Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lvcrShBsPv8uxVomnNxu0Tr3q_c.roa
File: lvcrShBsPv8uxVomnNxu0Tr3q_c.roa (raw, json)
Hash identifier: ZltjEpgUuxfexDAFDJcJPscNQVyRneNFW6xKVFhDUJE=
Subject key identifier: 96:F7:2B:4A:10:6C:3E:FF:2E:C5:5A:26:9C:DC:6E:D1:3A:F7:AB:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185B7E443F386116552AA3CDBF4A478DCCC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lvcrShBsPv8uxVomnNxu0Tr3q_c.roa
Signing time: Mon 16 Jan 2023 00:04:28 +0000
ROA not before: Mon 16 Jan 2023 00:04:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:b7e4:13a9/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b7:e4:43:f3:86:11:65:52:aa:3c:db:f4:a4:78:dc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 16 00:04:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96f72b4a106c3eff2ec55a269cdc6ed13af7abf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f0:31:ac:35:01:51:7b:84:72:37:2c:19:b3:
51:1f:fe:89:1d:f4:34:11:6f:b4:21:aa:bc:2a:e1:
8a:7e:8d:57:cc:68:2a:a6:72:16:be:93:a0:ca:1e:
1b:cb:54:66:e7:83:04:07:2d:43:d1:f8:38:44:87:
90:b3:15:2f:5c:93:e6:da:ff:64:88:76:33:41:3a:
a2:de:86:b9:90:bd:56:27:99:7f:43:46:dd:19:a1:
05:a8:35:cb:34:73:99:0b:c6:db:a8:13:f2:34:cc:
f0:6a:0a:c7:98:57:b1:ed:79:6e:c7:86:6c:d5:27:
20:bc:4b:27:60:ca:e8:6a:68:f3:55:df:8c:2f:bb:
d1:f1:76:f1:9d:39:44:a5:f2:23:c9:0d:7a:db:be:
b1:b5:9d:f6:d4:aa:c3:73:86:d0:aa:2d:56:83:31:
88:72:43:c5:ca:c9:cf:d9:70:2d:75:c0:f1:a7:fd:
7a:32:04:19:4f:e9:aa:b9:a8:9d:47:0a:c1:99:c4:
0b:75:54:c0:52:4b:1b:02:63:60:b8:9a:d4:62:d4:
a0:48:8c:9e:3f:27:e9:b3:31:40:ed:d7:22:f1:bc:
b2:7d:df:a5:49:26:82:42:f2:a4:19:b5:33:39:5b:
de:f8:33:e5:63:f9:2e:d9:2f:4a:55:93:f2:fe:19:
4b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F7:2B:4A:10:6C:3E:FF:2E:C5:5A:26:9C:DC:6E:D1:3A:F7:AB:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lvcrShBsPv8uxVomnNxu0Tr3q_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:ac:80:e6:be:95:5f:f4:9f:16:08:75:60:16:c6:05:93:f7:
61:58:e4:3e:7b:e1:64:bf:6f:4f:dd:73:71:cb:ae:a6:17:cf:
80:96:6f:e4:d5:be:8a:b9:54:d0:2f:72:7a:1d:cd:3e:81:ca:
fe:03:86:84:48:0f:ad:70:e7:6f:e9:2c:d2:d9:f2:a4:08:7b:
97:de:1d:64:08:61:41:99:c9:a3:7f:d9:97:f3:28:f2:d7:eb:
6e:28:35:5e:28:d4:ea:4b:90:2f:45:f2:55:ae:ec:70:5c:10:
35:c3:c3:eb:a7:86:bc:c8:f3:7a:36:28:43:7d:e7:a8:3b:3a:
10:00:66:81:5a:c9:a5:32:99:94:70:d0:41:13:26:68:9a:7d:
fc:5f:57:64:c6:c5:62:f1:f4:80:d9:95:9c:0c:18:07:97:f1:
9e:42:a4:80:7d:60:d2:89:58:e6:84:49:92:ec:62:3e:08:55:
cf:91:55:c5:79:f3:6b:f5:27:7d:32:e9:f2:9c:ae:8a:6b:da:
c8:ff:7b:ed:ce:3f:d5:16:e0:09:bf:53:59:73:7d:82:26:c8:
37:66:72:11:ce:56:df:2d:fa:0f:35:6a:e0:f1:85:14:33:fc:
91:ea:16:61:91:25:76:fa:78:2f:c9:5b:ad:cf:89:90:5f:ce:
1f:67:39:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:06:32 2025 by rpki-client