Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LiNdRx3o4V8u2OYgW0VlBSOPEV0.roa
File: LiNdRx3o4V8u2OYgW0VlBSOPEV0.roa (raw, json)
Hash identifier: pbc+A7/9tFjoK8TyTqqFT7kbJemP/vX1rbRGqlDOmW8=
Subject key identifier: 2E:23:5D:47:1D:E8:E1:5F:2E:D8:E6:20:5B:45:65:05:23:8F:11:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6778C787
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LiNdRx3o4V8u2OYgW0VlBSOPEV0.roa
Signing time: Thu 03 Feb 2022 10:08:22 +0000
ROA not before: Thu 03 Feb 2022 10:08:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1735968647 (0x6778c787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 3 10:08:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e235d471de8e15f2ed8e6205b456505238f115d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:51:64:5f:1b:d5:02:7b:fa:1c:df:4b:c0:
ec:a1:cc:43:41:1d:52:49:32:f0:40:54:68:5a:76:
6e:53:7f:28:98:07:82:4d:f3:70:a8:52:34:aa:83:
df:20:bd:7c:77:4e:ac:31:65:0c:d8:1b:86:32:f8:
30:17:10:60:02:eb:27:67:eb:c2:75:5e:7c:d7:41:
d8:b4:17:59:e6:70:f6:dd:34:cf:1e:63:5f:c7:b9:
50:66:83:02:7d:1e:77:f2:2f:f8:85:2f:30:c3:34:
06:a3:75:ce:13:88:8d:1c:b3:9a:11:40:5b:99:76:
70:1a:26:9f:c6:53:4d:54:a1:27:a9:19:2f:92:22:
19:35:87:e2:f4:f8:0d:22:f9:f2:af:a2:08:14:f7:
86:f1:ad:86:af:c1:07:39:89:62:f1:81:01:38:bb:
99:31:08:16:7d:f7:99:ae:e2:3b:53:75:25:33:43:
b3:7f:ee:06:c7:79:f9:18:5e:b1:d4:2a:a9:bd:f3:
9a:63:df:1b:04:85:b4:00:dd:0f:0e:01:29:2e:ac:
41:02:27:1f:9e:fb:ff:12:e1:c1:c7:07:d9:91:c5:
6b:d1:71:dd:7c:32:61:0b:67:5d:23:f4:89:b8:65:
5b:60:19:34:b4:ca:0b:c5:40:e2:68:c6:f7:26:9e:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:23:5D:47:1D:E8:E1:5F:2E:D8:E6:20:5B:45:65:05:23:8F:11:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LiNdRx3o4V8u2OYgW0VlBSOPEV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:d8:7f:b8:7f:b8:03:b5:ec:f2:9f:a6:be:80:9b:29:51:d6:
66:0d:83:5d:2a:95:b5:f1:4a:35:e2:03:4f:13:2d:27:c5:23:
f9:91:67:ed:93:69:32:1c:9a:6a:f2:36:13:cb:38:16:38:f3:
8e:f2:21:4d:42:00:b9:7c:11:97:c8:9f:ec:0b:cb:e8:64:23:
d1:72:80:9c:32:77:94:ce:1f:9e:a3:da:68:01:46:7f:c6:4f:
96:aa:69:01:1c:c0:f6:a0:d7:ec:6d:b3:58:44:aa:42:db:cf:
8b:f1:fd:2d:57:6b:25:53:34:d0:1c:58:48:bc:42:e5:11:91:
f9:1e:34:ee:e6:cc:e1:57:db:67:7e:4f:87:70:1e:17:c8:3f:
f9:12:22:aa:57:f2:ce:25:f6:86:9d:2d:2d:a2:3f:30:2e:60:
cd:d6:91:da:76:cc:b9:84:e4:b6:8b:c1:e5:77:8a:ea:7f:39:
6a:6d:91:ab:eb:fd:b6:07:af:88:7a:c7:00:8f:2c:ae:29:c7:
1f:53:ca:bf:d6:1f:ec:00:f9:3a:84:fd:68:90:6e:ef:9f:91:
d8:ed:1f:e1:c8:6a:22:fc:39:eb:07:51:25:01:d2:39:c0:04:
f1:3a:97:9f:8b:d9:53:9e:93:f9:74:7c:64:cc:53:d9:e0:69:
43:5c:43:ff
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEZ3jHhzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIw
MzEwMDgyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmUyMzVkNDcxZGU4
ZTE1ZjJlZDhlNjIwNWI0NTY1MDUyMzhmMTE1ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJc5UWRfG9UCe/oc30vA7KHMQ0EdUkky8EBUaFp2blN/KJgH
gk3zcKhSNKqD3yC9fHdOrDFlDNgbhjL4MBcQYALrJ2frwnVefNdB2LQXWeZw9t00
zx5jX8e5UGaDAn0ed/Iv+IUvMMM0BqN1zhOIjRyzmhFAW5l2cBomn8ZTTVShJ6kZ
L5IiGTWH4vT4DSL58q+iCBT3hvGthq/BBzmJYvGBATi7mTEIFn33ma7iO1N1JTND
s3/uBsd5+RhesdQqqb3zmmPfGwSFtADdDw4BKS6sQQInH577/xLhwccH2ZHFa9Fx
3XwyYQtnXSP0ibhlW2AZNLTKC8VA4mjG9yaeQlsCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQuI11HHejhXy7Y5iBbRWUFI48RXTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0xpTmRSeDNvNFY4dTJPWWdXMFZsQlNPUEVWMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCx2H+4f7gDtezyn6a+gJspUdZmDYNdKpW18Uo1
4gNPEy0nxSP5kWftk2kyHJpq8jYTyzgWOPOO8iFNQgC5fBGXyJ/sC8voZCPRcoCc
MneUzh+eo9poAUZ/xk+WqmkBHMD2oNfsbbNYRKpC28+L8f0tV2slUzTQHFhIvELl
EZH5HjTu5szhV9tnfk+HcB4XyD/5EiKqV/LOJfaGnS0toj8wLmDN1pHadsy5hOS2
i8Hld4rqfzlqbZGr6/22B6+IescAjyyuKccfU8q/1h/sAPk6hP1okG7vn5HY7R/h
yGoi/DnrB1ElAdI5wATxOpefi9lTnpP5dHxkzFPZ4GlDXEP/
-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:28 2025 by rpki-client