Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LWJPWAQiUYl02T0nYS3vzszFXTI.roa
File: LWJPWAQiUYl02T0nYS3vzszFXTI.roa (raw, json)
Hash identifier: SQTNzvB83CeVUJQNzMGBdvXR135hUR09SYdrJOXIdI0=
Subject key identifier: 2D:62:4F:58:04:22:51:89:74:D9:3D:27:61:2D:EF:CE:CC:C5:5D:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018686909E39F2F60EC32EE5BB2E31FA71A5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LWJPWAQiUYl02T0nYS3vzszFXTI.roa
Signing time: Sat 25 Feb 2023 03:14:29 +0000
ROA not before: Sat 25 Feb 2023 03:14:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:86:90:9e:39:f2:f6:0e:c3:2e:e5:bb:2e:31:fa:71:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 03:14:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d624f580422518974d93d27612defceccc55d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:81:35:bd:ba:bd:a7:3d:95:cf:47:87:d7:
30:77:4a:dd:e7:45:3d:b1:77:1f:27:26:6a:5a:05:
3f:39:0f:27:fb:f7:39:30:1f:5d:30:eb:45:91:c9:
3f:ac:1f:06:cf:d6:eb:b1:5a:e1:1c:4e:b4:ca:8d:
f0:05:0c:bc:30:ed:e3:d7:47:63:ed:48:a5:8f:f4:
8d:bd:a6:6c:b6:0a:01:8f:f4:b0:fa:39:5b:e6:5b:
e2:58:53:f7:59:0b:a2:75:69:dd:60:05:18:3e:1a:
ac:b8:fb:1b:21:51:11:9a:93:81:85:6e:2d:88:52:
66:5e:b8:c7:99:07:ec:d1:05:3b:0e:1e:08:0f:7d:
01:74:00:3a:0d:25:c2:f7:4e:16:8b:88:82:c3:bc:
c0:ed:a8:7a:d1:43:67:77:9d:4a:af:89:28:ad:1c:
48:da:1e:73:8b:5a:32:07:8c:7a:17:28:f4:35:aa:
32:9d:20:04:f8:21:03:8c:a4:6e:32:9c:26:f3:a5:
33:f4:0a:c9:d9:cc:7a:43:7d:fc:f4:c8:c5:15:b8:
66:7c:ed:16:66:a4:c0:f4:e3:a5:0e:a4:e5:31:c6:
9e:dd:44:c7:91:72:3a:4d:93:15:93:7c:9e:e3:e6:
a1:03:41:80:cf:21:c4:3f:16:6c:43:a0:f5:20:d1:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:62:4F:58:04:22:51:89:74:D9:3D:27:61:2D:EF:CE:CC:C5:5D:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LWJPWAQiUYl02T0nYS3vzszFXTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:27:bd:62:5b:88:88:d9:44:7f:0a:d2:8b:1c:3d:83:7d:46:
84:ed:f0:dc:e2:a4:a8:b2:fc:e8:1c:fe:5c:9e:d7:23:a1:2c:
c1:c8:00:23:d9:01:05:51:3c:b5:53:a0:cb:91:70:07:ca:cd:
4d:13:a1:32:bc:90:f5:c0:f8:64:82:c8:7a:77:b4:59:52:0b:
56:88:c6:88:b6:b6:16:93:0c:0b:ae:c3:e4:c2:26:eb:11:46:
73:ab:e9:aa:44:14:d4:6d:e9:95:0b:33:94:b7:07:fe:11:5d:
84:63:60:ec:9b:60:d8:dc:05:4d:ce:a7:41:36:70:b6:8e:c4:
dc:67:1e:3b:1f:f8:29:c4:32:0b:89:39:a2:cd:f8:07:25:9d:
53:7a:25:59:d4:c5:f4:d7:ae:7e:10:31:13:e1:3a:65:e1:e8:
35:09:f3:7d:4d:6e:15:b2:29:7b:c7:50:5d:21:dd:e9:1c:1e:
7e:d8:37:ea:9e:1f:7a:10:1a:b0:c1:eb:e1:2c:7d:a8:de:b9:
80:c3:09:e7:69:8b:17:89:61:2b:2d:c5:a7:f8:81:d6:98:2d:
c4:0e:bd:27:bb:df:1a:6b:b0:5a:62:57:88:46:7d:2f:5a:ca:
30:9b:d5:2f:d1:15:c7:a4:2a:e5:e0:dd:68:1f:da:dd:4a:86:
5a:ea:a5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:32:10 2025 by rpki-client