Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LwtWjoz_vXdVDh6V10HrP2gHvcE.roa
File: LwtWjoz_vXdVDh6V10HrP2gHvcE.roa (raw, json)
Hash identifier: nznI1Z8SHPNcsNUpXhn1LVKRV1TamDylOScvzYIVlt0=
Subject key identifier: 2F:0B:56:8E:8C:FF:BD:77:55:0E:1E:95:D7:41:EB:3F:68:07:BD:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 68C3A0FC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LwtWjoz_vXdVDh6V10HrP2gHvcE.roa
Signing time: Mon 07 Feb 2022 21:04:16 +0000
ROA not before: Mon 07 Feb 2022 21:04:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1757651196 (0x68c3a0fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 7 21:04:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f0b568e8cffbd77550e1e95d741eb3f6807bdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f6:69:35:03:15:0b:45:43:1e:0e:1d:72:08:
13:4c:ba:87:94:77:4a:27:41:4d:74:f2:c6:80:e1:
c1:81:87:64:a8:5d:38:d8:3d:7b:81:c2:4c:d9:7e:
ae:6d:34:8d:29:dd:03:0e:27:f2:cc:60:67:89:19:
e0:f0:5f:ca:33:2d:7b:19:9d:b5:ad:5b:95:c4:c0:
ba:25:be:c6:e9:a3:cf:d4:04:c2:83:b1:85:7a:7e:
45:73:f6:60:a9:46:27:5b:dd:5d:02:e4:17:f6:a6:
f8:24:bc:15:99:b0:ff:3a:f3:aa:cf:61:43:5c:16:
13:0f:c6:48:bd:12:c6:6f:c7:46:27:c4:63:b9:6a:
1e:00:e9:58:c3:1f:9a:2e:06:04:44:f5:f0:45:1b:
9c:fd:3e:38:a8:67:fd:04:70:cb:dc:28:8d:c1:ae:
2e:9d:08:47:54:96:01:7b:dc:b4:c0:6f:98:ea:b4:
0e:03:84:82:3f:78:42:a5:7a:cd:e5:64:ac:24:73:
c7:aa:e0:3d:ba:ed:ea:d0:be:c5:94:d0:a7:b5:a6:
6d:bd:ee:7e:e2:a1:f7:89:2c:78:d0:65:5e:68:90:
d2:06:72:6b:79:4e:b0:f9:89:a2:bc:6a:00:56:3c:
5a:38:66:30:4b:1c:82:d5:a0:ee:f3:70:d7:d4:2d:
ce:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0B:56:8E:8C:FF:BD:77:55:0E:1E:95:D7:41:EB:3F:68:07:BD:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LwtWjoz_vXdVDh6V10HrP2gHvcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:cf:5a:1c:68:ed:4b:4c:e9:1c:3d:a3:b0:6a:85:ef:16:5e:
c4:39:b3:32:9a:87:bf:fa:5c:be:49:f1:cb:7d:82:a5:71:41:
7e:50:49:b6:e0:22:64:02:ae:a3:fd:d6:f8:e7:66:2a:c3:c3:
7a:60:cf:ed:6d:f5:46:85:f0:2a:43:97:e4:9e:4d:63:8c:a9:
0a:78:e4:10:13:a4:fb:39:4e:2d:05:92:8f:79:a3:f8:a4:a2:
12:78:cb:eb:a9:45:dd:5b:48:be:3e:c7:cc:35:c4:fb:82:5f:
7b:c9:9a:6a:9d:1c:76:9c:16:15:98:64:a8:34:4c:4e:fd:d1:
f7:20:71:24:2a:19:23:fa:87:ab:c0:b1:59:34:9e:7b:dd:6a:
aa:30:ea:98:73:22:a7:28:73:e2:9e:3f:35:ee:40:c7:e8:03:
97:89:62:77:4e:97:01:72:99:e5:8e:12:d9:f9:10:83:86:ac:
c4:ce:6e:c9:d0:8f:ae:3d:9d:c2:55:f0:99:37:0b:97:48:37:
f7:e8:cb:41:1e:01:33:46:17:ea:4a:58:d6:90:40:21:b5:b2:
62:f8:05:02:36:82:5e:54:ea:b9:78:b0:00:25:9f:fd:01:63:
a7:39:91:2e:56:77:8e:a0:52:c5:8f:72:8f:f6:e9:37:2f:45:
28:ca:e2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:58:22 2025 by rpki-client