a:62:e8:a1:84:33:40:a0:c0:d2:28:4b:9c:
fa:79:92:65:12:a5:28:34:32:23:de:64:1d:68:4d:
9e:e2:82:92:9f:d1:f9:ff:4a:e8:44:12:53:23:dd:
18:04:68:5f:69:ee:e0:f2:80:6c:d4:f6:31:e9:1c:
c5:4c:01:ef:15:34:b0:d0:83:23:63:d3:5a:eb:c6:
f4:b2:f0:4b:eb:b2:9a:30:10:b4:30:e6:fe:2e:ed:
f1:2b:e9:7e:56:84:50:d3:4a:59:d4:10:a3:be:b8:
2a:db:53:51:ee:8f:b3:25:83:eb:28:6d:1d:21:14:
d3:1e:79:41:22:10:1c:e3:a9:3b:c8:d7:dc:b0:e0:
3c:b4:b4:86:d4:7b:46:ce:e5:9a:c2:54:9b:11:f1:
f8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BF:8E:E0:2D:ED:71:7A:A5:03:C5:EF:A6:6E:3A:DE:37:13:01:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lr-O4C3tcXqlA8Xvpm463jcTAaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:d7:e9:4c:93:e2:5c:11:92:73:0a:fc:36:dc:fe:80:f0:36:
53:2c:3f:f6:a4:cc:61:39:61:ce:29:4a:71:cb:9a:22:ca:8c:
5b:b1:b1:c7:23:d5:4f:98:f9:e0:d5:7e:a4:91:11:bc:5a:66:
a8:6c:22:37:c1:4e:79:cd:5c:8e:b4:c5:e9:e9:2f:59:0a:1f:
56:03:2a:25:1f:f1:56:e6:5e:e4:96:d6:f9:7a:56:ca:60:d3:
fa:55:78:95:a4:50:62:be:62:ef:f4:92:ad:13:a5:05:75:32:
8a:bc:98:1e:8f:f7:67:32:e9:03:be:76:f3:3c:87:72:65:35:
29:8d:0b:3e:a7:58:a1:e0:81:6a:28:61:5d:58:31:cd:80:57:
16:91:59:42:6d:71:d8:21:7a:54:b4:fe:c5:1c:67:ac:b6:6a:
70:a4:c6:dc:c0:5e:ab:70:d2:24:7e:2d:70:fb:e2:da:3a:b5:
e0:5c:c9:f7:82:81:2e:ba:35:61:b5:cd:be:e7:67:03:00:34:
57:4d:0e:74:74:ae:c9:81:bb:38:40:a0:f3:3f:cf:51:9d:0d:
a1:d0:89:3e:c1:3b:ff:d3:b7:61:f0:26:52:dc:f5:62:c8:35:
1f:97:b0:28:4d:6e:5a:71:e5:6f:0b:65:ef:0b:c6:68:5e:f2:
36:57:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:51 2025 by rpki-client