Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/laYQ4R2cCSQuWYiOaVXF6vS64FA.roa
File: laYQ4R2cCSQuWYiOaVXF6vS64FA.roa (raw, json)
Hash identifier: fRRzLwlMqtGFgoA6Dbc8q5A0q+C6VWepyt/Qoj/h1Uk=
Subject key identifier: 95:A6:10:E1:1D:9C:09:24:2E:59:88:8E:69:55:C5:EA:F4:BA:E0:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185402D30E6EED5CB1CDB82C63221C102B7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/laYQ4R2cCSQuWYiOaVXF6vS64FA.roa
Signing time: Fri 23 Dec 2022 18:09:41 +0000
ROA not before: Fri 23 Dec 2022 18:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:40:2d:30:e6:ee:d5:cb:1c:db:82:c6:32:21:c1:02:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 23 18:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95a610e11d9c09242e59888e6955c5eaf4bae050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:dd:f1:50:ee:c5:5a:34:63:b2:fb:89:8e:
ec:91:8a:7e:75:3c:e8:17:38:1b:ba:2f:e3:d0:d9:
db:9d:3d:b6:bf:d6:bf:6a:d8:f8:05:63:32:a2:82:
70:b3:e3:06:59:90:5c:45:cb:0b:bc:41:2f:72:6a:
77:23:db:b3:0b:a4:d0:e8:ee:60:e8:e9:cb:fe:e1:
01:f1:90:73:ca:27:a1:7e:ea:c9:21:cb:a9:ab:5f:
8c:4d:0c:00:16:ef:9d:da:51:ff:87:0d:2c:23:8b:
38:4b:d6:69:a2:a0:9e:de:41:45:fe:c1:8e:e0:e5:
35:28:c0:8c:3e:c6:57:41:bd:02:aa:83:db:e6:a0:
f6:31:85:79:17:e4:a6:97:26:b7:b7:cb:cd:54:d1:
fa:5f:e7:78:dd:8d:5a:d2:2c:34:d8:dd:bd:ae:5f:
ad:0b:e6:66:35:56:b8:63:cd:eb:55:9f:d3:be:6b:
72:c4:ae:f1:60:67:e2:31:27:7e:ee:ee:a9:05:24:
28:0d:f6:f1:b0:8b:71:ed:52:0a:a1:ff:79:44:a3:
a6:3f:f0:d7:a0:2e:b9:cd:e7:7a:6c:46:62:d5:f1:
55:4e:28:93:6a:dc:d9:8f:03:b5:16:5e:a8:9d:84:
6c:da:f4:87:fa:ae:98:27:da:8e:9e:5b:88:09:c8:
76:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A6:10:E1:1D:9C:09:24:2E:59:88:8E:69:55:C5:EA:F4:BA:E0:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/laYQ4R2cCSQuWYiOaVXF6vS64FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:f9:6d:bd:de:8c:85:bd:2a:80:8d:03:11:d1:a6:56:c5:f2:
be:b8:ce:e1:aa:fb:b5:d7:9a:8b:a8:3f:b5:c0:d2:91:27:36:
11:69:3d:42:2b:82:4d:bd:d4:a0:c2:e0:e5:c2:7e:3d:de:2a:
d2:ae:cd:9f:3b:8e:fd:1c:b5:96:47:25:26:53:32:e5:d7:2d:
91:2a:5f:df:3a:7a:23:39:53:39:a6:ef:6c:e3:57:65:e7:7f:
d8:8d:ee:1a:78:5b:67:49:53:a9:b7:04:cd:dc:1c:f7:fe:c2:
a0:a3:9c:d5:e9:bf:50:43:91:a1:54:63:be:49:ff:8f:cb:12:
0b:5f:f4:e1:b6:32:c8:fd:29:4c:7a:ea:f6:08:c8:4b:c6:89:
0c:70:aa:92:cb:b2:df:b2:be:ec:55:53:cd:0b:26:00:da:69:
e3:5c:0e:50:d2:6c:f0:df:63:e2:fa:40:4c:0c:f4:1f:0a:0a:
8f:c7:21:f6:b7:62:65:cb:99:a2:8b:74:dd:d3:9d:b5:d5:4c:
d2:9f:ba:82:b7:23:72:bb:da:f0:0b:82:a9:33:b5:d8:7b:81:
11:fe:94:46:f7:61:95:d1:11:35:d8:7d:6a:6a:a4:b4:32:92:
f2:e5:a5:6a:0d:18:48:e7:95:c3:ac:79:4b:ce:70:ff:71:ca:
f6:6d:08:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:33:23 2025 by rpki-client