Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lZ1gGw_lMvW7TipKcRsFJTt7dCI.roa
File: lZ1gGw_lMvW7TipKcRsFJTt7dCI.roa (raw, json)
Hash identifier: XRf6iQ3AuvRuoybVczsc0kMQm0X0bucTgsbmN0yyjYk=
Subject key identifier: 95:9D:60:1B:0F:E5:32:F5:BB:4E:2A:4A:71:1B:05:25:3B:7B:74:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855D9594850BB66E73277F3CA8556A3F0E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lZ1gGw_lMvW7TipKcRsFJTt7dCI.roa
Signing time: Thu 29 Dec 2022 11:12:41 +0000
ROA not before: Thu 29 Dec 2022 11:12:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:95:94:85:0b:b6:6e:73:27:7f:3c:a8:55:6a:3f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 11:12:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=959d601b0fe532f5bb4e2a4a711b05253b7b7422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:eb:a3:bb:ba:48:10:14:8c:bd:bb:b1:ff:ff:
56:68:f5:8c:f6:c0:fc:dc:4b:46:b8:90:b8:3b:71:
53:74:2b:7d:7e:0a:c8:3e:ad:be:87:a5:6b:de:e6:
a8:89:b7:a2:81:85:bc:e5:80:1e:ef:69:46:e1:25:
d9:90:6f:05:24:4d:8e:73:74:c4:8a:33:66:a3:95:
65:c6:75:94:ec:c3:3a:81:09:bf:13:1c:96:c9:3c:
46:f8:dd:4b:2d:c4:d9:9f:88:fe:b8:ad:fd:bb:75:
8c:f0:c0:d3:5c:3b:51:dd:2d:7b:0f:0c:7d:2c:38:
de:7d:f9:4e:36:76:98:62:92:d7:01:c0:94:c7:3d:
97:db:b4:e8:49:6c:de:40:ad:44:15:d9:af:c1:9b:
67:78:8c:21:ef:a9:50:33:4f:47:e5:b7:50:3a:4d:
fc:12:a2:7d:65:ca:2f:52:ac:ca:08:7d:e6:76:17:
32:cc:d4:61:6e:ad:30:81:5c:f9:cb:a6:86:cc:74:
1f:53:e4:92:78:d3:ec:ce:3a:58:1a:58:d8:eb:2d:
4e:95:95:26:32:24:6f:9c:e5:07:1f:da:74:0f:85:
78:b1:d0:81:a2:93:80:3b:78:30:37:94:ee:5c:e5:
cd:63:ac:bf:65:ea:86:57:c4:e6:9e:fe:3f:28:c2:
0d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9D:60:1B:0F:E5:32:F5:BB:4E:2A:4A:71:1B:05:25:3B:7B:74:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lZ1gGw_lMvW7TipKcRsFJTt7dCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:ff:f0:fb:20:81:18:d1:38:84:26:81:bf:4d:f5:4b:f1:14:
d7:f1:b5:13:d6:dd:f5:38:e8:52:0b:40:5c:ca:ce:84:15:1c:
e2:c0:8c:4b:22:63:59:f6:d0:87:5e:8a:94:04:d8:0d:04:51:
61:10:9f:d0:7c:54:11:22:e0:a3:1e:3d:f2:18:27:09:f9:df:
df:d7:50:bd:b3:2c:ca:0d:cb:15:95:8d:7b:98:dc:a1:09:23:
5b:89:b5:b1:c8:72:45:3a:49:ff:86:7a:3f:51:83:52:c3:f0:
6c:44:ed:bb:5f:a9:3e:0c:66:8c:71:9c:4a:3c:8f:44:d2:77:
fd:86:68:70:26:be:2d:73:61:3b:ee:2b:2b:7c:e3:7d:b8:e9:
3f:fc:4d:20:c9:08:d8:87:b6:42:82:f1:d7:93:9b:65:72:14:
f6:6f:38:4b:44:12:88:db:0a:41:bf:dd:44:7a:55:93:fa:7b:
ad:dc:40:f9:f4:ce:a5:11:66:a4:0d:0b:76:b6:b0:e3:4a:16:
42:ea:4a:6c:a0:0e:56:a9:5d:18:3e:57:d5:ab:67:e6:7d:4f:
db:6e:4d:ea:c2:dd:23:f3:01:e1:02:71:80:c4:b3:8b:e8:aa:
6a:7c:fa:ae:81:6d:36:7b:b7:dc:b4:ea:9e:f5:34:34:cf:c6:
c2:09:b0:42
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVdlZSFC7Zucyd/PKhVaj8OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI5MTExMjQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTlkNjAxYjBmZTUzMmY1YmI0ZTJhNGE3MTFiMDUyNTNiN2I3NDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+uju7pIEBSMvbux//9WaPWM9sD8
3EtGuJC4O3FTdCt9fgrIPq2+h6Vr3uaoibeigYW85YAe72lG4SXZkG8FJE2Oc3TE
ijNmo5VlxnWU7MM6gQm/ExyWyTxG+N1LLcTZn4j+uK39u3WM8MDTXDtR3S17Dwx9
LDjefflONnaYYpLXAcCUxz2X27ToSWzeQK1EFdmvwZtneIwh76lQM09H5bdQOk38
EqJ9ZcovUqzKCH3mdhcyzNRhbq0wgVz5y6aGzHQfU+SSeNPszjpYGljY6y1OlZUm
MiRvnOUHH9p0D4V4sdCBopOAO3gwN5TuXOXNY6y/ZeqGV8Tmnv4/KMINGQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJWdYBsP5TL1u04qSnEbBSU7e3QiMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbFoxZ0d3X2xNdlc3VGlwS2NSc0ZKVHQ3ZENJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEX/8PsggRjROIQmgb9N
9UvxFNfxtRPW3fU46FILQFzKzoQVHOLAjEsiY1n20IdeipQE2A0EUWEQn9B8VBEi
4KMePfIYJwn539/XUL2zLMoNyxWVjXuY3KEJI1uJtbHIckU6Sf+Gej9Rg1LD8GxE
7btfqT4MZoxxnEo8j0TSd/2GaHAmvi1zYTvuKyt843246T/8TSDJCNiHtkKC8deT
m2VyFPZvOEtEEojbCkG/3UR6VZP6e63cQPn0zqURZqQNC3a2sONKFkLqSmygDlap
XRg+V9WrZ+Z9T9tuTerC3SPzAeECcYDEs4voqmp8+q6BbTZ7t9y06p71NDTPxsIJ
sEI=
-----END CERTIFICATE-----
Generated at Thu May 1 08:45:14 2025 by rpki-client