Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LkBZ9hRGMGL89rNEWDvYYy51V_E.roa
File: LkBZ9hRGMGL89rNEWDvYYy51V_E.roa (raw, json)
Hash identifier: YjsbpxiFK4d4ZEXp2MvtBkHJJ3+bh2GmIC0zUy1Eve8=
Subject key identifier: 2E:40:59:F6:14:46:30:62:FC:F6:B3:44:58:3B:D8:63:2E:75:57:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01858AD4D49E111A171219A5D92C849F7972
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LkBZ9hRGMGL89rNEWDvYYy51V_E.roa
Signing time: Sat 07 Jan 2023 06:04:41 +0000
ROA not before: Sat 07 Jan 2023 06:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:8ad4:7d7b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8a:d4:d4:9e:11:1a:17:12:19:a5:d9:2c:84:9f:79:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 7 06:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e4059f614463062fcf6b344583bd8632e7557f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c8:40:1c:10:a4:52:7a:7f:3a:83:75:89:c5:
71:bb:23:04:77:bc:eb:23:b5:38:34:20:06:d5:68:
ba:a7:be:57:08:f7:70:ed:9b:6e:a3:b3:f0:39:a4:
6c:a5:e6:29:24:b0:6e:6e:5f:f4:2e:4a:f9:e9:58:
b3:4e:d4:89:40:39:db:df:2c:e4:e2:71:ad:f6:7a:
bd:2f:c2:e9:b0:a8:a8:6e:d0:1a:ce:83:fa:c4:25:
cf:c4:67:c4:35:a6:ed:f3:07:1c:27:76:9b:51:fb:
a9:c1:4f:0d:5e:5a:13:a5:11:7c:60:fb:39:f3:f2:
cd:03:37:82:9d:79:b1:5a:1d:64:8b:06:86:20:86:
87:96:1e:a1:54:02:03:d4:38:73:17:92:1e:82:f9:
f1:52:f8:70:a0:30:5b:ef:80:73:20:cd:bd:66:26:
8f:5b:3e:10:01:d7:6d:5f:dd:02:9c:82:f6:c1:32:
fa:ae:39:92:7b:1f:5f:e2:35:03:a3:1e:43:4d:18:
7f:fd:bb:ca:30:cc:dc:eb:77:0d:4a:d0:b0:a2:49:
61:37:1b:5c:99:29:ca:03:48:96:4e:bf:ad:89:1a:
75:78:99:a5:62:e0:81:ad:69:12:b5:9e:17:44:3f:
d6:30:d7:8d:69:91:28:b5:b3:ca:68:93:d8:ae:77:
3f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:40:59:F6:14:46:30:62:FC:F6:B3:44:58:3B:D8:63:2E:75:57:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LkBZ9hRGMGL89rNEWDvYYy51V_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:5b:e1:6e:89:54:01:2e:90:f1:64:98:5c:55:1b:fc:48:35:
13:81:c9:51:2d:61:e0:7b:6a:e7:05:66:ab:86:25:d0:77:4c:
db:cb:8b:8c:5c:c5:3c:14:3e:8c:44:b9:fc:53:99:df:c6:dd:
62:61:40:fe:53:d7:41:ac:ef:18:81:61:2a:ef:49:da:cf:20:
e1:44:02:8b:5a:74:9a:18:1a:ab:f0:54:ac:9e:9d:f4:8b:79:
fa:a5:da:14:60:f1:03:7c:03:4b:b3:10:52:52:6a:10:39:e9:
75:ad:9b:10:75:f0:ad:aa:99:38:58:57:17:7e:b9:df:68:cb:
d2:1e:9a:ed:e6:26:57:35:8d:81:3b:9a:70:d3:3d:dd:f1:17:
95:3c:0d:3c:08:45:01:50:05:a0:01:9c:fd:47:15:22:73:60:
c8:2b:7a:3d:26:71:93:c2:bc:56:55:2d:8e:15:42:db:cb:5a:
5e:0f:8a:08:fe:ae:03:5c:7c:30:33:1f:4b:ef:33:70:31:e1:
a9:e4:a6:b9:7e:98:9b:c9:81:9a:0b:f8:76:c5:6b:84:d9:cd:
ec:61:d5:5e:3b:cc:29:94:cb:cc:31:76:d5:d9:63:60:2d:34:
6f:88:67:a6:09:28:24:9b:e1:7c:0c:a0:96:13:ad:6c:23:70:
76:5d:55:7e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWK1NSeERoXEhml2SyEn3lyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTA3MDYwNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTQwNTlmNjE0NDYzMDYyZmNmNmIzNDQ1ODNiZDg2MzJlNzU1N2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlshAHBCkUnp/OoN1icVxuyMEd7zr
I7U4NCAG1Wi6p75XCPdw7Ztuo7PwOaRspeYpJLBubl/0Lkr56VizTtSJQDnb3yzk
4nGt9nq9L8LpsKiobtAazoP6xCXPxGfENabt8wccJ3abUfupwU8NXloTpRF8YPs5
8/LNAzeCnXmxWh1kiwaGIIaHlh6hVAID1DhzF5IegvnxUvhwoDBb74BzIM29ZiaP
Wz4QAddtX90CnIL2wTL6rjmSex9f4jUDox5DTRh//bvKMMzc63cNStCwoklhNxtc
mSnKA0iWTr+tiRp1eJmlYuCBrWkStZ4XRD/WMNeNaZEotbPKaJPYrnc/PwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC5AWfYURjBi/PazRFg72GMudVfxMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTGtCWjloUkdNR0w4OXJORVdEdllZeTUxVl9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHJb4W6JVAEukPFkmFxV
G/xINROByVEtYeB7aucFZquGJdB3TNvLi4xcxTwUPoxEufxTmd/G3WJhQP5T10Gs
7xiBYSrvSdrPIOFEAotadJoYGqvwVKyenfSLefql2hRg8QN8A0uzEFJSahA56XWt
mxB18K2qmThYVxd+ud9oy9Iemu3mJlc1jYE7mnDTPd3xF5U8DTwIRQFQBaABnP1H
FSJzYMgrej0mcZPCvFZVLY4VQtvLWl4Pigj+rgNcfDAzH0vvM3Ax4ankprl+mJvJ
gZoL+HbFa4TZzexh1V47zCmUy8wxdtXZY2AtNG+IZ6YJKCSb4XwMoJYTrWwjcHZd
VX4=
-----END CERTIFICATE-----
Generated at Fri May 2 19:52:37 2025 by rpki-client