Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LWY_6tD5Rgs0k8ySqjICZgvX16o.roa
File: LWY_6tD5Rgs0k8ySqjICZgvX16o.roa (raw, json)
Hash identifier: RQ5KVOFx/xWdT6bi3UeGDfCYLx49CrzF1crqJHOnd5U=
Subject key identifier: 2D:66:3F:EA:D0:F9:46:0B:34:93:CC:92:AA:32:02:66:0B:D7:D7:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899068AF2A86934E6B36D0FC91DA57EB00
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LWY_6tD5Rgs0k8ySqjICZgvX16o.roa
Signing time: Wed 26 Jul 2023 04:15:26 +0000
ROA not before: Wed 26 Jul 2023 04:15:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:90:68:af:2a:86:93:4e:6b:36:d0:fc:91:da:57:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 04:15:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d663fead0f9460b3493cc92aa3202660bd7d7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:34:6b:bc:71:b0:d4:2e:01:1a:02:45:98:81:
93:d2:ee:93:2a:28:65:60:64:32:38:b4:c2:97:88:
3b:4f:e7:bb:ae:55:5e:63:1b:df:db:72:50:de:e2:
ff:ce:40:87:96:42:20:c5:76:d6:6f:31:b5:e3:6b:
63:8f:60:fc:0a:22:25:93:c5:ee:6d:7d:47:3e:5e:
d9:01:af:f7:88:30:84:4d:00:2a:5e:e2:b3:53:7b:
a0:da:67:a4:97:14:15:01:14:08:18:8d:e8:53:ce:
61:a6:76:12:54:eb:0e:91:ad:01:f6:48:a2:1f:02:
b3:41:18:27:15:15:5f:0f:be:1e:9f:fc:f8:9f:4d:
6a:84:45:cc:45:d0:8f:5b:05:b0:6c:96:dd:91:de:
56:b2:81:1c:9a:4a:3c:b8:fb:70:9d:d0:dd:f1:50:
ce:58:29:10:e6:93:a8:01:13:f7:a4:29:7c:ba:cd:
25:1b:90:17:eb:22:16:24:7f:f7:d1:0f:da:64:45:
d3:2e:2b:21:5d:66:1f:90:ea:c0:fb:6b:f0:d5:b8:
09:6c:b5:bc:37:93:ad:a5:71:a0:50:7e:d0:90:84:
f3:c5:06:c9:b2:a4:9a:17:e4:fc:90:50:e4:60:31:
32:c9:ca:b3:59:09:95:00:ad:af:07:d0:23:06:be:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:66:3F:EA:D0:F9:46:0B:34:93:CC:92:AA:32:02:66:0B:D7:D7:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LWY_6tD5Rgs0k8ySqjICZgvX16o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:22:6f:f5:0b:02:db:37:9f:9e:18:90:68:1d:4d:9a:c1:c5:
ae:dc:41:c4:02:85:bc:27:a5:1f:45:f9:f1:05:03:30:95:66:
ca:83:da:3e:2f:05:77:0d:d5:43:18:c2:77:ff:57:30:68:dd:
a0:eb:81:5e:e6:3b:ff:51:bd:b8:dd:cf:9b:a1:7e:00:68:b6:
fe:05:be:0f:ce:2c:05:1f:7f:59:61:8b:02:21:72:dd:2b:bd:
68:9b:06:cf:c6:83:9a:43:0a:db:11:26:03:87:9b:dc:e9:9d:
54:f0:8a:81:0a:af:64:16:80:02:a2:d9:9c:b3:7e:08:e8:c3:
07:f3:a8:63:8d:76:25:bb:1d:e1:37:6f:10:ff:9b:61:d1:4d:
1a:f4:a2:70:8a:c0:77:18:2b:0d:49:8d:0f:83:29:53:17:31:
b3:c7:64:87:c8:fb:73:93:9e:64:8c:8a:ee:15:93:5c:8b:0c:
5d:3f:d5:74:88:0d:91:5f:42:27:62:e2:cf:1e:2a:13:09:61:
79:77:01:d8:9c:3f:32:23:1c:4a:7d:28:23:9e:27:be:5a:44:
55:c6:7c:3a:69:35:ed:f0:ec:e9:64:d4:e9:65:5b:98:33:03:
d1:1c:52:be:95:d5:b2:1a:44:c7:8a:97:ef:b6:1e:58:65:78:
3e:63:a1:31
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmQaK8qhpNOazbQ/JHaV+sAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI2MDQxNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDY2M2ZlYWQwZjk0NjBiMzQ5M2NjOTJhYTMyMDI2NjBiZDdkN2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzRrvHGw1C4BGgJFmIGT0u6TKihl
YGQyOLTCl4g7T+e7rlVeYxvf23JQ3uL/zkCHlkIgxXbWbzG142tjj2D8CiIlk8Xu
bX1HPl7ZAa/3iDCETQAqXuKzU3ug2meklxQVARQIGI3oU85hpnYSVOsOka0B9kii
HwKzQRgnFRVfD74en/z4n01qhEXMRdCPWwWwbJbdkd5WsoEcmko8uPtwndDd8VDO
WCkQ5pOoARP3pCl8us0lG5AX6yIWJH/30Q/aZEXTLishXWYfkOrA+2vw1bgJbLW8
N5OtpXGgUH7QkITzxQbJsqSaF+T8kFDkYDEyycqzWQmVAK2vB9AjBr5l4wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC1mP+rQ+UYLNJPMkqoyAmYL19eqMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTFdZXzZ0RDVSZ3Mwazh5U3FqSUNaZ3ZYMTZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ0ib/ULAts3n54YkGgd
TZrBxa7cQcQChbwnpR9F+fEFAzCVZsqD2j4vBXcN1UMYwnf/VzBo3aDrgV7mO/9R
vbjdz5uhfgBotv4Fvg/OLAUff1lhiwIhct0rvWibBs/Gg5pDCtsRJgOHm9zpnVTw
ioEKr2QWgAKi2ZyzfgjowwfzqGONdiW7HeE3bxD/m2HRTRr0onCKwHcYKw1JjQ+D
KVMXMbPHZIfI+3OTnmSMiu4Vk1yLDF0/1XSIDZFfQidi4s8eKhMJYXl3AdicPzIj
HEp9KCOeJ75aRFXGfDppNe3w7Olk1OllW5gzA9EcUr6V1bIaRMeKl++2HlhleD5j
oTE=
-----END CERTIFICATE-----
Generated at Fri May 2 20:37:17 2025 by rpki-client