Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LwTlY1Q21aGE6Vux5nrYYaOXAwo.roa
File: LwTlY1Q21aGE6Vux5nrYYaOXAwo.roa (raw, json)
Hash identifier: edO/56zStbeIFgl/KoQLVnSRLZ1VFDMFK8eVoM0T278=
Subject key identifier: 2F:04:E5:63:54:36:D5:A1:84:E9:5B:B1:E6:7A:D8:61:A3:97:03:0A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01881BAC7FA8810A76CE82CB834A254D92FD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LwTlY1Q21aGE6Vux5nrYYaOXAwo.roa
Signing time: Sun 14 May 2023 19:11:09 +0000
ROA not before: Sun 14 May 2023 19:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1b:ac:7f:a8:81:0a:76:ce:82:cb:83:4a:25:4d:92:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 14 19:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f04e5635436d5a184e95bb1e67ad861a397030a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e3:7f:81:02:77:46:37:e8:12:f2:e0:69:04:
31:d6:59:90:5f:4a:e1:2f:1a:c9:ed:8c:0e:b5:f5:
52:44:92:98:f0:67:bf:dd:6f:73:75:e6:24:e3:fa:
58:4a:d0:c6:0b:74:f5:38:10:e1:da:5c:fd:06:e7:
97:27:8c:c7:74:88:32:5b:7a:44:6a:3f:ad:24:e2:
42:ab:d4:f1:3e:30:2d:a4:55:43:61:3a:33:7b:72:
db:3f:32:75:32:e6:50:7c:3d:85:43:ba:09:ea:f7:
f6:e6:33:73:85:6b:ef:c6:0a:e2:fb:1d:bd:0f:40:
8d:29:8b:2a:34:f0:78:6d:24:10:87:bd:c4:be:ac:
7d:e5:dd:bf:41:61:7f:5c:8e:96:a9:fa:4d:da:89:
dc:d0:f9:80:86:2a:e3:96:cc:66:a8:6d:e1:ea:0d:
fd:f4:89:6b:66:92:d6:25:45:3b:c4:bb:ea:27:59:
4f:fa:68:69:a1:65:29:41:19:f0:99:58:19:e9:5a:
d4:5c:4c:a9:a2:f7:c1:e7:9c:70:44:50:d6:ad:c9:
d8:b0:0f:f2:52:2c:d1:91:d5:e2:89:89:78:3f:2c:
d3:85:60:38:ef:37:b0:ae:38:fe:38:ac:4d:a1:8b:
4a:e0:90:8b:a4:dc:c6:20:82:41:72:28:eb:0e:68:
ad:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:04:E5:63:54:36:D5:A1:84:E9:5B:B1:E6:7A:D8:61:A3:97:03:0A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LwTlY1Q21aGE6Vux5nrYYaOXAwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:ea:f2:11:d1:39:63:8e:f8:16:da:13:e8:22:b2:b1:8e:1a:
d8:09:26:84:b9:48:df:52:32:56:c0:29:a3:0d:43:27:63:b3:
26:6f:4e:cc:5e:3c:27:0c:70:e5:f1:8b:d9:39:b6:87:50:bc:
2e:76:98:53:df:02:c6:3a:e3:0e:8b:3c:b9:3a:bb:a4:d2:29:
de:63:3c:a3:88:1a:7a:5a:35:1c:8d:c6:d7:18:3f:3e:b4:55:
53:23:32:5b:16:79:8e:8f:ca:7f:94:82:3b:53:de:ba:53:a6:
02:9e:0f:09:9a:be:8d:0f:6d:02:7f:8a:7e:f2:d4:b5:59:db:
1c:94:24:b2:c6:4b:33:ca:f7:e6:74:12:75:90:03:d7:6c:2c:
36:7a:c1:8a:cb:f8:d6:3c:28:64:10:8d:80:62:48:29:71:d1:
e5:d2:97:04:c4:53:51:d7:30:f2:bd:de:5e:9e:cb:bb:75:1d:
af:f3:13:f1:fd:86:3b:f6:de:af:08:c4:62:d0:be:9b:2f:83:
8b:e1:fd:bd:e5:a5:11:97:2d:c2:06:4c:70:6c:dd:a1:ca:0f:
1b:51:30:61:53:10:c3:88:24:d7:03:71:78:b5:1a:84:97:28:
fd:b5:f6:7b:4c:a5:ba:84:09:5e:61:c1:26:cf:b2:52:e7:c6:
34:04:de:2c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgbrH+ogQp2zoLLg0olTZL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTE0MTkxMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjA0ZTU2MzU0MzZkNWExODRlOTViYjFlNjdhZDg2MWEzOTcwMzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmON/gQJ3RjfoEvLgaQQx1lmQX0rh
LxrJ7YwOtfVSRJKY8Ge/3W9zdeYk4/pYStDGC3T1OBDh2lz9BueXJ4zHdIgyW3pE
aj+tJOJCq9TxPjAtpFVDYToze3LbPzJ1MuZQfD2FQ7oJ6vf25jNzhWvvxgri+x29
D0CNKYsqNPB4bSQQh73Evqx95d2/QWF/XI6WqfpN2onc0PmAhirjlsxmqG3h6g39
9IlrZpLWJUU7xLvqJ1lP+mhpoWUpQRnwmVgZ6VrUXEypovfB55xwRFDWrcnYsA/y
UizRkdXiiYl4PyzThWA47zewrjj+OKxNoYtK4JCLpNzGIIJBcijrDmitMwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC8E5WNUNtWhhOlbseZ62GGjlwMKMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTHdUbFkxUTIxYUdFNlZ1eDVucllZYU9YQXdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGDq8hHROWOO+BbaE+gi
srGOGtgJJoS5SN9SMlbAKaMNQydjsyZvTsxePCcMcOXxi9k5todQvC52mFPfAsY6
4w6LPLk6u6TSKd5jPKOIGnpaNRyNxtcYPz60VVMjMlsWeY6Pyn+UgjtT3rpTpgKe
Dwmavo0PbQJ/in7y1LVZ2xyUJLLGSzPK9+Z0EnWQA9dsLDZ6wYrL+NY8KGQQjYBi
SClx0eXSlwTEU1HXMPK93l6ey7t1Ha/zE/H9hjv23q8IxGLQvpsvg4vh/b3lpRGX
LcIGTHBs3aHKDxtRMGFTEMOIJNcDcXi1GoSXKP219ntMpbqECV5hwSbPslLnxjQE
3iw=
-----END CERTIFICATE-----
Generated at Thu May 1 18:44:56 2025 by rpki-client