Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lNL9Vs9Wmy6n2n-NmB0k_pF0IH4.roa
File: lNL9Vs9Wmy6n2n-NmB0k_pF0IH4.roa (raw, json)
Hash identifier: yFCpINe2ETjTw6/54rU4FlJfSDkpimzHgf5SQwuECBQ=
Subject key identifier: 94:D2:FD:56:CF:56:9B:2E:A7:DA:7F:8D:98:1D:24:FE:91:74:20:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 86B52FAC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lNL9Vs9Wmy6n2n-NmB0k_pF0IH4.roa
Signing time: Mon 23 May 2022 22:05:29 +0000
ROA not before: Mon 23 May 2022 22:05:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:f2f3:4635/128 maxlen: 128
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2260021164 (0x86b52fac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 23 22:05:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94d2fd56cf569b2ea7da7f8d981d24fe9174207e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4c:fb:ad:c3:61:d1:65:86:11:86:e6:b5:d2:
5d:04:8e:e4:a1:1b:7d:eb:13:bd:12:3d:08:81:66:
92:66:7e:3a:aa:d0:e5:09:6b:4f:41:1d:63:ef:d3:
ef:74:83:f9:5c:46:b9:0d:95:5a:34:88:e9:dd:82:
ae:f8:e6:c4:69:91:a9:5c:27:69:18:4a:b6:22:63:
ea:e4:c8:26:36:2b:37:50:2c:47:45:c8:62:b8:af:
2c:68:bf:48:4f:9c:a5:1e:b3:6c:90:3e:f0:12:9d:
b8:9b:5e:b4:4a:37:75:84:ec:83:6e:51:d6:f5:02:
c2:f5:01:07:d3:57:74:6f:20:35:ef:60:65:46:40:
b5:69:2a:d0:7c:04:83:02:4e:b6:ef:0a:df:27:50:
14:a8:22:05:b0:f1:1d:52:e2:e2:cb:cc:e4:ea:06:
b1:23:c7:ff:66:8b:7e:a4:09:0b:2c:53:21:72:d7:
30:04:06:60:34:c2:f6:94:ee:59:cc:20:1a:f9:d3:
70:15:30:10:85:69:80:0e:6d:77:54:c7:ab:42:16:
48:b3:21:63:3f:d7:76:c1:a6:58:15:5e:fe:3f:35:
a3:ba:55:4c:ba:fe:80:d3:e3:85:e2:4b:70:d1:93:
72:26:7a:07:ed:3f:c9:40:98:86:ca:76:a3:b2:30:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D2:FD:56:CF:56:9B:2E:A7:DA:7F:8D:98:1D:24:FE:91:74:20:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lNL9Vs9Wmy6n2n-NmB0k_pF0IH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:3c:26:8d:bf:29:38:2a:5e:21:43:42:e7:87:71:a1:db:7a:
d6:01:76:86:03:f0:34:03:b6:d1:cd:e5:5a:dc:6b:9e:59:39:
6c:38:95:00:a5:0a:12:c2:69:dd:42:8f:47:4f:8c:41:ba:13:
9c:59:7a:62:75:16:b3:9a:c3:c8:77:54:d5:df:d3:68:7b:15:
17:b8:cd:36:09:14:01:c7:3f:3c:5f:ce:0c:04:33:cf:85:52:
6e:5f:de:65:5b:7a:e0:3f:a1:04:ec:a4:aa:bc:81:6a:c0:18:
0c:72:10:22:18:12:52:77:09:39:ba:54:2f:bc:a5:f8:0c:92:
f4:45:85:65:b1:9a:28:ec:3e:60:ec:28:4b:81:d2:86:77:1b:
2a:d3:6e:52:b6:2a:59:64:c0:72:d8:34:03:bc:f6:ff:86:39:
89:c0:67:51:aa:75:61:78:45:90:83:5c:23:36:79:89:ce:b0:
21:f0:75:0b:91:e6:cf:d4:34:d6:ef:87:48:ae:75:96:18:fd:
14:3f:4c:ed:38:f6:d4:21:5a:e0:5f:33:fe:4e:e2:9c:a3:cd:
a5:a8:41:bb:62:ed:44:95:55:22:e5:3b:27:f9:92:ea:f4:15:
e2:4f:b1:db:bf:14:6e:f2:8b:1d:8d:92:a3:c0:fc:36:d0:49:
91:50:5a:90
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIa1L6wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MjMyMjA1MjlaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDk0ZDJmZDU2Y2Y1
NjliMmVhN2RhN2Y4ZDk4MWQyNGZlOTE3NDIwN2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxTPutw2HRZYYRhua10l0EjuShG33rE70SPQiBZpJmfjqq
0OUJa09BHWPv0+90g/lcRrkNlVo0iOndgq745sRpkalcJ2kYSrYiY+rkyCY2KzdQ
LEdFyGK4ryxov0hPnKUes2yQPvASnbibXrRKN3WE7INuUdb1AsL1AQfTV3RvIDXv
YGVGQLVpKtB8BIMCTrbvCt8nUBSoIgWw8R1S4uLLzOTqBrEjx/9mi36kCQssUyFy
1zAEBmA0wvaU7lnMIBr503AVMBCFaYAObXdUx6tCFkizIWM/13bBplgVXv4/NaO6
VUy6/oDT44XiS3DRk3ImegftP8lAmIbKdqOyMCM7AgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUlNL9Vs9Wmy6n2n+NmB0k/pF0IH4wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9sTkw5VnM5V215Nm4ybi1ObUIwa19wRjBJSDQucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEATDwmjb8pOCpeIUNC54dxodt61gF2hgPwNAO2
0c3lWtxrnlk5bDiVAKUKEsJp3UKPR0+MQboTnFl6YnUWs5rDyHdU1d/TaHsVF7jN
NgkUAcc/PF/ODAQzz4VSbl/eZVt64D+hBOykqryBasAYDHIQIhgSUncJObpUL7yl
+AyS9EWFZbGaKOw+YOwoS4HShncbKtNuUrYqWWTActg0A7z2/4Y5icBnUap1YXhF
kINcIzZ5ic6wIfB1C5Hmz9Q01u+HSK51lhj9FD9M7Tj21CFa4F8z/k7inKPNpahB
u2LtRJVVIuU7J/mS6vQV4k+x278UbvKLHY2So8D8NtBJkVBakA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:53 2025 by rpki-client