Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LafJ9j96zns9eBjIgbCcDPIa9XI.roa
File: LafJ9j96zns9eBjIgbCcDPIa9XI.roa (raw, json)
Hash identifier: Ty6YGQO17ODiak7lJ2qx95qHpWPOvRmOyMB6LOgMXcg=
Subject key identifier: 2D:A7:C9:F6:3F:7A:CE:7B:3D:78:18:C8:81:B0:9C:0C:F2:1A:F5:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C489E376AA6222F6FFD290BE3E13F0AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LafJ9j96zns9eBjIgbCcDPIa9XI.roa
Signing time: Sat 05 Aug 2023 07:11:58 +0000
ROA not before: Sat 05 Aug 2023 07:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c4:89:e3:76:aa:62:22:f6:ff:d2:90:be:3e:13:f0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 07:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2da7c9f63f7ace7b3d7818c881b09c0cf21af572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:cb:2b:89:c0:fc:64:1a:bc:a1:07:57:63:
9e:85:91:0b:56:cd:1c:ea:16:e1:31:39:a0:07:27:
7c:a1:9b:33:7b:5d:83:df:9c:a6:d3:85:ce:88:ad:
f7:cf:ec:65:c4:ef:9e:e7:b8:9a:1f:80:74:f1:f0:
20:75:a6:93:f7:1b:c0:3e:c0:24:07:4e:36:6e:94:
5b:a2:0f:c9:35:41:fe:2b:f7:13:e8:96:dc:0f:6f:
83:23:a7:9e:45:27:5f:40:03:bc:fd:40:39:68:a2:
3b:f4:02:26:43:20:d4:8a:09:2f:d4:7c:1e:27:08:
d9:6b:79:26:4c:8e:f9:2d:df:f0:e4:44:b2:ff:e8:
0e:64:83:0d:70:62:50:e6:f8:34:4c:16:ef:08:7a:
0d:75:20:b8:4d:e6:e4:03:09:d3:b4:7c:b2:e6:56:
6e:ac:0e:f1:31:96:90:fc:55:d8:f3:2f:71:d1:ac:
b8:05:5e:07:99:92:66:36:a0:ca:b9:0d:c9:23:b6:
27:1d:d9:af:dd:01:c2:07:4e:68:c0:15:f6:56:ca:
02:94:19:1d:b7:58:46:3d:96:f9:7f:82:49:05:d9:
21:09:7a:a6:3b:75:1e:2a:e2:5a:78:4d:b7:1f:8d:
90:7b:f4:53:a0:9d:09:00:b9:be:d0:c2:7f:06:12:
c5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A7:C9:F6:3F:7A:CE:7B:3D:78:18:C8:81:B0:9C:0C:F2:1A:F5:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LafJ9j96zns9eBjIgbCcDPIa9XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:6c:68:2a:62:68:d4:ed:ef:94:65:c7:cd:18:f8:80:74:47:
8f:cf:fe:b4:9f:88:88:e4:8b:19:f1:b5:db:d1:35:b8:39:be:
43:86:b0:87:cc:64:bc:43:eb:6b:0a:27:7a:b7:c5:20:17:d5:
5c:a1:e5:ce:b3:8e:9d:f2:60:d7:40:f3:98:d9:56:6f:5a:5b:
d2:9c:56:a0:8b:31:7c:1c:01:d6:be:e7:f5:cb:51:99:d9:41:
a8:d2:c0:c2:41:f4:a4:fc:7f:23:91:67:83:d6:31:dc:06:a7:
c5:2a:60:ab:32:79:8a:f7:00:cb:53:66:ea:8a:ca:3e:16:59:
f5:b5:b5:26:a9:3c:86:a4:03:2d:48:cb:17:64:67:97:74:98:
7c:cb:84:8d:87:66:89:c5:b8:26:25:0f:fe:93:5c:da:35:c9:
1a:e2:d0:36:be:31:df:6b:76:9b:1f:1c:f8:ad:ef:d1:02:9e:
8e:07:23:3a:90:e3:c2:99:b4:10:07:bb:39:d6:51:04:98:69:
bc:24:a4:e4:20:74:84:00:49:5e:48:f6:aa:8b:47:74:21:01:
90:51:2c:83:01:ef:bc:06:69:7a:cf:fd:1d:44:fc:e0:80:ae:
5e:43:dc:a5:94:08:dd:fb:78:35:c3:fe:34:0e:04:18:5b:a3:
33:57:51:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:11:48 2025 by rpki-client