Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lipqe5cvQ_jBLMh4PmR6uee2MKQ.roa
File: lipqe5cvQ_jBLMh4PmR6uee2MKQ.roa (raw, json)
Hash identifier: ATSwYb9c6NWZ8p/MT77cChp4kzZorGd0xV+JNely4W8=
Subject key identifier: 96:2A:6A:7B:97:2F:43:F8:C1:2C:C8:78:3E:64:7A:B9:E7:B6:30:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1428AE2D45ECCBB85FC0CA9164147C7B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lipqe5cvQ_jBLMh4PmR6uee2MKQ.roa
Signing time: Sun 20 Aug 2023 18:15:24 +0000
ROA not before: Sun 20 Aug 2023 18:15:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:14:28:ae:2d:45:ec:cb:b8:5f:c0:ca:91:64:14:7c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 18:15:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=962a6a7b972f43f8c12cc8783e647ab9e7b630a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:8b:de:7f:0d:ca:67:55:e6:54:d0:58:b4:
cb:a6:bc:20:67:3f:69:19:52:29:a9:4b:65:9f:7b:
f8:e7:ce:ff:0d:e0:79:d4:ff:15:37:09:79:cb:7d:
72:37:80:89:d8:a8:76:36:9f:ce:cd:e6:80:c3:20:
99:11:c6:89:12:88:0b:74:34:4a:66:6a:6e:36:14:
1e:24:fd:2a:a9:77:12:da:ae:65:d1:17:7f:81:4a:
3f:3c:0c:d5:00:df:fc:14:f7:44:43:9c:b2:cc:3c:
87:8b:81:8d:86:1f:96:a4:b7:7c:75:55:2e:5b:2b:
44:c2:64:aa:1e:5b:af:e5:d1:ad:5c:81:77:56:33:
4a:b8:a3:67:38:7a:42:2a:7a:d4:ac:0c:79:c7:72:
bb:b3:29:b9:14:f2:79:65:47:95:10:9a:ae:eb:18:
f4:5c:e9:01:b3:e2:9f:62:18:e1:27:c8:a0:ed:5a:
60:ba:0e:1a:30:b9:8e:fc:19:e9:f8:3d:2b:84:da:
96:28:50:ee:51:2e:61:44:a0:03:a7:3a:ff:75:0f:
cb:01:0e:a3:9b:ee:ba:a4:29:51:1a:41:5a:4e:4e:
83:56:5e:7c:1d:5a:76:4d:ee:84:11:2d:7a:5c:97:
35:12:77:68:cb:88:49:84:6a:da:83:98:d4:93:e5:
3e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2A:6A:7B:97:2F:43:F8:C1:2C:C8:78:3E:64:7A:B9:E7:B6:30:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lipqe5cvQ_jBLMh4PmR6uee2MKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:e0:c9:52:93:a1:9a:b2:b5:29:26:ca:8f:cb:fc:7e:98:8d:
c0:6e:cc:fb:aa:60:a9:71:0c:af:0f:d8:dc:a2:82:86:26:fa:
c5:bc:44:46:15:6f:39:56:eb:1f:bf:4c:fd:52:89:c9:17:92:
4c:a7:35:22:2c:93:e7:45:e6:80:d1:9d:8a:aa:23:43:c4:52:
39:a7:00:66:dd:8c:9d:87:85:3a:a1:e5:a4:bb:7b:23:b5:5f:
36:fa:2d:8a:56:a0:c6:b3:4b:65:51:27:bb:69:4b:95:28:9a:
cd:5a:55:ab:50:6d:fc:ef:90:80:78:47:3c:3e:e8:12:d9:e8:
e1:7c:5f:f0:67:f0:b2:6a:a3:1a:7d:23:92:ad:e8:78:a6:74:
63:15:65:44:42:57:32:0c:a9:8a:25:12:f0:3b:e8:57:dc:4e:
30:ca:46:23:84:7e:d2:69:7a:41:cc:d7:d2:67:aa:8d:33:53:
13:1c:5d:7e:bc:96:a9:bd:bb:cc:97:37:e4:0e:a3:3d:db:f5:
67:75:b4:9e:06:d1:15:31:d3:c3:1d:a9:fb:50:33:98:27:1d:
cd:d6:ed:b9:f0:e0:9d:06:51:f7:c9:08:ce:22:53:1d:1c:c5:
32:c1:f9:c6:78:0a:6e:6d:0c:85:7a:3a:ef:02:93:ef:6a:7f:
91:4a:1a:54
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoUKK4tRezLuF/AypFkFHx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODIwMTgxNTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjJhNmE3Yjk3MmY0M2Y4YzEyY2M4NzgzZTY0N2FiOWU3YjYzMGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeeL3n8NymdV5lTQWLTLprwgZz9p
GVIpqUtln3v4587/DeB51P8VNwl5y31yN4CJ2Kh2Np/OzeaAwyCZEcaJEogLdDRK
ZmpuNhQeJP0qqXcS2q5l0Rd/gUo/PAzVAN/8FPdEQ5yyzDyHi4GNhh+WpLd8dVUu
WytEwmSqHluv5dGtXIF3VjNKuKNnOHpCKnrUrAx5x3K7sym5FPJ5ZUeVEJqu6xj0
XOkBs+KfYhjhJ8ig7Vpgug4aMLmO/Bnp+D0rhNqWKFDuUS5hRKADpzr/dQ/LAQ6j
m+66pClRGkFaTk6DVl58HVp2Te6EES16XJc1Endoy4hJhGrag5jUk+U+DQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJYqanuXL0P4wSzIeD5kernntjCkMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbGlwcWU1Y3ZRX2pCTE1oNFBtUjZ1ZWUyTUtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHfgyVKToZqytSkmyo/L
/H6YjcBuzPuqYKlxDK8P2NyigoYm+sW8REYVbzlW6x+/TP1SickXkkynNSIsk+dF
5oDRnYqqI0PEUjmnAGbdjJ2HhTqh5aS7eyO1Xzb6LYpWoMazS2VRJ7tpS5Uoms1a
VatQbfzvkIB4Rzw+6BLZ6OF8X/Bn8LJqoxp9I5Kt6HimdGMVZURCVzIMqYolEvA7
6FfcTjDKRiOEftJpekHM19Jnqo0zUxMcXX68lqm9u8yXN+QOoz3b9Wd1tJ4G0RUx
08MdqftQM5gnHc3W7bnw4J0GUffJCM4iUx0cxTLB+cZ4Cm5tDIV6Ou8Ck+9qf5FK
GlQ=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:37:32 2025 by rpki-client