Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/luo-Usg272nRANxxQ4MukiDbAas.roa
File: luo-Usg272nRANxxQ4MukiDbAas.roa (raw, json)
Hash identifier: rvP6+ZSg27+9Jz1UqibLNXI27roFnE2q/mk8AnOS9Kc=
Subject key identifier: 96:EA:3E:52:C8:36:EF:69:D1:00:DC:71:43:83:2E:92:20:DB:01:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188BCD126AB652DA97B1FA0BF85276E4B5D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/luo-Usg272nRANxxQ4MukiDbAas.roa
Signing time: Thu 15 Jun 2023 02:10:03 +0000
ROA not before: Thu 15 Jun 2023 02:10:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bc:d1:26:ab:65:2d:a9:7b:1f:a0:bf:85:27:6e:4b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 02:10:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96ea3e52c836ef69d100dc7143832e9220db01ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6f:0b:d9:3b:11:48:bf:2f:d5:9c:86:75:e7:
ae:cf:29:8f:88:85:5c:1c:4a:ee:81:d8:26:97:60:
5f:08:c5:85:f3:cc:e2:b4:23:2d:56:dc:7f:24:6f:
92:8e:92:24:ba:46:02:cf:f3:b4:f7:9b:39:cb:71:
ee:6d:27:c3:c3:a9:0c:39:bc:a8:0a:c2:38:b2:96:
7e:c7:41:c8:3f:87:d9:b1:57:a4:8d:b1:9e:be:93:
be:8a:19:1e:44:cc:fe:20:d8:bb:3b:68:44:1b:8f:
b9:e6:fc:aa:e1:af:f8:fd:dc:81:f9:84:45:c1:d5:
35:21:43:af:29:69:31:9e:8d:a7:83:41:2a:a2:8f:
70:ed:ac:43:01:9b:9e:f7:a5:d0:c3:e4:26:f8:b6:
a9:65:64:2a:e9:0a:98:81:51:b0:a2:1d:ee:c7:64:
f3:67:64:10:03:ef:b5:14:30:86:7f:24:7c:dd:4c:
8d:f5:c4:4e:90:08:74:5e:f4:85:ce:e5:ef:ad:04:
c2:4c:36:d0:30:ac:8a:af:63:77:c9:9b:34:b6:02:
df:38:0f:50:93:d3:71:74:d3:d1:6c:31:1d:a1:8e:
0a:41:a7:86:2e:a6:c2:86:19:ed:44:f9:3b:f3:04:
1f:e5:48:d9:04:c1:33:6f:de:2d:4d:da:1d:07:3d:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EA:3E:52:C8:36:EF:69:D1:00:DC:71:43:83:2E:92:20:DB:01:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/luo-Usg272nRANxxQ4MukiDbAas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:1d:54:35:fd:bb:34:3c:03:8e:60:ae:6e:e5:e2:7d:6f:16:
37:98:84:bf:9c:2b:1f:f0:25:57:d2:cd:2c:bc:cf:79:05:3b:
98:9b:5e:11:0f:20:e2:0d:41:f5:73:00:90:6b:9b:a8:43:11:
7f:bc:0c:e2:d5:37:25:1f:80:f6:f1:06:b0:cd:9c:36:5e:63:
ef:ae:5e:9d:05:86:78:02:c6:4c:95:e9:80:b6:64:b8:df:39:
6d:0a:89:80:20:0a:25:b9:a7:45:2d:f3:67:23:f9:94:45:5e:
20:6d:c8:af:1e:3f:dd:33:95:de:f8:8b:4a:ab:85:c3:4b:91:
bf:ad:94:3b:09:90:47:17:8b:50:0f:21:34:58:16:d2:cd:d5:
28:24:7c:c3:f2:a4:ed:12:49:be:fb:d5:64:51:d9:f4:47:70:
11:f3:62:96:70:bc:26:1f:c2:fc:63:ec:f9:ce:da:57:34:e3:
32:95:b2:7a:fe:e5:53:d0:d9:95:c1:68:3f:23:90:9c:e7:46:
9f:f1:51:9e:32:3a:ba:ad:7b:21:d3:83:c0:16:40:a2:f7:0c:
59:71:ed:06:93:07:83:06:f2:57:f4:dc:ca:27:09:7b:58:3d:
ad:35:f7:23:04:55:69:bb:ef:33:82:29:eb:6e:5b:15:e6:1c:
c7:8c:f4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:30:20 2025 by rpki-client