Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/laUXVQOCVRWJ0gO3w-BEl6X39ZM.roa
File: laUXVQOCVRWJ0gO3w-BEl6X39ZM.roa (raw, json)
Hash identifier: S8GonzSskd+NuUcuyllYCYC09/ukyaxFZ1SkW/jpNm8=
Subject key identifier: 95:A5:17:55:03:82:55:15:89:D2:03:B7:C3:E0:44:97:A5:F7:F5:93
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187367BC8DBBBEFA51FDE07AADC3875A364
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/laUXVQOCVRWJ0gO3w-BEl6X39ZM.roa
Signing time: Fri 31 Mar 2023 07:04:54 +0000
ROA not before: Fri 31 Mar 2023 07:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:187:367b:9dbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:7b:c8:db:bb:ef:a5:1f:de:07:aa:dc:38:75:a3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 07:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95a517550382551589d203b7c3e04497a5f7f593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:b3:1f:8c:17:04:ad:61:98:d3:be:2c:98:
e5:78:f4:f0:39:9f:13:5c:b4:1c:db:67:51:9d:cf:
91:69:dd:01:3a:d8:fd:89:8a:b1:55:43:ef:41:33:
6e:b2:b7:ef:bc:18:c9:ad:75:7c:1f:f2:fc:2f:7f:
75:c0:94:e1:ad:7d:c9:cb:75:0e:5c:c3:38:1e:09:
d4:d8:cc:91:60:71:b5:cf:1b:b3:24:cb:92:76:85:
bf:ed:d5:ad:7a:f0:e9:f6:04:b7:5f:6d:14:d8:16:
a6:ca:b6:a2:e9:e4:a6:4c:df:d6:1c:66:99:83:c6:
1d:a1:25:df:d9:2e:6c:32:ee:00:92:a1:94:37:2d:
10:20:3b:7e:d0:80:38:cb:1c:41:f6:dd:6c:ed:1a:
7e:ad:88:31:90:a7:92:ae:4e:8c:d5:5f:c6:8a:07:
4b:49:77:c5:7a:ef:94:d3:20:9a:e2:38:4a:e2:21:
e4:fc:8c:b7:57:b3:7b:38:75:e6:36:f5:39:81:30:
c0:dd:dc:44:01:fb:40:5c:82:6b:60:dc:dd:31:fb:
d6:f1:b8:c3:5b:33:fd:d2:28:2c:aa:5b:f6:cb:b5:
64:6e:e5:fb:94:59:3b:d8:98:63:ff:36:a8:89:9b:
2b:f6:24:0f:fb:a5:e9:b7:f4:c1:6e:25:5d:66:11:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A5:17:55:03:82:55:15:89:D2:03:B7:C3:E0:44:97:A5:F7:F5:93
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/laUXVQOCVRWJ0gO3w-BEl6X39ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:57:5c:f2:ec:ab:73:0d:12:2c:ea:6e:6d:51:3f:8a:92:df:
b5:a5:27:f6:76:8e:13:1d:b9:4a:25:fe:be:46:ba:34:47:d5:
09:aa:98:d4:5e:c6:00:bb:5b:ef:a1:dc:81:02:c7:19:4d:20:
25:06:f3:4a:ee:4a:d2:9c:10:40:55:b7:2b:f8:dd:33:bd:f0:
4b:03:f7:61:3c:1b:7d:bc:39:06:ee:88:93:ec:1e:0c:f9:bd:
d2:f1:dc:31:6d:42:7d:ba:75:67:9b:8f:9a:f8:3f:77:36:a1:
9e:ad:65:d0:85:cc:23:20:d8:bc:d7:05:0d:17:7a:e7:41:0c:
28:c2:2e:15:6b:4c:d6:0b:8a:4b:67:f3:39:5b:38:9e:41:c5:
98:af:c7:b5:c5:e5:6f:9a:98:79:92:88:d7:44:cf:5d:30:02:
ea:f8:49:46:42:bc:ca:36:21:c4:c8:d6:07:ef:00:37:bb:d3:
ab:21:fe:0c:72:24:91:4d:29:cd:73:01:fb:9f:8b:ff:45:73:
58:0a:fb:67:16:ac:70:42:98:0b:ac:00:5a:f0:74:a2:bd:98:
5a:2b:2b:91:60:3b:18:53:59:57:1c:87:b2:36:31:1f:6f:6e:
81:a1:a0:f6:11:cd:90:11:98:45:80:35:2f:40:30:f5:5a:f3:
3d:43:66:e0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYc2e8jbu++lH94Hqtw4daNkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzMxMDcwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWE1MTc1NTAzODI1NTE1ODlkMjAzYjdjM2UwNDQ5N2E1ZjdmNTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmKzH4wXBK1hmNO+LJjlePTwOZ8T
XLQc22dRnc+Rad0BOtj9iYqxVUPvQTNusrfvvBjJrXV8H/L8L391wJThrX3Jy3UO
XMM4HgnU2MyRYHG1zxuzJMuSdoW/7dWtevDp9gS3X20U2Bamyrai6eSmTN/WHGaZ
g8YdoSXf2S5sMu4AkqGUNy0QIDt+0IA4yxxB9t1s7Rp+rYgxkKeSrk6M1V/GigdL
SXfFeu+U0yCa4jhK4iHk/Iy3V7N7OHXmNvU5gTDA3dxEAftAXIJrYNzdMfvW8bjD
WzP90igsqlv2y7VkbuX7lFk72Jhj/zaoiZsr9iQP+6Xpt/TBbiVdZhGgLQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJWlF1UDglUVidIDt8PgRJel9/WTMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbGFVWFZRT0NWUldKMGdPM3ctQkVsNlgzOVpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFFXXPLsq3MNEizqbm1R
P4qS37WlJ/Z2jhMduUol/r5GujRH1QmqmNRexgC7W++h3IECxxlNICUG80ruStKc
EEBVtyv43TO98EsD92E8G328OQbuiJPsHgz5vdLx3DFtQn26dWebj5r4P3c2oZ6t
ZdCFzCMg2LzXBQ0XeudBDCjCLhVrTNYLiktn8zlbOJ5BxZivx7XF5W+amHmSiNdE
z10wAur4SUZCvMo2IcTI1gfvADe706sh/gxyJJFNKc1zAfufi/9Fc1gK+2cWrHBC
mAusAFrwdKK9mForK5FgOxhTWVcch7I2MR9vboGhoPYRzZARmEWANS9AMPVa8z1D
ZuA=
-----END CERTIFICATE-----
Generated at Fri May 2 20:04:19 2025 by rpki-client