Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lb5KpRZ9gT5tNXMOIGuEPS7WJ6E.roa
File: lb5KpRZ9gT5tNXMOIGuEPS7WJ6E.roa (raw, json)
Hash identifier: gR07Z/F/eFLEtVafIRJNOFODg3qyQvBDmLNGhOr4oBo=
Subject key identifier: 95:BE:4A:A5:16:7D:81:3E:6D:35:73:0E:20:6B:84:3D:2E:D6:27:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E6432D2883FA649565C34E8EC9E61D79
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lb5KpRZ9gT5tNXMOIGuEPS7WJ6E.roa
Signing time: Wed 15 Mar 2023 17:13:27 +0000
ROA not before: Wed 15 Mar 2023 17:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e6:43:2d:28:83:fa:64:95:65:c3:4e:8e:c9:e6:1d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 17:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95be4aa5167d813e6d35730e206b843d2ed627a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:91:19:37:dd:a2:5b:5f:fb:d3:6d:f3:42:
b1:89:c8:69:06:70:75:00:1c:e7:fd:9f:50:24:90:
51:d0:7d:3e:69:15:20:8a:3f:c3:bc:8c:86:d5:46:
04:3c:12:df:7d:8a:e0:6d:8e:e6:fa:55:b0:85:85:
c6:23:68:b1:fe:ea:46:f6:dd:30:e9:10:e2:c6:7e:
3e:e8:cf:7f:c5:ef:b4:2b:76:b2:d9:cd:b5:3b:48:
a3:6e:20:84:45:89:86:75:10:1d:18:0c:98:1e:31:
97:bb:eb:a9:67:ca:bf:f1:7a:43:6f:43:9c:40:d5:
8a:b5:df:22:e5:2c:0b:14:0c:26:45:35:63:54:86:
be:19:30:9b:b9:51:91:4e:71:8d:9a:c4:38:49:6e:
55:85:68:2b:7d:73:0d:a4:82:da:f6:81:b5:6c:cc:
c5:e5:2f:9b:ac:60:af:13:04:84:96:7b:98:8e:64:
65:5c:06:c0:81:11:36:34:32:1d:22:28:b8:97:82:
60:42:b7:8c:dd:50:bf:8f:75:f7:ae:ab:26:7b:a7:
9a:15:c8:0a:42:2b:67:fd:7e:b0:53:33:19:86:89:
67:91:08:48:1c:e4:b7:46:6d:b1:ca:87:65:1c:62:
5f:b3:db:87:50:e9:07:15:fd:1a:12:82:cb:49:3a:
78:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BE:4A:A5:16:7D:81:3E:6D:35:73:0E:20:6B:84:3D:2E:D6:27:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lb5KpRZ9gT5tNXMOIGuEPS7WJ6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:78:97:64:45:90:da:18:05:6b:98:b8:3a:b1:b5:a0:7a:fa:
e7:72:5d:8f:4c:ea:ee:3d:4e:96:9c:37:b2:7b:20:88:2d:18:
f6:51:dc:f7:e0:86:0c:66:dc:ad:d9:38:5d:1d:10:d7:5d:31:
bc:49:0c:30:23:d6:69:16:a4:a4:62:8a:34:48:87:ef:94:61:
80:6d:ba:4f:c0:a8:41:2a:0d:6e:0c:f2:57:b3:51:a0:2b:bd:
4d:fa:0d:c0:30:c3:a3:ce:06:14:0b:da:20:45:a3:72:cc:a7:
f4:7c:63:68:83:4d:5d:ee:d3:9b:f4:f2:32:42:01:70:99:5d:
0b:57:34:4c:14:ba:42:20:26:89:3a:c4:49:81:88:ba:5c:b0:
17:ae:6e:33:07:1a:6e:ff:ef:35:58:3f:25:8d:a7:ba:04:86:
ec:de:ea:b7:86:a9:00:42:34:aa:1d:12:a4:3d:ef:68:64:5a:
20:87:78:6d:ba:2f:ed:b8:c3:cb:c6:16:0e:fd:1a:d9:c5:f6:
d0:38:32:40:a6:02:6e:62:da:a4:d4:fb:8a:ab:03:1d:8b:34:
87:4b:44:20:60:50:6b:4d:23:ee:8b:67:c8:b0:6c:94:88:fb:
a6:0b:27:33:c7:cf:4b:32:6b:0e:ae:8c:0a:34:59:77:8c:d9:
da:50:96:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:29:07 2025 by rpki-client