Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LSx_gtj2Wm9uIqZB75mJUB9Ccx0.roa
File: LSx_gtj2Wm9uIqZB75mJUB9Ccx0.roa (raw, json)
Hash identifier: TY8JA8m4AqDrBopgagoCyYaZYZGySaQ9XjYlokB3l+U=
Subject key identifier: 2D:2C:7F:82:D8:F6:5A:6F:6E:22:A6:41:EF:99:89:50:1F:42:73:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018897443F6771FC812465A80200217B5D46
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LSx_gtj2Wm9uIqZB75mJUB9Ccx0.roa
Signing time: Wed 07 Jun 2023 19:10:12 +0000
ROA not before: Wed 07 Jun 2023 19:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:97:44:3f:67:71:fc:81:24:65:a8:02:00:21:7b:5d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 7 19:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d2c7f82d8f65a6f6e22a641ef9989501f42731d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:db:1b:b3:ad:c2:38:4b:69:86:2e:2a:d0:ae:
1b:fb:d7:38:e6:f5:65:34:d4:97:78:9e:a8:19:d8:
37:5e:3b:8f:db:bd:2b:1f:14:e9:0e:92:f9:c1:cd:
48:e9:39:a3:a5:cc:8b:9b:50:2f:31:6c:3c:23:2c:
e0:ba:aa:68:3e:6a:d3:45:1f:d4:f5:5d:bd:cb:70:
2e:3b:c0:60:f4:bd:11:9f:4d:cc:11:06:aa:63:50:
c9:ce:56:69:58:b7:b0:8f:e5:0b:0c:90:95:d7:10:
31:b5:8e:9a:2a:9c:9c:d5:51:bd:bc:c4:8a:e6:cb:
24:65:6b:cf:2b:44:c8:49:36:52:c7:35:de:e5:db:
6d:bd:54:3e:28:cf:44:fa:0b:34:90:49:8b:1a:3b:
57:bf:96:c8:7c:b8:11:8e:30:61:da:fa:bf:3e:1f:
4f:55:f8:07:ee:8e:96:27:25:e4:ee:8b:9c:4d:9b:
28:93:31:02:0b:28:26:ba:86:6b:ff:8d:d3:a8:5f:
f5:5a:5e:9a:f3:3f:b5:28:ec:c1:bf:0a:42:be:17:
54:89:4c:e6:f6:44:4b:29:16:f6:f3:7e:d6:1a:34:
61:71:39:88:0a:27:7d:f9:f4:fa:d8:76:3b:f0:8b:
64:55:4a:7a:e9:98:c1:60:a5:6d:e3:9d:ab:40:e5:
bc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2C:7F:82:D8:F6:5A:6F:6E:22:A6:41:EF:99:89:50:1F:42:73:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LSx_gtj2Wm9uIqZB75mJUB9Ccx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:96:db:4e:68:d5:6f:93:e1:89:87:99:09:56:d5:37:97:6a:
89:fe:b8:77:82:f9:29:87:e5:dd:60:7d:8a:70:88:c9:76:94:
23:18:f3:5d:13:ef:b2:e2:ac:7b:c9:64:4a:bd:c3:82:01:d7:
b8:14:3e:ff:a5:41:0a:29:c6:34:de:1e:5d:a6:f4:fc:e9:ee:
03:80:04:5b:98:d3:c7:e0:c6:dd:92:88:fb:82:41:97:0f:53:
7d:3c:52:c2:af:3c:00:9c:e1:cf:ec:44:57:ed:6d:1b:42:8f:
d0:5d:2c:d7:d8:d7:22:c8:65:44:7c:27:4d:f7:21:c7:63:74:
2c:63:f2:fc:be:1a:77:55:af:f6:a8:02:ee:59:6a:a3:04:82:
f8:20:87:eb:fb:a6:e2:5c:9c:03:a2:d6:e9:32:10:19:86:bf:
13:e2:d1:2e:fc:a6:77:12:27:a7:e1:6e:74:35:20:60:fc:00:
ad:bb:a8:17:0a:ec:70:b3:76:83:94:bd:00:12:b6:61:f3:4d:
31:4d:e3:67:9a:5b:c0:3b:e6:93:b0:03:82:c9:e1:05:25:98:
19:97:98:db:61:57:4f:76:3e:34:f8:6d:30:6e:8d:b4:12:a3:
87:c2:c8:1c:96:80:d4:31:b3:21:f0:94:5f:7d:d2:d8:d1:af:
40:df:17:5f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiXRD9ncfyBJGWoAgAhe11GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjA3MTkxMDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDJjN2Y4MmQ4ZjY1YTZmNmUyMmE2NDFlZjk5ODk1MDFmNDI3MzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdsbs63COEtphi4q0K4b+9c45vVl
NNSXeJ6oGdg3XjuP270rHxTpDpL5wc1I6TmjpcyLm1AvMWw8IyzguqpoPmrTRR/U
9V29y3AuO8Bg9L0Rn03MEQaqY1DJzlZpWLewj+ULDJCV1xAxtY6aKpyc1VG9vMSK
5sskZWvPK0TISTZSxzXe5dttvVQ+KM9E+gs0kEmLGjtXv5bIfLgRjjBh2vq/Ph9P
VfgH7o6WJyXk7oucTZsokzECCygmuoZr/43TqF/1Wl6a8z+1KOzBvwpCvhdUiUzm
9kRLKRb2837WGjRhcTmICid9+fT62HY78ItkVUp66ZjBYKVt452rQOW88QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC0sf4LY9lpvbiKmQe+ZiVAfQnMdMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTFN4X2d0ajJXbTl1SXFaQjc1bUpVQjlDY3gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAWW205o1W+T4YmHmQlW
1TeXaon+uHeC+SmH5d1gfYpwiMl2lCMY810T77LirHvJZEq9w4IB17gUPv+lQQop
xjTeHl2m9Pzp7gOABFuY08fgxt2SiPuCQZcPU308UsKvPACc4c/sRFftbRtCj9Bd
LNfY1yLIZUR8J033IcdjdCxj8vy+GndVr/aoAu5ZaqMEgvggh+v7puJcnAOi1uky
EBmGvxPi0S78pncSJ6fhbnQ1IGD8AK27qBcK7HCzdoOUvQAStmHzTTFN42eaW8A7
5pOwA4LJ4QUlmBmXmNthV092PjT4bTBujbQSo4fCyByWgNQxsyHwlF990tjRr0Df
F18=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:54:36 2025 by rpki-client