Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lyDlmJQXJT50j2VxQOw_JUAziWs.roa
File: lyDlmJQXJT50j2VxQOw_JUAziWs.roa (raw, json)
Hash identifier: WNXY+O1N37xE+EhNFjvaGNuL+fpP7cPFTgmeNaPdyAU=
Subject key identifier: 97:20:E5:98:94:17:25:3E:74:8F:65:71:40:EC:3F:25:40:33:89:6B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A35A68295D4195383EE5C060A62D582D8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lyDlmJQXJT50j2VxQOw_JUAziWs.roa
Signing time: Sun 27 Aug 2023 06:20:19 +0000
ROA not before: Sun 27 Aug 2023 06:20:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:35:a6:82:95:d4:19:53:83:ee:5c:06:0a:62:d5:82:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 06:20:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9720e5989417253e748f657140ec3f254033896b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:50:fa:1e:b8:33:9d:0e:b6:18:26:ba:4c:6c:
39:95:25:07:0d:42:8a:bd:02:de:d2:c7:be:c8:77:
9c:0c:38:2f:18:37:89:f9:d2:b9:d1:a8:a9:52:ee:
7b:7b:91:60:cf:9d:82:eb:0e:42:ee:ff:19:36:b4:
9b:4f:21:66:79:e3:b3:9f:cb:e5:f6:0f:0e:4e:b9:
d7:78:ab:40:90:52:ab:4c:25:2a:4b:34:03:04:3d:
ae:cd:2d:dd:4a:a1:be:84:28:e4:98:8a:18:0a:d2:
b7:f0:bf:87:7a:7f:a9:30:5c:b2:3b:9c:f7:d1:38:
e0:ae:4b:dd:59:39:bb:13:5c:e4:ec:b1:1a:32:31:
b1:2b:1d:04:b0:1c:2e:ef:0e:cb:f2:84:33:10:ca:
af:81:35:85:99:d3:93:51:39:f1:34:80:f5:bc:d7:
98:4f:96:82:80:cd:4b:58:81:55:bd:a9:96:87:8a:
a3:03:f1:5f:8f:90:46:38:ac:32:3a:99:01:f1:4f:
9a:b2:72:f1:09:7c:e3:54:61:c3:5a:6a:18:93:16:
76:2c:22:f5:05:b2:bb:ce:ad:2e:db:44:97:04:7b:
b8:10:ee:b6:be:98:9e:b5:d2:e1:59:f2:d0:50:f4:
b1:61:fb:69:9c:fb:b2:f5:85:f4:d9:95:ce:49:ec:
94:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:20:E5:98:94:17:25:3E:74:8F:65:71:40:EC:3F:25:40:33:89:6B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lyDlmJQXJT50j2VxQOw_JUAziWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:db:a0:4d:d5:2c:8d:29:4a:7d:39:b2:fe:90:7a:da:6b:6b:
3f:98:1a:36:d5:c9:84:47:ed:0a:a3:f6:c2:6c:d7:40:7f:63:
34:ea:14:b2:6a:37:1e:4b:91:47:4b:5d:7c:e9:54:9f:6a:37:
b4:94:f1:de:63:9d:9d:d2:66:0b:9d:7e:a6:4c:45:2d:a1:e9:
b8:bb:36:4b:93:04:62:0e:b1:37:2d:fb:d7:b3:99:26:14:54:
30:91:78:87:8c:08:fd:99:a8:02:15:02:af:6a:a7:c1:8c:19:
aa:51:c2:d0:51:27:87:50:b1:86:a4:ae:5a:46:88:da:3f:03:
b7:57:78:4b:e2:77:75:6d:8f:91:9a:73:90:38:cb:1b:7c:c3:
04:15:6c:f7:3e:ae:76:f1:cf:43:05:d3:d1:1f:95:e5:23:0f:
89:d2:af:1e:48:7b:82:80:cb:c0:03:92:6f:8d:1c:b7:6d:9c:
8d:f4:3f:57:e9:59:5c:35:af:c0:77:7b:f5:25:d3:c5:83:e0:
54:7b:0e:00:d5:91:06:9a:03:77:59:0a:57:87:a5:25:52:82:
05:a8:2c:7e:94:a5:a6:6e:78:a1:9b:aa:c2:60:3d:e1:0e:a7:
ea:1d:d7:9b:78:51:71:b6:70:2d:45:e2:5a:ff:09:80:a8:11:
08:6e:48:d9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYo1poKV1BlTg+5cBgpi1YLYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI3MDYyMDE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzIwZTU5ODk0MTcyNTNlNzQ4ZjY1NzE0MGVjM2YyNTQwMzM4OTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklD6HrgznQ62GCa6TGw5lSUHDUKK
vQLe0se+yHecDDgvGDeJ+dK50aipUu57e5Fgz52C6w5C7v8ZNrSbTyFmeeOzn8vl
9g8OTrnXeKtAkFKrTCUqSzQDBD2uzS3dSqG+hCjkmIoYCtK38L+Hen+pMFyyO5z3
0TjgrkvdWTm7E1zk7LEaMjGxKx0EsBwu7w7L8oQzEMqvgTWFmdOTUTnxNID1vNeY
T5aCgM1LWIFVvamWh4qjA/Ffj5BGOKwyOpkB8U+asnLxCXzjVGHDWmoYkxZ2LCL1
BbK7zq0u20SXBHu4EO62vpietdLhWfLQUPSxYftpnPuy9YX02ZXOSeyUEwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJcg5ZiUFyU+dI9lcUDsPyVAM4lrMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbHlEbG1KUVhKVDUwajJWeFFPd19KVUF6aVdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKzboE3VLI0pSn05sv6Q
etpraz+YGjbVyYRH7Qqj9sJs10B/YzTqFLJqNx5LkUdLXXzpVJ9qN7SU8d5jnZ3S
ZgudfqZMRS2h6bi7NkuTBGIOsTct+9ezmSYUVDCReIeMCP2ZqAIVAq9qp8GMGapR
wtBRJ4dQsYakrlpGiNo/A7dXeEvid3Vtj5Gac5A4yxt8wwQVbPc+rnbxz0MF09Ef
leUjD4nSrx5Ie4KAy8ADkm+NHLdtnI30P1fpWVw1r8B3e/Ul08WD4FR7DgDVkQaa
A3dZCleHpSVSggWoLH6UpaZueKGbqsJgPeEOp+od15t4UXG2cC1F4lr/CYCoEQhu
SNk=
-----END CERTIFICATE-----
Generated at Thu May 1 06:10:12 2025 by rpki-client