Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lz_eXrz5G42PNJIb32MbZhBVYdg.roa
File: Lz_eXrz5G42PNJIb32MbZhBVYdg.roa (raw, json)
Hash identifier: Ew+pBgyo3zoNijzZpYuYLoZnwizxVk6JiOkjkZeNdbk=
Subject key identifier: 2F:3F:DE:5E:BC:F9:1B:8D:8F:34:92:1B:DF:63:1B:66:10:55:61:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01879A1245F8F621051DC3154A09C21D246C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lz_eXrz5G42PNJIb32MbZhBVYdg.roa
Signing time: Wed 19 Apr 2023 15:11:41 +0000
ROA not before: Wed 19 Apr 2023 15:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9a:12:45:f8:f6:21:05:1d:c3:15:4a:09:c2:1d:24:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 19 15:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f3fde5ebcf91b8d8f34921bdf631b66105561d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0c:45:c2:89:99:7b:86:2b:fb:ae:e4:c3:13:
2d:36:27:ea:8f:61:57:ad:6b:7c:0b:5e:eb:5a:2b:
63:07:a6:e1:38:97:c0:e3:a0:78:5b:d0:b8:76:f7:
57:86:2a:3d:b9:39:17:6a:c2:9c:e4:d4:0b:24:98:
68:40:43:56:e5:1b:40:c3:1a:54:d6:ec:b0:f1:77:
db:f8:83:61:01:72:b5:cf:1d:cf:da:f0:77:06:a6:
e5:6b:c0:7b:d6:57:0c:ba:08:2b:55:bf:08:7c:f6:
c7:3b:c6:85:61:4a:85:09:a0:f7:10:f4:7d:24:3a:
bd:f9:b7:70:31:01:e9:cd:2b:c2:fb:c7:ea:76:9b:
b2:58:50:be:78:b3:a2:4d:59:45:9b:2f:79:de:d1:
ea:8b:ef:fe:52:9d:0f:46:ac:38:7e:26:09:b0:cf:
ee:15:f6:07:17:29:4d:21:ce:6a:4b:a8:d6:0e:b7:
87:c9:0d:ef:f5:cb:54:89:6a:37:cd:9b:55:6d:4f:
d8:51:51:85:f9:f8:cf:a6:b3:ae:f5:f7:8b:35:ca:
ba:57:00:1d:43:cf:e8:ac:73:5b:19:62:a2:00:fc:
dd:9d:d9:32:2a:6a:8e:df:36:59:3f:25:d9:f0:cc:
27:13:5f:59:8a:c1:23:27:a4:49:97:64:85:70:16:
b7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3F:DE:5E:BC:F9:1B:8D:8F:34:92:1B:DF:63:1B:66:10:55:61:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Lz_eXrz5G42PNJIb32MbZhBVYdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:22:ef:51:cc:32:18:e6:08:56:5d:b5:d8:0f:37:34:98:35:
81:84:c3:e0:f1:06:53:2f:50:6b:0a:85:16:2b:34:c6:c5:8b:
f4:bc:04:2c:2c:1b:90:a4:0c:f7:0b:5d:b2:c3:a7:d4:5f:e4:
b0:38:8c:2f:3d:97:6d:a3:5a:28:2c:5b:61:86:97:00:b3:c3:
a1:3f:63:4e:63:59:c6:ae:aa:35:f6:c2:8d:9a:b3:b3:48:44:
7a:81:e0:ae:f4:dc:d7:5b:cc:43:e5:47:f6:b8:98:4c:8f:11:
a8:1f:23:a8:d4:dd:ae:03:94:46:cd:f9:45:f9:ac:33:0f:df:
07:3e:83:25:50:cd:2d:e7:38:f9:71:2f:5e:b2:f2:8c:75:b4:
25:36:e3:ee:31:c2:37:ae:0a:e1:91:66:89:d9:0d:6e:c7:f0:
2a:9a:2e:98:08:04:d3:1f:f5:73:81:9c:d8:99:c9:23:15:be:
ba:14:3b:ba:67:4b:b6:56:2d:bd:94:1a:1a:d6:b4:0b:e9:19:
87:bf:d1:91:fb:ae:2c:33:d0:85:f2:00:b6:ab:d8:3a:b9:09:
29:41:79:37:61:e1:ce:26:66:55:19:76:70:6a:7b:7c:78:f1:
32:f1:0f:02:15:50:ce:cc:fa:3c:5b:03:5c:6c:55:dd:37:2b:
3a:17:92:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:03:09 2025 by rpki-client