Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LAMjUl3DHW8IB7ixF8or_v7Y1ro.roa
File: LAMjUl3DHW8IB7ixF8or_v7Y1ro.roa (raw, json)
Hash identifier: UrvIxKywcY02Oo1bS4evf82+DNm6rr2IBiJZoFABH9g=
Subject key identifier: 2C:03:23:52:5D:C3:1D:6F:08:07:B8:B1:17:CA:2B:FE:FE:D8:D6:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018200B7F28654F865BD49751280E0848230
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LAMjUl3DHW8IB7ixF8or_v7Y1ro.roa
Signing time: Fri 15 Jul 2022 07:17:11 +0000
ROA not before: Fri 15 Jul 2022 07:17:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:b7:f2:86:54:f8:65:bd:49:75:12:80:e0:84:82:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 07:17:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c0323525dc31d6f0807b8b117ca2bfefed8d6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:80:52:f6:96:e4:4e:b8:25:40:6b:de:c9:36:
df:cb:00:b6:df:bf:8c:c9:b8:5c:1b:34:d9:dc:c4:
d9:01:76:b6:8a:3c:8e:c2:e7:dc:e2:07:2d:4a:0b:
12:1c:28:ac:70:d6:8b:49:56:40:e6:67:1e:ad:0d:
41:56:5e:d7:85:f9:b4:0d:61:aa:77:2e:4c:9c:6d:
84:a0:11:1b:89:d7:45:a4:89:86:86:02:a3:41:90:
32:08:bb:b6:95:cf:94:a4:7a:a0:3c:39:44:08:bd:
5a:50:53:26:25:e9:3b:05:7a:85:75:98:7b:3e:6a:
4b:61:78:c9:b4:51:7b:fc:0d:73:a3:46:46:1c:55:
0e:c5:3e:3a:d5:33:09:22:b5:d5:51:19:8c:53:cc:
50:e5:dd:ac:aa:3c:36:5a:2d:d5:1c:84:58:71:67:
56:ec:6d:93:46:e2:5e:a5:2a:36:e3:8c:86:62:14:
a5:36:70:ee:49:f9:dc:3f:b4:f4:58:b9:d0:45:78:
3d:43:52:09:19:05:f8:00:0e:f6:bd:2f:65:c5:72:
84:26:3c:29:de:e7:16:e3:dd:4b:43:a2:c2:ff:fb:
75:13:1f:74:de:03:ad:23:38:86:db:27:a7:21:49:
fa:95:00:cc:05:eb:80:3f:6f:d6:18:06:b5:8f:5f:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:03:23:52:5D:C3:1D:6F:08:07:B8:B1:17:CA:2B:FE:FE:D8:D6:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LAMjUl3DHW8IB7ixF8or_v7Y1ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:f9:c4:80:75:2d:c1:df:8c:0e:94:a8:7a:90:c9:ec:5e:86:
7a:6e:ba:1b:b5:71:cf:c1:be:c3:aa:25:bf:a7:66:e2:9f:79:
49:3c:46:6d:49:8b:5f:77:7f:58:aa:85:2b:de:a2:8f:85:5e:
4a:a8:b1:30:6d:be:e5:b9:4e:d1:14:74:89:f9:ae:c6:9c:75:
5c:27:08:1c:83:e9:e9:06:f8:0c:f1:da:34:d3:8e:cf:fc:e6:
25:9a:65:2b:66:7c:2b:93:68:d5:17:a3:eb:14:26:0c:5e:2b:
2a:87:38:97:ec:12:d9:2b:c0:86:ac:dd:0e:03:97:13:1d:13:
47:0a:68:75:8d:30:e9:01:a7:7e:3c:92:b4:0f:06:7e:68:fe:
cc:df:f8:72:54:26:4d:34:1c:57:c8:1f:71:ba:06:b7:53:78:
80:9c:d1:87:5d:d8:de:65:2f:76:9b:20:57:3f:7c:55:98:64:
01:4f:74:f1:7d:27:22:20:49:0c:f9:84:5a:d6:41:cf:f4:3b:
27:c5:7d:01:75:5a:fb:b7:2b:89:f0:e0:d5:8f:7a:1f:e2:a7:
1a:82:fa:dd:65:e5:d3:4c:1a:98:cf:94:42:33:8b:0e:1b:0e:
06:4b:48:79:77:4d:08:f5:36:27:8c:3b:bb:3f:5c:b6:66:f9:
fa:13:3a:f0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYIAt/KGVPhlvUl1EoDghIIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzE1MDcxNzExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzAzMjM1MjVkYzMxZDZmMDgwN2I4YjExN2NhMmJmZWZlZDhkNmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIBS9pbkTrglQGveyTbfywC237+M
ybhcGzTZ3MTZAXa2ijyOwufc4gctSgsSHCiscNaLSVZA5mcerQ1BVl7Xhfm0DWGq
dy5MnG2EoBEbiddFpImGhgKjQZAyCLu2lc+UpHqgPDlECL1aUFMmJek7BXqFdZh7
PmpLYXjJtFF7/A1zo0ZGHFUOxT461TMJIrXVURmMU8xQ5d2sqjw2Wi3VHIRYcWdW
7G2TRuJepSo244yGYhSlNnDuSfncP7T0WLnQRXg9Q1IJGQX4AA72vS9lxXKEJjwp
3ucW491LQ6LC//t1Ex903gOtIziG2yenIUn6lQDMBeuAP2/WGAa1j1+BOQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCwDI1Jdwx1vCAe4sRfKK/7+2Na6MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTEFNalVsM0RIVzhJQjdpeEY4b3JfdjdZMXJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEH5xIB1LcHfjA6UqHqQ
yexehnpuuhu1cc/BvsOqJb+nZuKfeUk8Rm1Ji193f1iqhSveoo+FXkqosTBtvuW5
TtEUdIn5rsacdVwnCByD6ekG+Azx2jTTjs/85iWaZStmfCuTaNUXo+sUJgxeKyqH
OJfsEtkrwIas3Q4DlxMdE0cKaHWNMOkBp348krQPBn5o/szf+HJUJk00HFfIH3G6
BrdTeICc0Ydd2N5lL3abIFc/fFWYZAFPdPF9JyIgSQz5hFrWQc/0OyfFfQF1Wvu3
K4nw4NWPeh/ipxqC+t1l5dNMGpjPlEIziw4bDgZLSHl3TQj1NieMO7s/XLZm+foT
OvA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:17 2025 by rpki-client