Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lnlGz3aya_U2Hgcu7Snb92Gz3ig.roa
File: lnlGz3aya_U2Hgcu7Snb92Gz3ig.roa (raw, json)
Hash identifier: UN4vNNnnERERSvpIYYflLzkYBM3zGrVoZIjy0EvGYDQ=
Subject key identifier: 96:79:46:CF:76:B2:6B:F5:36:1E:07:2E:ED:29:DB:F7:61:B3:DE:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187112CE1E5C756BBD8E013A442F7F4BA74
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lnlGz3aya_U2Hgcu7Snb92Gz3ig.roa
Signing time: Fri 24 Mar 2023 01:12:46 +0000
ROA not before: Fri 24 Mar 2023 01:12:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:11:2c:e1:e5:c7:56:bb:d8:e0:13:a4:42:f7:f4:ba:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 01:12:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=967946cf76b26bf5361e072eed29dbf761b3de28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b8:51:f7:9e:c6:5c:c1:fb:28:f2:f7:88:3a:
43:b8:d2:4b:8f:a4:02:b3:7a:6d:39:07:08:ed:d1:
1c:0b:05:8c:4e:65:1e:fe:61:bd:02:8c:6c:16:8c:
ad:5d:76:c6:f3:a8:07:3b:96:e1:14:e3:90:14:f7:
16:bd:04:cc:5c:7c:1a:eb:03:52:ed:f5:7c:6e:3d:
74:d4:91:6f:f7:3d:94:a6:b6:5b:df:e7:a1:de:5e:
e8:a0:3e:cb:72:5d:02:c5:b0:e3:dc:8d:6e:2e:a6:
fb:18:6e:b3:3f:2d:96:cc:42:32:34:99:25:a4:17:
bf:ef:21:76:eb:75:94:c8:84:30:fd:9b:5e:de:99:
87:f2:c5:3b:a6:0c:79:c8:10:1b:6e:0b:92:74:38:
85:ff:8a:22:4a:2e:05:62:96:6f:2b:dd:de:4d:ba:
40:bb:3f:bf:5e:d0:3e:91:9c:ef:ba:02:e4:88:fd:
d2:04:c7:d6:a0:fe:a1:1e:97:96:2c:4f:26:f0:9c:
3a:4a:89:e2:2b:b9:96:21:0a:41:0c:c5:fc:39:92:
26:a3:51:5a:5e:09:4e:23:ad:7c:b1:df:67:7d:41:
39:32:9f:16:ca:36:4d:91:7a:78:80:ae:1c:bf:9d:
76:de:50:ac:ed:9f:e4:38:24:d3:b9:b6:0d:aa:71:
f5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:79:46:CF:76:B2:6B:F5:36:1E:07:2E:ED:29:DB:F7:61:B3:DE:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lnlGz3aya_U2Hgcu7Snb92Gz3ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:b3:73:d8:69:02:dc:cc:bd:1e:bb:c2:7c:63:fa:2a:a7:9d:
70:05:a5:03:88:91:c1:7a:06:f2:43:d0:b8:08:44:bd:de:00:
1c:2c:bb:d8:28:40:40:dc:04:9f:6a:f1:ea:cb:3e:3d:02:c8:
6b:5d:a8:a8:66:47:23:f8:e3:dd:ca:23:60:1e:e5:7c:b6:18:
c0:e8:36:ba:96:6e:89:8a:c9:9c:08:96:05:73:6f:43:2d:f2:
31:81:22:00:c2:85:b4:e6:b7:7b:83:2f:4d:5a:d3:07:77:17:
30:c9:05:65:f0:14:0c:f8:dd:a9:e8:3b:61:c4:19:16:de:99:
72:8e:fb:bb:f3:2e:a3:c4:87:10:a8:9b:da:4e:c5:79:3c:6f:
a6:32:70:59:54:73:23:8c:4d:71:8b:c2:b9:18:e0:4d:36:3a:
aa:51:26:b9:86:9e:e5:6d:40:75:db:ae:7a:bf:64:85:87:44:
8d:e0:fb:b4:a5:fb:36:68:4e:62:0d:12:1a:b1:b7:a2:00:95:
b0:e6:cf:87:be:42:a4:eb:74:81:4e:64:70:ae:60:f4:72:c0:
52:d3:62:14:94:b5:d4:35:9f:a1:49:9b:6c:6d:bc:11:69:0a:
f9:bd:3f:d4:2c:25:78:10:39:7b:46:bf:ad:89:79:7c:7e:e0:
b3:8a:7c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:06:37 2025 by rpki-client