Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LIZBCI_V465_4dtoyimlz9i9dKE.roa
File: LIZBCI_V465_4dtoyimlz9i9dKE.roa (raw, json)
Hash identifier: Yfe1AqzYGnOLm43HPoJ9/4qCsqKzmw4jbyNrVpYO3M8=
Subject key identifier: 2C:86:41:08:8F:D5:E3:AE:7F:E1:DB:68:CA:29:A5:CF:D8:BD:74:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B4AB5EA09E31B8F0CA7389FABAECCF30
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LIZBCI_V465_4dtoyimlz9i9dKE.roa
Signing time: Wed 02 Aug 2023 05:14:36 +0000
ROA not before: Wed 02 Aug 2023 05:14:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b4:ab:5e:a0:9e:31:b8:f0:ca:73:89:fa:ba:ec:cf:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 05:14:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c8641088fd5e3ae7fe1db68ca29a5cfd8bd74a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:70:cd:14:fc:da:11:66:62:48:2c:f9:ed:
35:d0:e4:f6:b9:3a:cf:62:7f:2c:50:57:f7:b7:10:
a0:8b:e1:ca:91:d2:ee:50:5a:57:52:da:90:20:24:
f6:70:4f:a3:81:0b:bf:e7:54:0a:da:18:1d:ba:94:
68:48:7f:64:e8:92:6a:1c:5b:c3:e2:32:fb:25:48:
aa:3d:a7:19:62:c0:12:94:8d:57:7e:a1:5d:ea:fd:
55:b6:d7:21:c8:a6:8a:cc:3a:9e:fd:85:23:3c:40:
22:20:ea:cc:1e:e3:32:9e:9e:a4:81:63:20:47:05:
b6:7c:ae:4a:e2:95:14:27:2f:be:d8:0d:d5:dc:e2:
07:f7:71:bf:cd:f2:62:4e:9c:b5:db:08:3d:a8:f3:
2e:89:0b:52:83:a7:eb:cb:de:69:3f:44:55:59:6c:
fa:b3:c6:09:e4:05:2f:30:f4:de:92:fd:46:15:e8:
08:d4:48:5d:f9:6e:84:cc:8d:91:64:a4:88:56:44:
ef:38:11:ce:87:7d:99:42:e0:8f:9a:f9:8e:e8:b7:
76:ac:3f:dd:49:7d:31:f9:b8:6a:4f:16:c7:0c:8b:
c6:83:71:23:ea:37:c0:dc:2e:bc:21:5f:24:09:54:
7a:79:ff:a9:56:25:5e:36:ee:ab:48:51:ff:18:6a:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:86:41:08:8F:D5:E3:AE:7F:E1:DB:68:CA:29:A5:CF:D8:BD:74:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LIZBCI_V465_4dtoyimlz9i9dKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:af:fe:81:88:09:8c:81:96:de:30:52:70:e8:74:31:e9:92:
d6:6f:36:43:cc:09:98:d9:54:97:9d:4c:7a:35:61:a6:41:10:
0b:24:4c:36:01:d5:ef:a9:a1:59:6a:10:16:10:8f:00:d3:85:
79:2c:c7:d4:01:f9:83:8a:a3:c6:25:5f:fc:30:85:c9:62:71:
7b:f8:36:3c:e2:12:b3:d5:6e:1b:12:6c:f9:29:57:03:02:f2:
a3:96:97:ff:86:8d:06:eb:aa:4a:10:99:9c:af:d1:89:4b:6f:
98:7f:3e:ff:5d:95:5b:2b:e5:52:4b:79:d1:4a:1a:5f:32:53:
5f:2f:03:5e:98:52:2f:e3:c5:2d:54:85:e8:02:24:01:e0:9f:
46:33:09:62:e4:01:f8:a9:27:dc:2d:32:7a:8e:de:39:b4:ad:
7e:19:9e:4b:3a:9d:17:06:e9:bf:8f:16:66:bf:1c:13:07:6e:
fb:4c:2c:07:38:70:14:8f:9a:57:61:74:70:a6:1c:1d:6c:bc:
9e:3c:da:da:2b:7c:47:d7:de:27:f0:70:c0:49:e7:76:b4:2c:
ae:a1:55:e1:db:91:7a:5b:ab:16:67:4e:8f:94:cf:b7:e9:08:
a1:f1:32:8a:46:52:70:f8:7d:09:a1:70:6a:65:1c:2b:2e:f8:
1c:86:5c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:26:20 2025 by rpki-client