Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LYy-2RTa__NY8closQUXt_d3oUE.roa
File: LYy-2RTa__NY8closQUXt_d3oUE.roa (raw, json)
Hash identifier: XnAFtjHdTZ24rKbo3pRN29TuhdTpYcK7LMEUjpTlOe4=
Subject key identifier: 2D:8C:BE:D9:14:DA:FF:F3:58:F1:C9:68:B1:05:17:B7:F7:77:A1:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01832C775C3CE5CBF89C6AD05FF8A44814F1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LYy-2RTa__NY8closQUXt_d3oUE.roa
Signing time: Sun 11 Sep 2022 12:12:43 +0000
ROA not before: Sun 11 Sep 2022 12:12:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2c:77:5c:3c:e5:cb:f8:9c:6a:d0:5f:f8:a4:48:14:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 11 12:12:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d8cbed914dafff358f1c968b10517b7f777a141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:db:4e:50:e3:1a:65:fe:8d:ed:f0:bf:36:
f8:4f:74:ea:51:77:d8:eb:e0:4b:95:ad:61:73:4d:
c1:97:ec:70:89:d5:4d:55:a0:4c:2b:e1:d0:20:76:
26:79:a4:5e:05:e5:42:ce:bd:8a:9e:9d:2c:99:ad:
93:5e:64:14:19:07:df:00:f3:52:6a:67:74:e7:bb:
74:1f:30:a2:dd:ad:2a:e4:b7:11:0a:02:9c:d7:ea:
52:14:df:b6:4c:62:20:d9:6c:e2:ee:1b:cc:10:55:
bd:7c:51:13:71:08:2f:a8:79:4c:32:9f:ab:5d:59:
66:66:2a:a4:6c:be:22:cc:75:cf:e9:d2:89:db:d3:
d8:e5:78:fc:2c:5e:4c:37:07:5e:fb:c1:f1:f4:25:
3e:06:92:09:bd:62:ef:cf:d9:c1:f7:8d:3b:a9:dc:
ca:28:0b:5c:de:28:49:60:cc:35:ee:17:ab:bd:4a:
b8:e0:e9:aa:d2:03:29:50:58:0d:f7:e2:1b:74:a1:
a0:2c:d4:e2:f1:85:85:68:10:38:ac:6e:69:04:e5:
66:51:36:a1:32:92:12:4c:ae:ea:7f:a4:fb:fb:5f:
a6:0e:f0:ff:d7:58:46:7b:57:08:9d:8a:ad:0a:97:
2d:63:fa:b8:c5:c4:80:9d:5f:bd:42:ee:0d:68:77:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8C:BE:D9:14:DA:FF:F3:58:F1:C9:68:B1:05:17:B7:F7:77:A1:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LYy-2RTa__NY8closQUXt_d3oUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:6b:86:e9:5f:7a:44:ce:ad:0f:78:9d:1e:cb:3b:d6:70:4f:
07:8f:2f:00:84:41:d9:f9:42:7e:f1:e1:19:47:20:e4:e5:0c:
5c:06:ee:b7:59:e0:d8:3f:a4:84:f7:f2:1b:4b:02:a6:cb:01:
be:69:a3:48:e3:17:64:bf:33:5a:37:e8:e9:9c:38:da:a7:ef:
22:55:16:0b:d7:a9:4d:96:9c:ee:b2:f2:0a:0b:41:a8:21:ec:
ff:e7:57:2d:4a:35:a9:c3:49:e1:20:c5:e5:b6:59:d1:e8:42:
67:38:b1:ab:8e:32:87:aa:e6:9d:31:c7:d2:b6:67:1c:2f:b3:
93:a2:3a:37:de:33:de:f3:4e:46:f3:90:c2:66:5d:4d:cc:ca:
52:d2:e2:07:8e:cc:12:75:1f:32:6e:79:bb:c0:25:c9:a8:79:
ff:71:00:29:e4:03:2e:2c:51:dc:ea:4d:4f:64:3f:60:00:60:
4c:40:7c:16:e3:76:27:c4:37:ca:26:d8:3b:97:02:f1:48:4e:
b1:9c:d4:3f:19:cb:83:d6:3e:06:00:e2:20:55:24:38:1a:83:
82:5c:b9:4c:44:b4:4f:24:5f:01:13:83:e6:a1:a9:68:5f:6b:
38:b4:a2:85:82:36:ed:35:0b:75:94:b9:a7:67:82:11:b1:9d:
ee:93:f7:4f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYMsd1w85cv4nGrQX/ikSBTxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTExMTIxMjQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDhjYmVkOTE0ZGFmZmYzNThmMWM5NjhiMTA1MTdiN2Y3NzdhMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy/bTlDjGmX+je3wvzb4T3TqUXfY
6+BLla1hc03Bl+xwidVNVaBMK+HQIHYmeaReBeVCzr2Knp0sma2TXmQUGQffAPNS
amd057t0HzCi3a0q5LcRCgKc1+pSFN+2TGIg2Wzi7hvMEFW9fFETcQgvqHlMMp+r
XVlmZiqkbL4izHXP6dKJ29PY5Xj8LF5MNwde+8Hx9CU+BpIJvWLvz9nB9407qdzK
KAtc3ihJYMw17hervUq44Omq0gMpUFgN9+IbdKGgLNTi8YWFaBA4rG5pBOVmUTah
MpISTK7qf6T7+1+mDvD/11hGe1cInYqtCpctY/q4xcSAnV+9Qu4NaHfpYwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC2MvtkU2v/zWPHJaLEFF7f3d6FBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTFl5LTJSVGFfX05ZOGNsb3NRVVh0X2Qzb1VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAK9rhulfekTOrQ94nR7L
O9ZwTwePLwCEQdn5Qn7x4RlHIOTlDFwG7rdZ4Ng/pIT38htLAqbLAb5po0jjF2S/
M1o36OmcONqn7yJVFgvXqU2WnO6y8goLQagh7P/nVy1KNanDSeEgxeW2WdHoQmc4
sauOMoeq5p0xx9K2Zxwvs5OiOjfeM97zTkbzkMJmXU3MylLS4geOzBJ1HzJuebvA
Jcmoef9xACnkAy4sUdzqTU9kP2AAYExAfBbjdifEN8om2DuXAvFITrGc1D8Zy4PW
PgYA4iBVJDgag4JcuUxEtE8kXwETg+ahqWhfazi0ooWCNu01C3WUuadnghGxne6T
908=
-----END CERTIFICATE-----
Generated at Fri May 2 01:16:59 2025 by rpki-client