Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LgsBK3wa20vGzFfZ_eU5gWyQX54.roa
File: LgsBK3wa20vGzFfZ_eU5gWyQX54.roa (raw, json)
Hash identifier: zT0Cl6X+XrOY1H9/B4eWdvGm93Bsxa5jk7Wi6tpMzUY=
Subject key identifier: 2E:0B:01:2B:7C:1A:DB:4B:C6:CC:57:D9:FD:E5:39:81:6C:90:5F:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185A50287720D27D1787C6001D0CC2EB9EE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LgsBK3wa20vGzFfZ_eU5gWyQX54.roa
Signing time: Thu 12 Jan 2023 08:04:44 +0000
ROA not before: Thu 12 Jan 2023 08:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:a502:4aab/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:02:87:72:0d:27:d1:78:7c:60:01:d0:cc:2e:b9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 12 08:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e0b012b7c1adb4bc6cc57d9fde539816c905f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b8:a0:38:49:5b:6e:a2:1e:e2:e0:9c:cf:cd:
17:36:f6:81:4f:a0:05:2f:d3:1e:9a:a9:f7:c0:b7:
67:e8:f9:5f:4e:0c:7b:d6:3f:16:b2:1f:98:49:26:
17:7a:b0:3f:1b:7b:56:a0:8e:12:d5:a9:99:cf:88:
c8:c0:19:a6:45:f7:fc:e6:d5:e3:12:26:17:29:19:
ca:69:c7:d6:46:4f:89:5c:50:1e:ed:ce:16:05:23:
64:b6:37:09:e7:19:2d:e7:8e:4c:48:46:a6:d8:7e:
24:dc:46:e5:d4:d4:62:4c:27:ad:36:86:91:7a:93:
3d:ae:c6:00:ce:72:fa:03:4a:ac:76:3b:74:aa:bc:
e1:d0:f6:5d:3f:53:7c:51:dd:58:f8:fd:12:a6:33:
9d:78:ed:20:bf:3f:ee:2d:53:fb:b7:c9:ad:e1:38:
88:42:43:1e:64:1b:e7:d5:f5:fb:e3:22:27:f4:7f:
b7:5d:59:0b:01:b0:89:51:65:10:ad:46:06:2c:67:
c3:3e:05:b7:3e:ce:ed:28:0e:09:88:f9:93:ce:f2:
c2:6a:30:30:ea:64:41:10:06:18:da:53:1d:65:a2:
7e:d0:e2:c6:60:98:f2:80:81:31:b2:74:87:fd:a9:
36:d7:e6:8c:54:6e:01:a1:7f:38:f9:1a:5f:2b:87:
8a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0B:01:2B:7C:1A:DB:4B:C6:CC:57:D9:FD:E5:39:81:6C:90:5F:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LgsBK3wa20vGzFfZ_eU5gWyQX54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:d4:4b:3c:a0:f3:76:ad:97:5e:c7:e7:f1:9c:ba:a3:af:7d:
d4:85:39:4b:f5:42:27:1a:9f:dd:b8:4e:05:81:6d:d2:d3:d1:
bf:64:6d:93:b2:eb:4a:76:3f:69:24:6b:62:27:7e:10:41:a4:
67:b5:13:d2:a1:04:62:0c:0b:f6:59:44:78:a0:44:20:09:8f:
1c:d5:79:93:04:c4:ee:d8:3a:ec:3a:17:bd:58:b8:a4:1b:a7:
80:04:34:c9:e3:19:69:56:6c:4c:82:20:df:59:8b:1d:41:dc:
e6:c8:86:c4:56:f4:b5:ef:a0:03:df:da:20:47:56:ef:4c:e6:
3c:b8:65:57:a1:e6:57:00:55:be:f5:f2:4c:c9:a7:02:8c:19:
f3:74:9f:f4:3d:14:13:b3:3a:aa:8b:d2:48:28:8f:f1:a0:ac:
91:56:de:9f:1b:fb:28:49:2a:b6:7d:80:e3:c0:de:64:b0:a3:
5f:a1:a9:97:34:b7:1c:0f:08:3c:e4:ce:d2:dc:0d:a9:77:fb:
f2:55:0a:3d:12:ce:44:da:dc:81:f1:9d:bb:d5:fd:c8:09:ed:
41:a7:cc:18:0f:09:21:37:30:de:88:db:33:48:bd:8d:f2:5e:
e5:f3:6f:ae:f2:ce:89:a7:87:30:d7:8f:b3:f7:6c:71:de:0d:
8e:c9:27:a3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWlAodyDSfReHxgAdDMLrnuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTEyMDgwNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTBiMDEyYjdjMWFkYjRiYzZjYzU3ZDlmZGU1Mzk4MTZjOTA1ZjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7igOElbbqIe4uCcz80XNvaBT6AF
L9Memqn3wLdn6PlfTgx71j8Wsh+YSSYXerA/G3tWoI4S1amZz4jIwBmmRff85tXj
EiYXKRnKacfWRk+JXFAe7c4WBSNktjcJ5xkt545MSEam2H4k3Ebl1NRiTCetNoaR
epM9rsYAznL6A0qsdjt0qrzh0PZdP1N8Ud1Y+P0SpjOdeO0gvz/uLVP7t8mt4TiI
QkMeZBvn1fX74yIn9H+3XVkLAbCJUWUQrUYGLGfDPgW3Ps7tKA4JiPmTzvLCajAw
6mRBEAYY2lMdZaJ+0OLGYJjygIExsnSH/ak21+aMVG4BoX84+RpfK4eKVQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC4LASt8GttLxsxX2f3lOYFskF+eMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTGdzQkszd2EyMHZHekZmWl9lVTVnV3lRWDU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADfUSzyg83atl17H5/Gc
uqOvfdSFOUv1Qican924TgWBbdLT0b9kbZOy60p2P2kka2InfhBBpGe1E9KhBGIM
C/ZZRHigRCAJjxzVeZMExO7YOuw6F71YuKQbp4AENMnjGWlWbEyCIN9Zix1B3ObI
hsRW9LXvoAPf2iBHVu9M5jy4ZVeh5lcAVb718kzJpwKMGfN0n/Q9FBOzOqqL0kgo
j/GgrJFW3p8b+yhJKrZ9gOPA3mSwo1+hqZc0txwPCDzkztLcDal3+/JVCj0SzkTa
3IHxnbvV/cgJ7UGnzBgPCSE3MN6I2zNIvY3yXuXzb67yzomnhzDXj7P3bHHeDY7J
J6M=
-----END CERTIFICATE-----
Generated at Sat May 3 12:16:56 2025 by rpki-client