Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lyNKH1EN1s_xVDAIOlg6fqqrooo.roa
File: lyNKH1EN1s_xVDAIOlg6fqqrooo.roa (raw, json)
Hash identifier: nhJizlr8muRmDFmCZWM3v6o1dQPevSeoHbxVFDel4Vg=
Subject key identifier: 97:23:4A:1F:51:0D:D6:CF:F1:54:30:08:3A:58:3A:7E:AA:AB:A2:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E485706762CB7D9B8EE2CC1843DFC818
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lyNKH1EN1s_xVDAIOlg6fqqrooo.roa
Signing time: Thu 04 May 2023 02:09:22 +0000
ROA not before: Thu 04 May 2023 02:09:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e4:85:70:67:62:cb:7d:9b:8e:e2:cc:18:43:df:c8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 02:09:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97234a1f510dd6cff15430083a583a7eaaaba28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:61:fd:d3:20:3b:01:4f:ae:32:9e:d7:6a:9f:
13:44:e4:b5:fb:ed:39:21:9b:d2:e3:be:21:01:f4:
64:5a:4d:bd:53:07:df:e2:2d:f1:38:5e:a4:da:10:
42:6a:78:5a:c8:52:ed:0e:e0:87:6d:0e:dc:d6:0a:
5b:46:aa:f1:a0:0d:77:9f:1c:16:e9:f6:e3:87:c8:
32:5f:b2:b2:30:8d:03:eb:a6:63:3c:a3:93:e4:0c:
a1:91:81:07:5d:b5:ab:33:b4:14:3f:06:16:ee:08:
f1:cf:74:03:c9:ef:fe:37:54:c7:07:f5:10:69:04:
aa:57:7a:3c:f3:29:d3:9f:b2:99:52:d8:2b:b1:9f:
58:86:0e:fe:8a:d8:d9:8a:0f:7e:b5:04:6d:d9:5c:
6d:03:97:bd:db:0d:8a:35:48:c5:13:e2:27:2a:da:
43:96:b3:fd:d6:cc:08:62:ee:69:e2:b8:97:e8:b2:
51:52:cc:21:c1:30:7e:94:22:a3:cf:80:d9:0a:b3:
69:e9:41:ca:c4:86:b0:bb:fd:f6:30:50:6a:13:0a:
27:93:ce:f7:2d:2b:b1:76:d5:78:d3:27:16:fd:f5:
5a:6b:20:7e:86:48:35:39:3b:2d:8c:f0:27:ce:d7:
aa:6d:a3:28:3c:8f:8d:fe:96:44:ae:c9:2e:f4:12:
8f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:23:4A:1F:51:0D:D6:CF:F1:54:30:08:3A:58:3A:7E:AA:AB:A2:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lyNKH1EN1s_xVDAIOlg6fqqrooo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:96:e3:74:d4:57:ba:e1:7a:3e:ba:c9:be:bd:b9:c1:5e:c3:
47:98:a6:d5:c1:14:47:3e:11:4a:18:45:5e:f6:74:8d:e7:d9:
cd:a6:41:01:4a:be:76:f6:e4:3d:07:5c:b0:d0:bf:27:f1:fb:
76:68:28:bd:09:38:e3:d7:c9:34:1d:51:d8:02:32:a8:a3:68:
aa:4f:e0:65:f2:cd:21:e0:c7:ad:bf:ec:63:e9:c7:7d:b9:7b:
3c:c1:b2:3d:1d:14:71:ee:e8:10:fc:e6:6f:d1:f1:cb:62:be:
1e:0e:3f:f6:48:c7:c3:fd:dd:15:ae:96:17:3f:01:b5:0c:54:
79:af:87:71:52:c0:68:92:c0:de:d0:fc:44:b8:0f:56:04:83:
f6:b5:a2:6e:60:52:1b:f9:87:f1:83:b2:09:9b:e8:2d:97:05:
6a:3c:4c:3f:51:18:1c:13:f8:dc:65:90:49:51:f4:af:d7:bb:
e8:75:30:20:5b:9b:ad:93:b5:b4:00:4f:dc:ea:74:9e:ee:cc:
58:8c:75:e8:0d:db:74:af:14:f0:a2:3d:98:20:df:80:95:5f:
a5:91:81:e1:5a:02:fb:c4:31:4c:e7:9e:d7:5c:52:50:be:a9:
84:2f:d1:8d:c9:3b:3b:18:48:db:34:f5:35:31:7e:13:8e:0e:
b9:dd:8a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:40:50 2025 by rpki-client