Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LRJHgZeXuVVilaZwK0HMbPNWN2c.roa
File: LRJHgZeXuVVilaZwK0HMbPNWN2c.roa (raw, json)
Hash identifier: DdtGLfPzwkjO3U/6OdgS+p7Re6ecMfNeb+P8scaQVzk=
Subject key identifier: 2D:12:47:81:97:97:B9:55:62:95:A6:70:2B:41:CC:6C:F3:56:37:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182D2238096C101FB084FE7BBC71CBBE0A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LRJHgZeXuVVilaZwK0HMbPNWN2c.roa
Signing time: Wed 24 Aug 2022 23:15:18 +0000
ROA not before: Wed 24 Aug 2022 23:15:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d2:23:80:96:c1:01:fb:08:4f:e7:bb:c7:1c:bb:e0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 23:15:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d1247819797b9556295a6702b41cc6cf3563767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:70:b8:c8:4c:65:6c:01:bb:c9:5e:60:2d:
88:9c:ee:47:5c:4d:b1:9b:23:0f:78:3e:5f:94:9e:
bb:5f:17:4b:13:42:80:c5:e8:fe:2b:f1:f7:e0:d9:
9f:0e:cc:4e:8c:9a:a9:da:67:2d:78:be:a8:06:40:
05:e1:4e:ff:68:9a:33:a1:42:57:53:46:b8:c5:1b:
ed:1d:1a:e3:0b:80:d0:66:b2:c6:5a:14:cf:93:5d:
ad:6d:9b:83:c4:4f:2f:06:21:7c:67:5c:7d:00:33:
cb:63:da:e1:01:7c:97:a2:0c:de:de:ed:f5:df:bc:
a8:0e:3c:4f:01:b1:f0:81:04:f4:72:73:35:72:26:
f3:25:8b:9b:c3:16:86:4f:b0:a5:7f:d0:d7:8a:6b:
d2:9d:b2:7d:8b:29:fa:28:5f:e8:e9:06:be:49:f6:
69:94:00:80:70:71:9d:68:79:45:9d:f0:aa:6f:80:
5c:7e:c1:1c:76:16:16:72:13:ae:99:47:04:2c:b7:
1d:b0:b2:7e:3d:02:2b:07:4a:ee:36:28:d5:50:5c:
96:e0:8f:e8:1f:83:87:6b:b9:9c:92:c4:54:e8:fb:
d5:19:81:c8:2e:f4:aa:1c:76:c0:36:4a:7e:31:ad:
b8:66:3a:4b:99:ff:d6:96:58:56:d5:20:53:68:b3:
2a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:12:47:81:97:97:B9:55:62:95:A6:70:2B:41:CC:6C:F3:56:37:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LRJHgZeXuVVilaZwK0HMbPNWN2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:d5:a1:65:67:cd:cb:fd:57:d3:55:7c:40:de:4a:e4:0d:ce:
83:66:0c:97:20:95:85:9a:35:04:5b:9b:68:a1:0c:d1:73:a7:
bd:f8:0e:e6:cd:e8:f8:b5:9c:db:98:d9:06:ce:87:5c:80:eb:
76:10:c3:24:f8:6f:44:b5:f9:31:17:55:71:6e:ee:52:b4:b5:
be:36:fa:63:82:56:76:8c:01:ec:9e:ce:62:54:cc:78:a8:b4:
87:68:46:4e:65:9f:3d:c3:2f:64:ca:06:72:5e:f2:07:0b:e7:
34:fc:85:cd:f9:28:24:cc:7f:7c:78:36:4d:fc:ca:f7:3d:a5:
6f:38:42:40:dc:6a:59:ae:2b:7d:95:03:f4:ac:ed:c1:eb:43:
fe:b8:ef:d7:cd:05:07:a5:cc:3d:16:6c:c5:65:57:6d:c5:1b:
0b:07:a6:fb:e3:01:19:92:4b:ef:4f:00:07:de:ab:6c:b4:f2:
f0:a8:af:f6:95:16:d0:cd:1e:8d:2d:9e:0b:36:21:11:3d:35:
70:3e:51:b7:3f:fd:90:c1:6a:7d:b5:1b:22:bd:ef:59:94:01:
c9:98:7f:0c:35:40:99:52:1e:c7:dd:60:95:a5:5c:46:52:f0:
00:f0:15:39:47:34:8c:f4:7f:75:0a:8c:d1:62:64:24:76:02:
98:12:b3:d9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYLSI4CWwQH7CE/nu8ccu+ChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODI0MjMxNTE4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDEyNDc4MTk3OTdiOTU1NjI5NWE2NzAyYjQxY2M2Y2YzNTYzNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OhwuMhMZWwBu8leYC2InO5HXE2x
myMPeD5flJ67XxdLE0KAxej+K/H34NmfDsxOjJqp2mcteL6oBkAF4U7/aJozoUJX
U0a4xRvtHRrjC4DQZrLGWhTPk12tbZuDxE8vBiF8Z1x9ADPLY9rhAXyXogze3u31
37yoDjxPAbHwgQT0cnM1cibzJYubwxaGT7Clf9DXimvSnbJ9iyn6KF/o6Qa+SfZp
lACAcHGdaHlFnfCqb4BcfsEcdhYWchOumUcELLcdsLJ+PQIrB0ruNijVUFyW4I/o
H4OHa7mcksRU6PvVGYHILvSqHHbANkp+Ma24ZjpLmf/WllhW1SBTaLMqFwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC0SR4GXl7lVYpWmcCtBzGzzVjdnMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTFJKSGdaZVh1VlZpbGFad0swSE1iUE5XTjJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD7VoWVnzcv9V9NVfEDe
SuQNzoNmDJcglYWaNQRbm2ihDNFzp734DubN6Pi1nNuY2QbOh1yA63YQwyT4b0S1
+TEXVXFu7lK0tb42+mOCVnaMAeyezmJUzHiotIdoRk5lnz3DL2TKBnJe8gcL5zT8
hc35KCTMf3x4Nk38yvc9pW84QkDcalmuK32VA/Ss7cHrQ/6479fNBQelzD0WbMVl
V23FGwsHpvvjARmSS+9PAAfeq2y08vCor/aVFtDNHo0tngs2IRE9NXA+Ubc//ZDB
an21GyK971mUAcmYfww1QJlSHsfdYJWlXEZS8ADwFTlHNIz0f3UKjNFiZCR2ApgS
s9k=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:17 2025 by rpki-client