Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lYeLBtJ8qS7WyyYbwqvQ0cPJ2WA.roa
File: lYeLBtJ8qS7WyyYbwqvQ0cPJ2WA.roa (raw, json)
Hash identifier: ZQ0/ocFzQLMPtteYmUIGUO+EWwpKvlGtQKAftH7LzC0=
Subject key identifier: 95:87:8B:06:D2:7C:A9:2E:D6:CB:26:1B:C2:AB:D0:D1:C3:C9:D9:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C9ECF111E02F803FBE0B48AB9B21F06D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lYeLBtJ8qS7WyyYbwqvQ0cPJ2WA.roa
Signing time: Fri 28 Apr 2023 22:12:41 +0000
ROA not before: Fri 28 Apr 2023 22:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c9:ec:f1:11:e0:2f:80:3f:be:0b:48:ab:9b:21:f0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 28 22:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95878b06d27ca92ed6cb261bc2abd0d1c3c9d960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ad:05:b2:bc:e2:71:ae:7c:dd:b6:df:a1:bc:
63:aa:a8:94:37:36:7e:a0:d2:06:67:ea:3c:28:14:
67:0b:97:b7:c1:c9:7b:d4:21:fe:f1:13:79:5d:00:
18:e8:b2:30:ce:d3:00:2c:61:2d:e1:1d:18:32:c5:
38:e2:0e:64:c3:88:bd:86:b0:41:c6:d0:7e:ec:81:
44:f0:38:99:8b:ed:b5:9d:d6:14:73:2e:49:e6:a5:
dd:f4:7d:7f:ae:17:e6:31:e0:18:68:6f:56:f4:ea:
03:b4:4d:b3:bc:fc:ce:56:2e:f5:2c:e3:00:fc:9d:
ee:75:62:a3:82:89:43:1e:1c:7b:af:64:e9:31:77:
c6:4a:fa:c4:83:2c:41:0b:f9:3c:ff:d5:46:a0:f8:
d9:6f:2b:c2:71:78:30:75:db:07:4b:34:a6:be:84:
43:ce:30:f0:2f:c7:7b:ca:6f:15:2c:90:01:72:c4:
5e:ba:82:5e:27:80:b8:ae:6a:d4:04:bb:fb:ba:43:
77:58:66:46:86:16:4c:27:e8:92:b0:5f:c4:32:96:
09:ac:96:09:02:8d:20:bd:93:91:ee:f8:53:b5:0a:
4e:22:c1:de:57:4c:3b:a8:a5:4d:68:cb:90:4d:0c:
8d:1b:69:3c:38:5a:b1:8a:5b:40:fe:1b:7c:3c:b8:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:87:8B:06:D2:7C:A9:2E:D6:CB:26:1B:C2:AB:D0:D1:C3:C9:D9:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lYeLBtJ8qS7WyyYbwqvQ0cPJ2WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:f6:21:8b:f9:27:de:04:f6:e3:da:24:09:b4:96:69:84:a5:
a9:79:16:fa:05:86:ab:1b:a6:1a:df:b3:a9:72:ad:02:73:ef:
83:b2:c2:e5:6b:cf:10:fd:7c:88:52:f0:5e:d6:02:c0:0d:0f:
f6:1e:6e:02:37:07:e5:32:bf:ec:56:c5:76:e9:a5:0d:79:57:
17:5f:b4:22:a3:3a:ed:2a:d0:52:70:f2:80:e4:d8:65:82:51:
73:ea:5f:cc:05:4c:09:cc:87:1c:10:91:fe:73:b1:16:75:9a:
b0:8f:29:e2:ce:39:8e:d5:a3:9a:2a:ad:42:1f:85:af:d6:a6:
32:f1:19:c4:9f:45:e3:a9:14:43:d2:32:4d:6b:c2:95:79:91:
83:9d:46:e2:54:5c:3b:dc:89:4d:3e:a3:2b:e0:4e:d2:5d:a2:
23:52:56:53:b7:6a:57:e9:75:6f:f8:e8:c1:08:db:53:07:68:
f3:98:c1:4c:61:bc:e0:cf:29:16:7a:71:94:30:04:6f:36:96:
ba:36:a2:d7:37:b1:29:1c:b5:e0:e3:f1:c0:69:7d:c2:03:d9:
2e:af:5b:36:09:fe:69:a1:b7:84:ac:e9:5d:93:b3:3d:a5:5d:
29:df:92:c9:2b:17:e7:dc:5e:23:77:1e:a9:02:d1:b8:a9:85:
fe:02:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 09:07:02 2025 by rpki-client