Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LaztpsVQTiJL259v-SWPAgKUVlU.roa
File: LaztpsVQTiJL259v-SWPAgKUVlU.roa (raw, json)
Hash identifier: GSe/omfnJSQsHHPHtJZC7Pjxat0v/ZA0FAcZN47YpHI=
Subject key identifier: 2D:AC:ED:A6:C5:50:4E:22:4B:DB:9F:6F:F9:25:8F:02:02:94:56:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187142ED79A236C36D3F4B9DCAD07FB20B5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LaztpsVQTiJL259v-SWPAgKUVlU.roa
Signing time: Fri 24 Mar 2023 15:13:46 +0000
ROA not before: Fri 24 Mar 2023 15:13:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:14:2e:d7:9a:23:6c:36:d3:f4:b9:dc:ad:07:fb:20:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 15:13:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2daceda6c5504e224bdb9f6ff9258f0202945655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c4:25:7a:17:de:4a:a2:ea:f0:7e:9b:94:fc:
5a:85:2b:51:55:2c:95:3b:62:ee:da:7e:07:b2:22:
7e:89:0e:3a:c9:5b:ca:f7:b2:d6:46:28:62:5b:cc:
1b:bc:7d:12:5b:a6:be:a3:7b:97:04:fa:2b:44:ac:
53:e6:25:65:79:3f:d7:35:8f:da:fb:83:15:8c:03:
fd:03:c1:98:b7:3e:96:40:88:f3:cd:49:8b:98:3d:
8a:c8:99:f4:c7:a3:20:58:d2:d2:2b:d2:44:e0:66:
81:31:67:a5:f8:93:ce:6c:6c:52:aa:1f:67:4f:3a:
02:47:36:84:1c:5c:7e:01:7e:df:69:3e:7b:31:9b:
a7:ba:f5:0b:74:bd:90:83:48:0b:55:62:6b:88:c2:
76:16:7a:fa:27:66:76:fd:d6:10:89:98:6d:e6:7c:
c3:8d:96:94:48:d7:db:85:d5:89:98:6b:12:09:1e:
a5:8d:7b:c9:61:a2:f6:e8:cf:8f:5f:b7:12:4e:23:
25:c0:00:d0:d6:a9:e5:2d:a7:7d:35:19:b1:65:b9:
57:ca:a2:7f:f6:d8:91:ee:aa:3b:db:b0:91:26:c8:
bd:ff:3e:d5:ea:7d:04:cb:4e:a2:96:4a:0f:e8:2c:
45:a9:fd:56:c6:49:f7:51:bf:bf:11:85:2e:0d:27:
fc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AC:ED:A6:C5:50:4E:22:4B:DB:9F:6F:F9:25:8F:02:02:94:56:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LaztpsVQTiJL259v-SWPAgKUVlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:c0:89:41:a8:e5:27:f7:7c:1e:b2:64:9b:8a:96:7c:51:44:
79:ac:84:2e:f4:e3:f8:bc:6d:58:d7:6b:db:29:57:c4:61:d7:
10:5b:94:9c:01:13:2c:9a:40:ff:93:cf:c0:0e:6b:35:eb:1a:
84:78:a6:c9:50:04:ea:a4:bb:5e:f7:a7:28:ab:2a:73:4c:b3:
02:b2:85:8e:aa:3c:0b:c2:bf:60:e3:78:46:e6:96:c7:3b:23:
4c:eb:f9:8e:57:db:b7:9d:3b:dd:22:2c:42:a1:af:ee:fd:b9:
1b:5f:4f:ac:18:85:49:ad:d0:ab:96:46:b5:47:de:95:e2:e4:
6a:bb:c5:27:0b:44:b9:a6:c6:d7:57:63:31:3c:0a:74:5d:01:
d8:2f:0d:6e:63:0d:19:1b:34:9d:b4:14:6e:23:0e:a8:60:6f:
31:35:d1:8f:e4:6e:05:c4:c3:5f:d9:d6:74:86:2a:8c:a8:72:
74:b1:a1:9b:3f:38:9c:3c:24:3c:1e:62:93:5c:b0:38:2c:da:
10:72:05:bd:4c:81:21:cd:ba:ff:95:7f:7e:23:49:36:01:d3:
e4:13:5e:2e:bc:17:03:d8:07:53:e3:fa:f9:05:0b:d4:fc:9b:
18:c6:cc:16:50:31:f2:ec:c7:15:e2:bc:b6:44:94:87:80:7c:
6d:72:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:28 2025 by rpki-client