Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lhYUjQh22yG1KiSP0oHJIY9I8b4.roa
File: lhYUjQh22yG1KiSP0oHJIY9I8b4.roa (raw, json)
Hash identifier: /2EEgnAaAeCxYeR/LCXvkIFRkKFVOmUN8RrzYf4u+/8=
Subject key identifier: 96:16:14:8D:08:76:DB:21:B5:2A:24:8F:D2:81:C9:21:8F:48:F1:BE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187DD02D4D40169F1621481C349D10C8C48
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lhYUjQh22yG1KiSP0oHJIY9I8b4.roa
Signing time: Tue 02 May 2023 15:09:22 +0000
ROA not before: Tue 02 May 2023 15:09:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dd:02:d4:d4:01:69:f1:62:14:81:c3:49:d1:0c:8c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 15:09:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9616148d0876db21b52a248fd281c9218f48f1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1d:94:66:32:25:21:1b:48:d7:6d:5d:f8:d5:
d6:74:c3:36:1c:2f:4b:b0:8b:7c:1c:39:dd:c8:9a:
10:f2:75:c4:7a:dd:65:2c:a6:82:28:2e:61:dc:10:
ba:6e:ab:cb:a2:d5:f4:2f:96:10:99:cd:e0:c5:05:
26:00:87:b5:98:9f:a0:44:35:a3:34:d7:e4:c1:09:
d0:bd:3b:4f:31:67:78:5e:a3:93:45:5e:4c:c7:8c:
93:ea:61:ee:24:d3:56:f2:0a:c4:d5:5e:d8:5b:e3:
ae:9b:c1:27:fd:d2:07:01:2a:b1:e1:7b:dd:56:bc:
df:3f:97:be:6e:d3:2c:83:0a:bf:26:60:70:dc:6e:
9d:bf:37:e4:fa:05:2d:03:2a:2f:47:7a:0c:ad:42:
ef:17:b8:6d:4d:a3:09:84:c2:fa:71:b0:fb:9c:9b:
10:72:2b:79:7b:66:d4:ad:7e:b0:9b:f7:db:c4:ef:
9f:16:7a:26:a7:96:79:e4:8e:62:fe:d5:ed:31:3f:
d5:68:b9:46:96:99:d9:28:3b:2c:73:78:99:9d:a8:
05:7e:75:98:f0:58:00:fd:14:37:d8:11:ce:dc:72:
f6:24:79:1f:c4:63:e8:fe:01:a7:21:c3:1b:40:ed:
66:18:55:45:78:e1:61:a8:0e:36:13:39:1f:1a:8a:
28:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:16:14:8D:08:76:DB:21:B5:2A:24:8F:D2:81:C9:21:8F:48:F1:BE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lhYUjQh22yG1KiSP0oHJIY9I8b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:3e:f3:ae:4a:f5:a0:e8:51:87:12:3d:99:f2:75:8c:17:e9:
78:c2:02:25:e3:1e:71:71:08:71:d2:fa:0f:21:ac:26:6e:14:
70:3f:38:12:e2:b0:d0:37:fd:fd:a0:d0:55:06:e9:1c:18:77:
2e:87:bc:65:3e:3b:ba:cb:a9:cb:39:9c:50:41:e6:d1:e1:00:
26:c9:6a:d3:a5:b9:2b:89:d9:42:99:23:f8:5f:b6:d4:07:89:
15:70:40:78:75:ca:40:01:2b:f8:f8:15:ed:54:ca:c9:a9:4b:
29:39:48:66:fc:f3:e3:2d:d2:53:8c:14:2a:c2:a0:d9:1d:6d:
7d:75:76:7d:bc:72:93:39:1e:74:b3:4f:ac:64:08:a5:56:ba:
72:c6:84:f0:4d:82:7b:dc:bf:a1:87:f8:00:2b:b6:ea:b3:27:
85:79:70:97:cb:4c:71:35:89:10:5d:91:c2:40:7a:71:78:7b:
c7:9f:1b:c8:48:2a:ff:92:cb:94:6b:c6:7d:e7:b6:70:ed:7b:
d4:1e:ff:75:27:cc:94:df:7e:f9:70:d7:67:2a:e3:41:69:b6:
a0:b7:b3:3a:4a:48:ff:07:bf:92:26:53:6b:6e:30:0a:1f:71:
4c:53:23:92:c8:67:59:a8:91:16:c2:1e:be:7a:14:c4:16:cd:
63:eb:6b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:28:59 2025 by rpki-client