Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lys9FXJLrfGWcy_coWHvp0a4ZYU.roa
File: lys9FXJLrfGWcy_coWHvp0a4ZYU.roa (raw, json)
Hash identifier: l+OS6soRjD5lUZymTwPgbHN7yHpruoMLmOkabB1oOOI=
Subject key identifier: 97:2B:3D:15:72:4B:AD:F1:96:73:2F:DC:A1:61:EF:A7:46:B8:65:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187DC271B92BFBC5BF411867B7A9294F3AE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lys9FXJLrfGWcy_coWHvp0a4ZYU.roa
Signing time: Tue 02 May 2023 11:09:23 +0000
ROA not before: Tue 02 May 2023 11:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:27:1b:92:bf:bc:5b:f4:11:86:7b:7a:92:94:f3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 11:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=972b3d15724badf196732fdca161efa746b86585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:78:7b:25:a3:9d:ad:e9:d9:7a:be:da:e6:
1e:b6:48:26:f9:2e:e1:b9:d7:3b:6a:61:fc:70:53:
af:8f:00:64:14:ef:7b:79:cb:d3:00:12:b3:9e:c8:
d1:29:ef:bd:3f:2b:b9:4a:de:49:50:e1:a3:85:ec:
90:0f:b9:5d:ea:ac:fb:c6:ab:24:55:02:26:09:64:
61:2d:de:97:fa:e2:61:2e:f0:7e:c0:42:a1:f6:d8:
0b:38:df:1a:44:be:17:67:c1:06:12:90:e3:09:16:
a3:a6:5b:cf:88:c1:c7:80:d3:28:72:1a:42:fe:fb:
fc:fb:68:68:22:1e:28:44:3c:ff:c8:29:23:f6:6f:
4a:24:98:0a:cd:f2:42:e9:37:e8:b3:8a:e0:e3:56:
00:fa:11:67:15:1d:29:7c:22:29:6e:68:b9:66:37:
51:86:f8:9d:b0:46:97:25:5e:2b:1c:c3:f7:fe:46:
2a:5d:06:4a:0a:93:d4:41:e7:0f:3b:77:e8:0c:44:
fd:0b:53:61:41:29:98:c1:20:3b:13:84:c9:26:b0:
58:5a:a9:75:75:04:04:66:fa:fd:e3:e3:7a:1f:15:
ef:f7:26:28:90:df:a6:35:72:a6:24:2a:bc:be:8c:
8f:49:73:ce:ce:fb:ed:5f:81:2b:0d:e0:98:52:23:
59:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2B:3D:15:72:4B:AD:F1:96:73:2F:DC:A1:61:EF:A7:46:B8:65:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lys9FXJLrfGWcy_coWHvp0a4ZYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:ff:1e:2c:81:09:b0:80:4e:71:a0:25:50:cf:ec:5e:40:3a:
43:14:c2:d0:dd:5a:06:03:6e:3d:8f:58:fb:da:10:51:18:db:
9d:c3:4b:1c:aa:c1:ca:40:7e:0c:b9:35:4b:50:89:13:c9:fa:
fa:8a:35:5a:2d:34:98:e8:74:a3:a3:b0:52:b7:9d:b3:f8:d3:
16:ac:46:c9:1d:e3:16:6c:a8:ef:ca:38:76:41:f2:af:5e:31:
b2:8f:97:dc:76:c8:66:26:75:8f:ff:f4:a6:9b:aa:b6:99:c6:
4c:19:34:5a:ac:a7:20:cb:7c:08:b1:5c:db:6e:ba:a2:68:7a:
c1:6c:ea:63:88:79:85:90:6f:8e:8d:3d:0a:c7:03:84:73:f2:
f8:08:f2:40:2b:15:d4:0d:00:42:99:7e:97:41:0e:48:a9:26:
9c:29:6b:9c:db:8e:18:0f:9b:17:24:d2:12:45:ea:4c:f1:5e:
77:75:5c:1d:1d:c3:b0:67:e9:7f:71:2e:bb:c7:64:87:67:6b:
f6:34:0b:e3:ce:86:9e:97:b5:72:b9:dd:1b:77:59:a6:78:a9:
05:cc:14:81:10:84:9c:ce:f9:ed:5d:b6:6d:8b:9e:98:e3:14:
e3:62:fc:b8:23:68:86:06:78:58:d8:a6:fb:0f:d5:34:e4:91:
48:52:f5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:58:36 2025 by rpki-client