Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LyzyUY-1u-T8OVDfJt41jzar0hI.roa
File: LyzyUY-1u-T8OVDfJt41jzar0hI.roa (raw, json)
Hash identifier: 9yc6oeojnFh7k7VKrPZz8+pcNdNe03FCRffwXyrLMiw=
Subject key identifier: 2F:2C:F2:51:8F:B5:BB:E4:FC:39:50:DF:26:DE:35:8F:36:AB:D2:12
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C86B81935D168A08BCC81B1F3C069458
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LyzyUY-1u-T8OVDfJt41jzar0hI.roa
Signing time: Fri 28 Apr 2023 15:11:41 +0000
ROA not before: Fri 28 Apr 2023 15:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c8:6b:81:93:5d:16:8a:08:bc:c8:1b:1f:3c:06:94:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 28 15:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f2cf2518fb5bbe4fc3950df26de358f36abd212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7b:a5:42:90:46:da:3c:e5:4c:04:55:a4:e0:
41:00:66:da:da:a2:81:f1:5d:c4:23:ef:68:37:16:
8b:55:d2:fb:af:da:49:79:05:ce:41:1e:85:4b:ba:
f6:ad:90:1d:9e:b8:a8:96:a8:b3:cb:8c:cc:8a:8d:
d2:15:23:40:e1:4f:3c:69:48:ef:95:8b:74:fa:22:
bc:79:7c:71:42:e8:35:0d:04:c6:65:e4:35:03:eb:
70:81:d2:cd:b5:26:58:b7:df:b9:c5:07:fd:4f:40:
a4:b6:a2:ca:b8:43:e2:5b:d5:47:6e:d7:6e:e4:18:
6d:b5:d2:f6:9b:9f:0f:e5:d8:cb:91:f0:33:cb:34:
bf:7f:f2:4b:44:45:0f:55:b3:3f:02:51:c1:55:dd:
32:70:ee:15:d0:dd:25:ff:92:b0:8d:39:a3:d6:75:
ee:94:50:4a:24:12:df:c0:00:c3:33:ca:0b:ed:b8:
87:3a:a9:d9:d5:f8:2c:bb:f3:16:32:88:7e:c6:58:
95:4d:35:c8:66:5e:7f:73:c6:4d:b3:e5:ed:d1:fa:
02:ff:22:db:f8:e0:d6:35:73:fe:52:d5:cf:12:9c:
c2:53:39:ca:36:39:7b:5c:09:52:88:e3:f3:a0:94:
70:5e:fe:82:2e:42:40:c0:14:06:ff:3a:fa:b0:b2:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2C:F2:51:8F:B5:BB:E4:FC:39:50:DF:26:DE:35:8F:36:AB:D2:12
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LyzyUY-1u-T8OVDfJt41jzar0hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:05:82:6c:e3:53:4f:4b:fd:da:fd:fb:10:df:e1:ca:84:50:
ab:33:2d:d2:3c:32:5a:72:25:8b:d5:d1:35:f6:0c:d0:40:c1:
fd:5b:36:d6:cb:e5:e8:b0:38:fc:aa:1f:13:f4:60:67:56:28:
9b:90:dc:d9:4c:ed:34:a0:c3:42:c4:9b:dc:e7:ba:16:f7:56:
a9:9b:da:59:d9:23:59:69:52:c6:55:87:02:58:ae:3d:53:da:
e9:aa:d8:11:d4:21:b1:44:88:c4:d3:89:0e:7e:03:1f:08:21:
09:1a:b1:95:32:bd:b7:e1:20:cf:e5:c1:e4:8b:ba:1f:01:22:
76:ca:6e:3c:3a:b7:62:18:66:57:9a:0c:f5:35:b5:83:96:ec:
d3:40:71:f3:4f:d9:cb:d4:58:e2:ce:9a:f8:9e:ad:6e:fe:11:
28:b8:4a:ce:70:71:46:1f:05:ae:64:22:ef:bb:95:31:12:2f:
a0:58:6d:c2:f6:b8:9e:68:70:60:25:bb:45:e9:4b:21:b8:ab:
df:37:29:6b:69:c8:49:b1:74:93:51:2c:ef:de:d7:76:2d:90:
72:71:5b:4c:c5:d5:41:90:65:b0:a8:0c:f1:9e:d5:79:2b:74:
88:dd:1e:1d:cb:55:e3:d8:b3:a1:14:ce:5f:0c:ca:a7:f3:3c:
db:5f:ba:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:56:04 2025 by rpki-client