Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lZS_S0KItzI84TmHFy89m7__YKA.roa
File: lZS_S0KItzI84TmHFy89m7__YKA.roa (raw, json)
Hash identifier: eJMKPKtlg6Z6qXp5Mt/wLO4XjJ5x2NY2ePzy3+HaxI4=
Subject key identifier: 95:94:BF:4B:42:88:B7:32:3C:E1:39:87:17:2F:3D:9B:BF:FF:60:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C341C7CD3769710B7809FE650DBED126
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lZS_S0KItzI84TmHFy89m7__YKA.roa
Signing time: Wed 08 Mar 2023 22:05:13 +0000
ROA not before: Wed 08 Mar 2023 22:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:c340:ff9d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c3:41:c7:cd:37:69:71:0b:78:09:fe:65:0d:be:d1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 22:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9594bf4b4288b7323ce13987172f3d9bbfff60a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:b4:40:26:e2:2e:08:56:a3:a2:b3:8c:80:
9a:bf:08:79:6e:ae:c2:76:73:78:6d:65:b3:10:9e:
d3:cf:42:d0:6a:46:7a:76:59:dc:0f:dc:54:4b:ed:
bb:f6:66:e1:83:05:8e:c4:a2:3e:e0:a8:fe:d0:4b:
0a:20:a7:26:0f:46:89:bd:42:22:9f:b5:fc:29:b6:
e1:a4:d5:40:d9:71:a7:96:78:48:48:51:3e:cf:80:
d0:8a:40:5c:a8:e4:1d:78:21:92:01:7d:3a:0b:9c:
9f:da:db:f2:e6:a3:66:15:5d:45:5e:e9:16:41:98:
86:82:b4:ee:a9:b1:89:96:92:f4:a5:a9:ed:9d:35:
23:e1:74:a8:f0:1b:2c:64:f5:b1:36:9d:04:0d:5c:
4b:39:b8:6d:33:61:9f:42:d4:92:e7:3f:ab:6f:fa:
b9:8c:4b:86:b8:b9:3a:87:2a:5c:83:8d:29:a9:61:
95:1e:4f:2d:f4:e0:28:d9:97:63:55:83:01:57:34:
06:06:15:cb:90:88:3d:c1:ce:7b:d3:2c:e7:3a:f0:
a1:4f:21:69:f9:5f:6e:75:7a:a7:76:2b:ca:5d:26:
30:e4:92:e5:0c:2d:ef:b4:00:33:24:33:73:ae:91:
00:83:e4:5c:02:88:6c:cf:42:a3:b7:6f:9b:a4:df:
1a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:94:BF:4B:42:88:B7:32:3C:E1:39:87:17:2F:3D:9B:BF:FF:60:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lZS_S0KItzI84TmHFy89m7__YKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:2b:ec:18:71:f1:2f:11:67:57:f0:86:06:84:51:5c:6c:c1:
dd:bf:c5:62:51:94:b1:e6:e5:66:a0:02:8b:c3:e8:f6:c8:9c:
9a:22:5f:55:6e:e8:b5:f2:16:22:71:83:49:08:56:dc:46:6c:
d2:c3:32:d2:4d:be:7d:9e:23:a5:c4:49:0b:96:26:c0:9a:f0:
e8:16:b8:7d:8b:b7:7b:1b:61:31:51:e8:02:0f:79:7d:31:32:
aa:7f:da:cd:45:12:93:89:f7:79:8a:a0:35:ef:5a:8f:55:d3:
0c:bd:0f:93:97:fe:6b:38:30:3c:3c:f9:20:ae:d7:01:65:1e:
fb:21:96:de:1a:56:e4:d0:68:e5:0d:59:d5:21:c6:b1:95:2e:
7a:d9:7a:95:c4:c8:72:6c:15:01:e3:8e:8c:ec:89:6c:36:a8:
dd:f0:6a:b7:e9:06:92:dc:e0:d8:78:8e:c9:cd:5f:e0:37:9d:
dd:1a:fc:d5:d7:2f:af:36:ba:34:fa:6e:5f:60:15:55:ef:36:
ec:fe:fc:55:a4:28:63:5d:d2:a1:4a:6c:ae:2a:ad:c8:bd:f4:
a1:6b:72:21:4f:dc:29:aa:04:bc:6b:e9:87:82:4d:b3:ef:36:
8f:77:50:aa:0e:1b:43:2e:52:99:d9:42:19:f2:11:d0:9d:8a:
1f:b3:5f:2b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbDQcfNN2lxC3gJ/mUNvtEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA4MjIwNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTk0YmY0YjQyODhiNzMyM2NlMTM5ODcxNzJmM2Q5YmJmZmY2MGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO+0QCbiLghWo6KzjICavwh5bq7C
dnN4bWWzEJ7Tz0LQakZ6dlncD9xUS+279mbhgwWOxKI+4Kj+0EsKIKcmD0aJvUIi
n7X8KbbhpNVA2XGnlnhISFE+z4DQikBcqOQdeCGSAX06C5yf2tvy5qNmFV1FXukW
QZiGgrTuqbGJlpL0pantnTUj4XSo8BssZPWxNp0EDVxLObhtM2GfQtSS5z+rb/q5
jEuGuLk6hypcg40pqWGVHk8t9OAo2ZdjVYMBVzQGBhXLkIg9wc570yznOvChTyFp
+V9udXqndivKXSYw5JLlDC3vtAAzJDNzrpEAg+RcAohsz0Kjt2+bpN8alQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJWUv0tCiLcyPOE5hxcvPZu//2CgMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbFpTX1MwS0l0ekk4NFRtSEZ5ODltN19fWUtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF8r7Bhx8S8RZ1fwhgaE
UVxswd2/xWJRlLHm5WagAovD6PbInJoiX1Vu6LXyFiJxg0kIVtxGbNLDMtJNvn2e
I6XESQuWJsCa8OgWuH2Lt3sbYTFR6AIPeX0xMqp/2s1FEpOJ93mKoDXvWo9V0wy9
D5OX/ms4MDw8+SCu1wFlHvshlt4aVuTQaOUNWdUhxrGVLnrZepXEyHJsFQHjjozs
iWw2qN3warfpBpLc4Nh4jsnNX+A3nd0a/NXXL682ujT6bl9gFVXvNuz+/FWkKGNd
0qFKbK4qrci99KFrciFP3CmqBLxr6YeCTbPvNo93UKoOG0MuUpnZQhnyEdCdih+z
Xys=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:41 2025 by rpki-client