Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LcRafQjS9kZSoZPWPSXGUeHPbMc.roa
File: LcRafQjS9kZSoZPWPSXGUeHPbMc.roa (raw, json)
Hash identifier: WWnL/48qzGSo8JIsyz/vtuy7m2COow+e0bxvjzvyhi8=
Subject key identifier: 2D:C4:5A:7D:08:D2:F6:46:52:A1:93:D6:3D:25:C6:51:E1:CF:6C:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F322282D42CC38730D2D93A3053AE36F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LcRafQjS9kZSoZPWPSXGUeHPbMc.roa
Signing time: Sat 18 Mar 2023 05:12:27 +0000
ROA not before: Sat 18 Mar 2023 05:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f3:22:28:2d:42:cc:38:73:0d:2d:93:a3:05:3a:e3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 18 05:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dc45a7d08d2f64652a193d63d25c651e1cf6cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e8:b0:24:af:54:06:00:22:8f:65:44:0c:a8:
a8:df:24:ba:6c:6a:b5:3c:74:72:87:aa:79:2c:ee:
2a:38:a7:2c:7f:51:45:12:24:06:8a:e5:bc:d0:82:
89:a9:8f:1f:3d:f2:63:3d:7b:fc:71:ae:49:18:b5:
56:18:5b:be:33:0a:62:a6:94:09:8e:c3:4d:68:17:
5c:c4:a0:b1:d5:48:5b:33:3b:f4:0f:3a:3e:72:7d:
ce:f2:04:0d:d0:38:f8:1d:5c:14:87:d5:da:9b:be:
82:d7:4f:36:6e:e1:19:55:2f:a7:f7:35:ec:86:e6:
1d:fa:43:a6:97:45:4c:90:25:ca:f7:57:21:0f:7c:
58:2d:b1:c2:e4:a8:61:08:7e:00:16:37:f8:2f:bc:
ed:c2:02:56:0b:ea:8d:ae:f1:c5:68:e6:f2:7c:08:
87:7e:67:4e:70:4a:1f:d9:f4:ef:eb:6b:a2:36:bd:
af:86:8c:46:62:c1:26:70:35:d1:a6:0e:98:d4:c1:
9c:68:ee:fc:2f:07:41:52:d7:ef:61:09:df:17:c6:
e8:78:ef:ec:c5:9f:62:9b:44:b6:a5:7e:43:9d:4b:
03:d3:1f:08:09:d1:1b:5d:ac:56:1b:87:c8:d9:fb:
7c:76:bf:e4:5c:0e:9a:93:8f:87:a7:b2:0c:fe:c8:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C4:5A:7D:08:D2:F6:46:52:A1:93:D6:3D:25:C6:51:E1:CF:6C:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LcRafQjS9kZSoZPWPSXGUeHPbMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:cd:13:e9:26:ee:9a:d2:92:fe:7f:6f:50:34:4f:f9:16:cb:
62:23:d4:37:5c:f3:48:0c:d2:3e:63:d8:10:79:58:0a:05:a2:
29:61:d6:77:ad:9d:74:ca:c6:bd:47:87:66:c8:ca:d3:c6:cb:
0e:a5:59:6b:b8:c6:d9:a8:d2:c9:a5:51:85:34:67:7d:b0:c5:
be:e3:48:73:7d:23:5a:db:8f:d7:80:a1:af:0f:d6:48:fd:29:
33:2f:5b:a8:5f:09:56:32:cb:a7:d6:4c:6d:a5:c3:5e:59:8a:
ee:98:b2:66:b7:aa:17:44:6c:a4:81:e5:9e:00:a2:0b:a8:c1:
22:a4:96:7a:09:2b:0f:8b:38:c1:0b:a4:28:60:8f:14:9d:19:
00:96:ac:b3:7c:2e:17:cb:d1:4d:90:25:41:3f:5a:e1:2a:0c:
55:ba:c4:22:29:05:07:5c:96:1c:b7:cf:f8:f0:1b:69:5e:22:
6a:2f:9d:8c:57:d8:b3:90:82:73:e7:59:f3:49:84:42:f2:9c:
d2:b6:c2:4d:ba:ce:12:df:75:d1:11:ba:93:66:8e:9b:70:67:
37:d5:8b:f3:74:26:d7:83:93:a8:ce:d1:f8:0d:b6:56:92:17:
32:b5:10:61:1c:20:02:36:da:99:74:95:56:65:e4:c4:15:e1:
b3:90:f4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:04:13 2025 by rpki-client