Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lwYZLO8_og3nLpDQYikf2M6h8-c.roa
File: lwYZLO8_og3nLpDQYikf2M6h8-c.roa (raw, json)
Hash identifier: VupNaCp7q+N63QqM0S36ZWvIDJX9a+pz8QbP0GIllis=
Subject key identifier: 97:06:19:2C:EF:3F:A2:0D:E7:2E:90:D0:62:29:1F:D8:CE:A1:F3:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856C2B183271A021910C33A5208D1A6DC6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lwYZLO8_og3nLpDQYikf2M6h8-c.roa
Signing time: Sun 01 Jan 2023 07:10:41 +0000
ROA not before: Sun 01 Jan 2023 07:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2b:18:32:71:a0:21:91:0c:33:a5:20:8d:1a:6d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 1 07:10:41 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9706192cef3fa20de72e90d062291fd8cea1f3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:ee:ab:83:cb:50:5d:70:9a:1b:9f:c1:ad:
05:cf:fa:26:7b:89:f9:c5:8c:18:35:ce:7c:cd:78:
e4:11:c7:87:40:23:94:50:1f:a0:59:5a:e5:ae:b6:
64:04:1b:46:40:2c:ba:94:af:dd:ce:26:5d:ef:27:
c2:5f:ee:8f:c6:c6:65:0e:ac:3b:ea:5b:7b:8e:2f:
6c:45:49:d8:e4:ed:88:8c:14:1f:3c:ef:32:29:42:
4d:31:86:55:e0:4c:be:9b:6f:77:5a:67:34:87:b8:
e4:17:0e:b1:2a:fc:a5:9d:66:7a:c2:bf:95:75:c2:
2f:1e:f7:85:6e:f2:7d:b3:23:c5:16:46:a4:40:7c:
dc:13:ae:4d:e9:60:e8:cd:d0:06:34:21:15:e0:21:
08:11:5b:4d:e8:ae:06:e0:c4:61:0a:88:1a:92:00:
f7:bc:b6:2e:bd:f9:48:a6:d9:90:9e:0d:3b:34:1f:
84:6c:85:f6:2a:b5:f1:87:a8:4b:a8:c5:81:39:20:
4b:90:b5:55:dd:98:61:eb:84:cd:e3:02:c8:dc:c5:
74:b9:d0:4d:16:00:5e:d9:8b:58:7b:3d:2c:14:f1:
38:c5:65:69:a1:98:e9:d4:90:b9:40:d1:6b:58:ea:
1a:c0:3e:9a:05:93:45:ba:21:cf:67:59:17:a0:ee:
f9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:06:19:2C:EF:3F:A2:0D:E7:2E:90:D0:62:29:1F:D8:CE:A1:F3:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lwYZLO8_og3nLpDQYikf2M6h8-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:f3:75:98:ef:6d:cf:ea:e0:0c:70:40:49:45:2c:79:1e:ad:
8a:8c:e0:ee:a2:4d:3b:54:9d:67:5d:9f:18:bd:d3:93:c7:2c:
a4:07:09:1a:50:cd:67:4a:81:50:11:f8:1c:7c:7a:e5:84:bd:
ce:96:0c:e6:1c:b8:95:44:1e:0c:a8:49:35:da:36:91:b0:3d:
1c:84:69:a3:cc:6f:e5:9b:43:de:3d:51:1b:af:b6:94:e6:b4:
b7:8d:66:fd:35:fe:5e:b9:bc:c2:53:83:81:2a:7b:0c:97:d6:
c0:01:30:ca:29:a7:bf:7d:cf:fc:9d:7f:e2:72:6a:9a:0c:c2:
b6:b1:33:27:a3:d5:94:8b:0a:ae:d0:7a:3e:98:7c:f5:a7:23:
c7:6c:ee:99:d3:99:bb:7b:37:0e:90:7f:f7:ef:f5:0b:2b:cc:
92:93:1c:8e:86:ca:ff:cf:62:de:90:b0:fa:6d:64:5d:a7:82:
3e:19:78:a5:80:09:47:5f:22:8f:90:96:fb:4f:e7:83:3e:63:
fc:8a:e9:97:19:fe:f4:58:8a:e5:e6:2d:49:76:f7:a5:5f:f5:
79:31:0f:11:27:82:29:c3:f5:30:b5:3a:53:e1:c5:27:fd:d1:
ec:79:5d:46:b8:b0:4b:b4:c8:af:46:b6:e1:e0:4a:d7:18:6a:
97:14:12:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:47:25 2025 by rpki-client