Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r-lxHu_2e8PaidNsxAfWZHlhpLY.roa
File: r-lxHu_2e8PaidNsxAfWZHlhpLY.roa (raw, json)
Hash identifier: TB3UQh0ZpmzgejUaxYac4klJk0X0lXAglqs6ohY16og=
Subject key identifier: AF:E9:71:1E:EF:F6:7B:C3:DA:89:D3:6C:C4:07:D6:64:79:61:A4:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876EBB038E6462327AD16D33B583D250B0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r-lxHu_2e8PaidNsxAfWZHlhpLY.roa
Signing time: Tue 11 Apr 2023 05:12:42 +0000
ROA not before: Tue 11 Apr 2023 05:12:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6e:bb:03:8e:64:62:32:7a:d1:6d:33:b5:83:d2:50:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 11 05:12:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afe9711eeff67bc3da89d36cc407d6647961a4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:01:c4:03:a0:60:13:64:85:08:dd:8e:c6:
e3:f9:4d:24:11:9d:64:a4:62:6a:b2:fa:07:1e:fa:
61:2a:a5:e2:33:cd:71:53:6f:86:20:2d:e1:4a:57:
4c:60:6e:8e:c8:c4:e4:67:11:5f:22:d3:4e:23:f3:
a2:ba:ee:64:f2:86:a5:2e:b9:34:71:7f:1f:01:26:
f1:a2:37:bf:ed:7e:cf:5e:10:a4:a0:f0:2f:47:a5:
6d:29:3c:93:e0:0c:80:07:8d:d6:cb:6b:dc:ee:d1:
9d:ae:2d:76:3e:6b:29:1d:55:60:05:a6:65:a2:4b:
e1:95:4c:a1:31:07:ef:dd:88:8a:e8:25:6c:94:a5:
9a:04:1f:96:05:49:98:47:0a:4f:42:c6:c2:b2:9e:
15:7d:59:bd:18:21:42:5d:9b:9c:28:1f:4f:07:94:
bd:f9:05:57:b5:55:ef:d0:af:eb:ef:b6:01:fc:c5:
a5:4d:7d:0f:c5:ff:8f:99:80:1b:9a:d6:17:7b:4f:
bf:8d:19:70:ff:5d:79:44:09:1b:56:ad:df:48:b1:
fa:ae:ce:ab:2e:b9:0d:1f:bc:85:a9:27:5c:46:5c:
16:f7:94:54:06:d1:6f:be:8f:5c:33:81:77:8f:1f:
9c:00:2b:1a:0e:7b:bc:05:30:5f:a3:1a:e2:48:62:
64:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E9:71:1E:EF:F6:7B:C3:DA:89:D3:6C:C4:07:D6:64:79:61:A4:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r-lxHu_2e8PaidNsxAfWZHlhpLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:8a:b1:b0:2f:7d:7f:65:a4:ae:c2:f3:9a:cd:0d:db:f3:8e:
3b:ca:51:bd:15:5e:b8:a3:7e:79:8f:5d:22:f4:61:c3:93:7c:
e0:71:51:73:c2:d0:65:a1:70:81:05:6b:9c:bc:63:9e:44:17:
ce:bb:dc:84:fd:3e:8d:ea:f2:d9:6e:61:15:b7:56:60:df:14:
cc:25:03:5e:55:76:d8:3d:aa:48:e9:45:06:35:41:d1:b8:3b:
24:c9:f4:ba:a1:d2:8a:1c:dd:32:ff:ae:1e:7c:bd:1b:ef:87:
fb:10:6f:6b:4e:50:95:29:ef:81:6f:a5:63:28:c5:db:38:b8:
ab:34:8b:c9:0c:01:3c:5f:db:1b:dc:16:76:6a:ee:7e:77:44:
b1:24:7c:ec:f7:f7:4c:1e:54:05:6a:b7:ff:0b:f8:6b:22:21:
16:0f:11:2a:00:1d:4d:45:9b:13:84:a9:fd:ee:d4:37:b1:14:
66:70:a1:0f:84:90:21:3e:96:12:eb:69:3c:b3:55:e0:d8:67:
6f:60:47:54:10:50:3c:e7:a2:df:f4:7b:20:92:13:be:c5:9b:
b4:f2:d2:19:e6:f6:a6:4f:e1:58:03:5a:f4:d3:9f:a3:00:db:
0e:9d:17:45:39:21:33:49:22:25:66:94:5e:31:96:97:33:72:
bb:a8:1d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:05:50 2025 by rpki-client