Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lqgklyg9thcjBSzwaeL-bVa9Jx8.roa
File: Lqgklyg9thcjBSzwaeL-bVa9Jx8.roa (raw, json)
Hash identifier: okKEEb2vvdbw7Tp+G3vYak03+wVy9Qc/vy4jVls8EFw=
Subject key identifier: 2E:A8:24:97:28:3D:B6:17:23:05:2C:F0:69:E2:FE:6D:56:BD:27:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018673E4756FA93F4547B98EFC14CA6FE5D9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lqgklyg9thcjBSzwaeL-bVa9Jx8.roa
Signing time: Tue 21 Feb 2023 12:13:17 +0000
ROA not before: Tue 21 Feb 2023 12:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:e4:75:6f:a9:3f:45:47:b9:8e:fc:14:ca:6f:e5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 12:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ea82497283db61723052cf069e2fe6d56bd271f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:6c:13:ab:e5:47:6e:ac:b2:53:7f:45:76:
20:42:11:60:f3:8a:0b:9c:f6:93:2b:30:ed:ca:42:
7d:0d:c8:a0:ce:b5:c9:0a:17:fb:2d:40:31:4c:c8:
b0:0d:1d:6f:6a:53:b4:52:de:d2:32:67:98:83:f8:
e8:e3:2e:f7:fc:46:c2:80:93:2a:fd:22:2f:23:ae:
9a:a3:6e:53:c7:54:aa:99:61:35:3b:7b:d2:a2:f4:
b2:2d:54:d3:73:c4:e4:dc:a4:72:86:e9:0f:c3:a3:
36:ed:df:42:6f:ce:0f:5b:91:34:74:79:fe:51:18:
4a:a3:2b:9f:89:6d:c2:57:09:7d:cc:b8:e1:95:a9:
68:08:39:72:fc:80:0e:6d:cf:77:d4:09:4c:78:34:
9e:ba:95:09:46:6c:b9:df:f7:22:7f:e0:6c:24:df:
2e:59:c3:6a:74:5b:16:6f:50:56:49:ed:ca:e9:20:
7e:21:1a:e1:1f:04:08:f9:46:d2:3c:9b:41:91:51:
66:5a:35:d2:2f:e2:88:d8:2a:03:a6:14:9f:4c:ce:
f9:3d:49:4b:76:67:db:6c:60:5c:41:d5:e8:34:43:
2a:46:98:9d:a6:d9:c5:a7:8d:db:99:3b:15:5f:17:
14:90:06:57:3c:07:79:ea:b2:61:ed:02:f2:21:ad:
50:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A8:24:97:28:3D:B6:17:23:05:2C:F0:69:E2:FE:6D:56:BD:27:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lqgklyg9thcjBSzwaeL-bVa9Jx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:8c:9b:34:19:dc:03:9c:ac:69:77:f0:06:c2:64:b8:c4:10:
1a:a0:15:e3:5d:f8:46:17:0e:41:c5:cd:f7:7a:39:78:e4:a3:
a8:cf:c6:3e:d6:fa:fd:74:fb:4e:d5:42:73:42:11:45:bb:a4:
bd:24:d5:83:6a:62:f9:c6:e4:1e:53:56:49:ea:0a:0a:f1:4d:
97:e7:22:77:b2:da:aa:79:ea:00:25:56:6a:1f:52:b2:1f:6f:
be:14:1d:0e:7d:8b:b2:97:28:b9:12:16:f5:c4:15:ca:5c:27:
d7:0c:08:ab:cd:8b:24:9c:6d:73:da:c5:1e:a3:4b:1d:dc:02:
18:e2:74:53:ab:be:a6:dd:20:0f:ee:1e:bb:d5:1d:a5:ed:83:
27:0d:f7:85:4f:26:07:95:52:c5:86:e8:4a:c6:20:1e:69:90:
90:02:74:9f:f4:b7:b1:ec:95:03:eb:b8:60:39:37:88:97:a4:
8d:84:14:9e:1d:bf:47:ea:3f:51:d7:d8:8e:87:0c:b9:ac:28:
60:d9:69:1c:36:d6:92:89:7b:92:75:fc:b7:78:3c:9e:4d:97:
71:e4:ac:08:c4:e3:00:ef:98:64:32:36:64:e9:71:08:5b:4d:
fe:2e:52:e8:d3:1e:0c:95:66:8e:83:34:1c:00:57:c7:fc:06:
07:30:dc:74
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZz5HVvqT9FR7mO/BTKb+XZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjIxMTIxMzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWE4MjQ5NzI4M2RiNjE3MjMwNTJjZjA2OWUyZmU2ZDU2YmQyNzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov1sE6vlR26sslN/RXYgQhFg84oL
nPaTKzDtykJ9DcigzrXJChf7LUAxTMiwDR1valO0Ut7SMmeYg/jo4y73/EbCgJMq
/SIvI66ao25Tx1SqmWE1O3vSovSyLVTTc8Tk3KRyhukPw6M27d9Cb84PW5E0dHn+
URhKoyufiW3CVwl9zLjhlaloCDly/IAObc931AlMeDSeupUJRmy53/cif+BsJN8u
WcNqdFsWb1BWSe3K6SB+IRrhHwQI+UbSPJtBkVFmWjXSL+KI2CoDphSfTM75PUlL
dmfbbGBcQdXoNEMqRpidptnFp43bmTsVXxcUkAZXPAd56rJh7QLyIa1QLwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC6oJJcoPbYXIwUs8Gni/m1WvScfMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTHFna2x5Zzl0aGNqQlN6d2FlTC1iVmE5Sng4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKmMmzQZ3AOcrGl38AbC
ZLjEEBqgFeNd+EYXDkHFzfd6OXjko6jPxj7W+v10+07VQnNCEUW7pL0k1YNqYvnG
5B5TVknqCgrxTZfnIney2qp56gAlVmofUrIfb74UHQ59i7KXKLkSFvXEFcpcJ9cM
CKvNiyScbXPaxR6jSx3cAhjidFOrvqbdIA/uHrvVHaXtgycN94VPJgeVUsWG6ErG
IB5pkJACdJ/0t7HslQPruGA5N4iXpI2EFJ4dv0fqP1HX2I6HDLmsKGDZaRw21pKJ
e5J1/Ld4PJ5Nl3HkrAjE4wDvmGQyNmTpcQhbTf4uUujTHgyVZo6DNBwAV8f8Bgcw
3HQ=
-----END CERTIFICATE-----
Generated at Sat May 3 12:12:44 2025 by rpki-client