Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LyLXxyBASx8yyxWfEAexAEHpb7A.roa
File: LyLXxyBASx8yyxWfEAexAEHpb7A.roa (raw, json)
Hash identifier: H0UQ3taWnfVtNYo9xzFDLMEktL0PpS8HlYsSMzDLJVg=
Subject key identifier: 2F:22:D7:C7:20:40:4B:1F:32:CB:15:9F:10:07:B1:00:41:E9:6F:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187681162949105092ABBC1F34528BA01E6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LyLXxyBASx8yyxWfEAexAEHpb7A.roa
Signing time: Sun 09 Apr 2023 22:09:42 +0000
ROA not before: Sun 09 Apr 2023 22:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:68:11:62:94:91:05:09:2a:bb:c1:f3:45:28:ba:01:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 9 22:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f22d7c720404b1f32cb159f1007b10041e96fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9a:7c:f2:cd:ac:b1:e5:d7:55:0f:c0:d2:70:
67:60:56:a7:d1:36:ac:33:52:39:04:9c:14:36:cb:
a3:2b:86:fe:26:27:8c:ef:94:29:5b:56:6b:f4:84:
56:3b:95:be:4d:4e:33:10:53:c1:7e:e3:1d:0b:e9:
c4:41:2d:06:d0:c0:e4:18:10:fd:dd:9b:e9:52:55:
ec:8c:b0:21:c2:a1:88:ff:3c:0e:d0:82:1f:fd:8f:
0b:48:a7:b4:4c:9f:65:8f:3c:ce:d3:7a:14:b9:63:
89:e5:d7:e2:04:bf:ef:90:57:72:b6:01:f8:31:47:
cc:4b:0d:e8:32:11:94:ad:9c:e1:88:ac:50:38:a0:
5c:24:53:fb:40:2d:e3:9d:8c:98:52:d3:29:b5:48:
f9:3a:63:ec:6d:52:48:c3:00:5d:7c:18:17:b5:82:
6e:84:ae:2f:af:95:a7:7a:3d:0c:dc:1e:ce:16:97:
29:9f:e5:70:b4:05:bb:98:29:55:4a:4e:ff:e6:b3:
bc:e7:34:d1:75:e9:83:b7:97:28:d5:59:49:aa:f8:
d8:94:e5:17:63:9e:ac:29:0a:c0:d7:64:00:b2:19:
99:a0:9b:4b:79:68:2b:35:c7:3b:dc:ad:4e:25:d1:
ae:fe:43:95:1f:f9:ec:0d:04:89:74:e4:fc:94:27:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:22:D7:C7:20:40:4B:1F:32:CB:15:9F:10:07:B1:00:41:E9:6F:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LyLXxyBASx8yyxWfEAexAEHpb7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:da:b3:af:f9:af:e9:3c:b1:c4:f1:8b:9e:94:6f:cc:9b:04:
b0:08:55:60:82:1b:eb:6b:4a:1a:f0:79:89:08:d7:eb:d9:ab:
87:de:d9:ee:6d:88:b3:e9:51:3f:04:c7:9c:b8:81:7d:08:49:
9d:e3:c8:ee:05:31:2e:ea:a1:17:d3:cc:d1:98:bb:53:15:ef:
5d:bb:2c:6a:50:0b:9e:c1:ee:25:48:ab:cd:bb:c7:bb:6e:d7:
74:60:f2:cf:ab:c7:12:b9:f6:ac:03:42:09:c5:9c:5a:9b:ec:
09:b7:81:72:f7:ce:a1:26:75:4a:c3:b4:92:63:1f:be:cd:1b:
88:45:48:d1:95:a4:4e:2c:71:6b:47:96:74:d1:07:dd:67:9f:
33:a1:b3:87:c3:0e:01:9f:b3:73:54:79:e4:be:0e:f0:ec:8b:
8d:61:b3:70:6f:94:9f:35:3b:c6:af:1d:88:d2:e7:2b:47:93:
38:6a:d4:ae:d1:db:89:69:fa:4a:1e:51:b2:3f:ce:5d:fc:2c:
cd:cd:fb:05:0b:92:c7:88:e2:e6:86:f3:4b:db:52:68:51:30:
e1:b3:64:66:9c:93:63:37:bf:25:1a:10:ca:5b:63:64:22:41:
df:25:9b:2b:3d:30:49:7c:1e:04:7d:2b:14:36:f8:73:cc:1e:
15:74:1a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:52:44 2025 by rpki-client