Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lWRNVx-1IImchVSrBm9FbHddtAU.roa
File: lWRNVx-1IImchVSrBm9FbHddtAU.roa (raw, json)
Hash identifier: VcKdKLRLgfBivTAZEa+1dIlDRSR4Mw++scrSvd9URow=
Subject key identifier: 95:64:4D:57:1F:B5:20:89:9C:85:54:AB:06:6F:45:6C:77:5D:B4:05
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895308C7FDD64EC51B1D2B41FFD7C0A893
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lWRNVx-1IImchVSrBm9FbHddtAU.roa
Signing time: Fri 14 Jul 2023 06:13:51 +0000
ROA not before: Fri 14 Jul 2023 06:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:53:08:c7:fd:d6:4e:c5:1b:1d:2b:41:ff:d7:c0:a8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 06:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95644d571fb520899c8554ab066f456c775db405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:8e:22:90:02:f1:77:65:a4:4c:90:cc:79:
e5:05:f7:94:b6:04:47:23:97:c0:3c:cd:8b:54:c5:
59:d9:92:88:a6:78:20:8b:2d:7b:cb:51:20:f9:5d:
5f:15:20:9c:92:10:39:55:b0:5c:2c:29:15:db:29:
ae:3d:3d:b5:8e:1a:42:73:a0:8a:57:53:56:b9:ca:
c0:55:ad:5b:05:0d:c7:d1:f6:98:65:18:93:ee:c0:
6e:2a:19:3c:63:c8:7b:f2:55:25:e3:35:43:a3:6b:
14:9f:f8:2b:bb:a9:ed:a3:57:da:e2:a0:61:d5:d0:
fd:cd:a4:62:45:93:82:98:34:74:8d:f2:9a:d4:c6:
33:ed:ad:d2:81:45:e4:b0:cb:f1:b9:51:d0:26:4e:
e2:3f:c1:df:31:6e:47:fd:1c:aa:75:2b:c8:a4:b2:
d4:ab:9a:50:6f:1e:9b:dd:4e:e2:ba:21:5c:1a:ba:
85:42:17:e1:0e:5f:dd:5d:fc:de:f2:32:94:61:6c:
4b:55:6e:30:98:9b:a5:e3:ae:78:ca:d8:c4:68:d1:
82:47:d9:0c:26:d3:e9:21:49:cc:64:c3:73:72:3a:
e5:3f:5b:07:e9:17:ee:86:de:93:9e:fe:2d:57:5c:
fa:2c:c9:c3:41:88:ee:d9:cb:65:a4:9b:d6:48:e2:
97:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:64:4D:57:1F:B5:20:89:9C:85:54:AB:06:6F:45:6C:77:5D:B4:05
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lWRNVx-1IImchVSrBm9FbHddtAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:12:8a:8b:78:fb:bb:16:61:23:12:48:3e:9b:36:f1:d5:1a:
78:c4:69:ed:83:b3:7f:97:df:b0:d5:67:e0:fd:4a:db:3e:4d:
40:1c:43:cb:f5:46:22:a3:91:17:63:2d:9b:01:20:a3:9e:b6:
e3:85:2f:0f:de:cf:28:f1:f7:f9:7e:a5:71:ea:2d:c4:16:88:
c0:71:47:1e:7c:0b:58:47:9b:35:80:d4:f0:89:76:6f:d8:e7:
bf:76:4b:2a:10:4c:c7:a9:e8:cf:44:ae:70:a6:86:e3:8e:14:
f4:d7:f2:cc:bd:84:ff:9a:54:8b:55:b4:02:12:fe:4d:d4:5b:
0b:ed:96:7a:bd:18:e5:ad:cc:50:ec:43:f2:a1:94:ba:dc:54:
57:31:62:bf:80:5d:64:40:32:e6:3e:67:af:78:56:c2:f6:05:
17:dd:b1:04:db:3c:a3:ab:64:e3:48:cc:5a:b0:5a:67:51:2e:
27:49:ad:1f:8f:3f:82:8d:84:94:05:9c:ae:7a:14:95:7c:1d:
b9:cb:12:de:76:d8:25:c6:38:ff:15:12:16:2d:33:9c:06:03:
20:7e:05:84:ff:66:c9:bf:d0:2a:93:86:76:af:e0:0c:68:ba:
d7:d8:5e:c1:e9:ed:ed:a0:71:f1:a3:fd:80:ec:40:b0:d2:8b:
45:b1:18:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:31:58 2025 by rpki-client