Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lX-Ltzcjcdx_S3eOeCu_NP4lHZM.roa
File: lX-Ltzcjcdx_S3eOeCu_NP4lHZM.roa (raw, json)
Hash identifier: /5T3gITOijjg8fDgqXXXe5N2vUCRlcgEO0g7pqI3ydM=
Subject key identifier: 95:7F:8B:B7:37:23:71:DC:7F:4B:77:8E:78:2B:BF:34:FE:25:1D:93
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186755CBE1FB5402E0AA037FE27CDEB1D59
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lX-Ltzcjcdx_S3eOeCu_NP4lHZM.roa
Signing time: Tue 21 Feb 2023 19:04:17 +0000
ROA not before: Tue 21 Feb 2023 19:04:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:755c:a300/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:75:5c:be:1f:b5:40:2e:0a:a0:37:fe:27:cd:eb:1d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 19:04:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=957f8bb7372371dc7f4b778e782bbf34fe251d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:81:90:5a:33:cc:f3:74:02:b4:fd:c8:b2:
3f:e3:ff:9d:27:bd:73:0e:25:2b:8c:09:47:4e:1c:
94:6c:6f:69:bc:94:f3:47:c0:39:f3:3a:e5:3a:90:
f8:f0:b7:26:03:dc:73:fe:37:03:ea:21:98:3e:54:
11:49:bc:c5:9c:ce:90:cf:84:a8:92:50:e9:b2:78:
de:b1:f2:9b:c0:fa:12:2c:c4:75:50:c8:c2:19:41:
2c:4e:81:ef:f3:0f:c1:c3:19:3f:22:70:35:7d:dd:
75:b1:8b:c1:78:8d:74:a7:80:03:c6:a8:c5:16:e8:
3e:cd:8d:00:7f:33:8a:2f:61:81:65:af:8e:8b:ce:
66:c6:1e:8b:38:47:e1:da:72:d8:4c:f9:68:48:85:
75:fc:fd:5c:85:1e:84:94:3b:c4:2f:7b:2c:c2:a3:
98:64:7c:69:ed:45:07:ec:d7:19:dd:97:63:2b:04:
97:44:f5:f6:14:4e:1a:24:98:71:a0:5e:9c:98:7e:
68:19:87:be:1c:a9:d5:53:73:39:48:92:88:19:bb:
91:27:8c:af:3a:f4:aa:55:02:a9:2f:9a:8c:5b:6e:
15:98:1f:6f:60:07:58:dd:e1:b9:7c:7c:b5:f9:d3:
ae:18:c3:e1:33:9d:52:50:e4:8f:cf:5e:a2:ce:89:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7F:8B:B7:37:23:71:DC:7F:4B:77:8E:78:2B:BF:34:FE:25:1D:93
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lX-Ltzcjcdx_S3eOeCu_NP4lHZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:41:c1:61:cc:61:df:d1:32:7f:37:7b:59:df:b2:2b:d3:ba:
37:4f:88:7c:30:6a:06:45:4c:a4:18:01:bf:4a:b2:a9:5b:f6:
a3:0e:5e:c6:f2:7a:91:17:a2:eb:d4:5b:26:f1:5d:d0:73:17:
ab:4e:42:51:9e:33:98:66:48:99:65:a1:79:d2:3f:e5:73:91:
fe:73:9b:1d:bb:f3:57:dd:72:46:05:29:b8:fe:34:d4:dc:c1:
2d:68:6a:f5:ae:71:f3:e8:bd:6e:c1:c0:36:d1:51:8a:c4:f6:
d3:d5:bd:0b:44:d9:1c:1e:10:b4:19:b1:d7:9f:7a:18:35:b5:
76:e2:ce:2b:94:e5:e3:c7:02:b2:f2:36:7b:17:22:3c:cf:1c:
08:b5:64:52:a6:62:8a:72:91:50:c9:03:74:cd:68:88:1c:07:
81:04:48:19:1e:30:f3:06:19:63:95:97:b7:30:46:96:0f:74:
18:24:88:ed:cb:9b:81:3f:2d:63:0b:0d:a7:b0:7e:d2:fe:a7:
60:39:12:f2:8f:d6:15:09:5e:02:c6:8d:81:a3:59:d3:c8:57:
7a:17:fd:a1:20:8f:4f:46:38:c4:16:8f:55:78:80:6b:23:c5:
70:71:09:81:7c:6b:28:4f:76:41:03:9a:2f:ae:45:b5:ec:be:
41:65:88:d8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZ1XL4ftUAuCqA3/ifN6x1ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjIxMTkwNDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTdmOGJiNzM3MjM3MWRjN2Y0Yjc3OGU3ODJiYmYzNGZlMjUxZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6aBkFozzPN0ArT9yLI/4/+dJ71z
DiUrjAlHThyUbG9pvJTzR8A58zrlOpD48LcmA9xz/jcD6iGYPlQRSbzFnM6Qz4So
klDpsnjesfKbwPoSLMR1UMjCGUEsToHv8w/Bwxk/InA1fd11sYvBeI10p4ADxqjF
Fug+zY0AfzOKL2GBZa+Oi85mxh6LOEfh2nLYTPloSIV1/P1chR6ElDvEL3sswqOY
ZHxp7UUH7NcZ3ZdjKwSXRPX2FE4aJJhxoF6cmH5oGYe+HKnVU3M5SJKIGbuRJ4yv
OvSqVQKpL5qMW24VmB9vYAdY3eG5fHy1+dOuGMPhM51SUOSPz16izommowIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJV/i7c3I3Hcf0t3jngrvzT+JR2TMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbFgtTHR6Y2pjZHhfUzNlT2VDdV9OUDRsSFpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH9BwWHMYd/RMn83e1nf
sivTujdPiHwwagZFTKQYAb9Ksqlb9qMOXsbyepEXouvUWybxXdBzF6tOQlGeM5hm
SJlloXnSP+Vzkf5zmx2781fdckYFKbj+NNTcwS1oavWucfPovW7BwDbRUYrE9tPV
vQtE2RweELQZsdefehg1tXbiziuU5ePHArLyNnsXIjzPHAi1ZFKmYopykVDJA3TN
aIgcB4EESBkeMPMGGWOVl7cwRpYPdBgkiO3Lm4E/LWMLDaewftL+p2A5EvKP1hUJ
XgLGjYGjWdPIV3oX/aEgj09GOMQWj1V4gGsjxXBxCYF8ayhPdkEDmi+uRbXsvkFl
iNg=
-----END CERTIFICATE-----
Generated at Thu May 1 00:08:06 2025 by rpki-client