Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LMWHIE8k_oGGCRhZ-2RSp4cypCQ.roa
File: LMWHIE8k_oGGCRhZ-2RSp4cypCQ.roa (raw, json)
Hash identifier: m0dvXTogpnZs+lflb/dqRtYb/xalMCCDJzsR79CocxM=
Subject key identifier: 2C:C5:87:20:4F:24:FE:81:86:09:18:59:FB:64:52:A7:87:32:A4:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7CA157F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LMWHIE8k_oGGCRhZ-2RSp4cypCQ.roa
Signing time: Tue 19 Apr 2022 08:10:35 +0000
ROA not before: Tue 19 Apr 2022 08:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2090948594 (0x7ca157f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 19 08:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2cc587204f24fe8186091859fb6452a78732a424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1b:e9:99:1a:76:41:43:28:b0:f0:9a:db:42:
53:08:dc:86:d7:c8:85:b4:43:dc:c9:89:63:de:c0:
e4:cf:51:dd:26:88:1e:76:96:f3:9a:df:22:70:8d:
ff:5d:ff:f8:ce:ce:21:45:41:8e:97:45:2e:e5:f3:
10:a0:fc:ce:bd:30:0e:9e:8d:09:64:7d:59:a8:a0:
82:18:8d:0f:d9:62:56:ef:c0:e5:a7:48:ec:a9:4b:
0b:4b:12:ce:51:09:df:19:bc:37:a4:d0:85:0b:cf:
ea:c4:72:81:d7:d5:f8:38:eb:7b:f4:96:c8:ab:2d:
34:39:df:8a:3c:d1:f4:08:63:15:45:64:71:bf:c5:
d9:88:8f:fb:47:f9:ea:83:f4:ce:2e:54:27:c0:3a:
ec:a3:fb:7c:35:d9:b8:b0:d6:9e:86:dc:f3:b1:ce:
e0:ca:96:d1:a8:99:c7:4a:69:1e:20:74:4c:d7:1e:
90:5d:a9:6f:c3:ec:eb:11:05:d5:b5:2e:fc:a1:15:
6e:a3:a0:36:21:56:65:45:0b:3e:95:21:1c:8c:4c:
07:bd:a7:89:75:90:53:58:64:c3:29:e1:b4:35:30:
bc:b5:ca:2c:a1:dd:21:cb:05:56:d2:b0:0a:1b:79:
2e:32:b0:eb:82:8c:b8:7e:dc:62:f2:23:6e:9d:9a:
1c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C5:87:20:4F:24:FE:81:86:09:18:59:FB:64:52:A7:87:32:A4:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LMWHIE8k_oGGCRhZ-2RSp4cypCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:15:3c:b5:73:9c:89:d2:95:a7:16:a0:d9:70:88:27:fb:28:
7e:4b:9b:79:62:e9:91:e7:f5:0d:8f:e2:7e:dc:82:1e:ab:7d:
38:92:c3:69:a8:cd:8d:02:c2:67:ad:03:5e:f3:ba:8f:88:da:
43:db:bc:e4:d8:86:d3:cd:01:b6:05:c2:75:d4:05:84:76:ec:
81:7d:c3:35:b9:62:f4:41:b3:16:79:1b:1c:17:ce:5e:48:ab:
1d:85:d4:04:14:7e:c5:76:05:49:c4:09:ef:e9:1e:40:e0:92:
28:23:b4:73:45:46:05:8c:23:b2:ab:93:f6:b8:9e:07:5a:7c:
92:c8:02:85:2f:12:96:38:24:11:24:c4:59:c6:a5:7c:db:45:
ed:23:d2:7d:22:f0:29:4d:3e:7f:c6:b0:be:c5:e1:c6:82:aa:
a8:95:c0:cc:76:3b:4f:dc:22:30:f5:af:eb:04:7f:de:7e:b6:
19:21:c4:b7:a4:b8:51:b4:bf:31:d1:f1:33:f0:ff:10:2c:a8:
2b:50:df:85:87:ab:f3:9f:16:f6:1a:3c:0b:95:7f:eb:de:63:
f6:57:94:3f:f6:16:89:ae:3f:0d:27:04:51:9c:99:8d:cf:fd:
c7:b2:49:85:12:20:1f:4c:92:10:3a:8d:8c:98:b1:35:a4:da:
e1:92:ab:b7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEfKFX8jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQx
OTA4MTAzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmNjNTg3MjA0ZjI0
ZmU4MTg2MDkxODU5ZmI2NDUyYTc4NzMyYTQyNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOYb6ZkadkFDKLDwmttCUwjchtfIhbRD3MmJY97A5M9R3SaI
HnaW85rfInCN/13/+M7OIUVBjpdFLuXzEKD8zr0wDp6NCWR9WaigghiND9liVu/A
5adI7KlLC0sSzlEJ3xm8N6TQhQvP6sRygdfV+Djre/SWyKstNDnfijzR9AhjFUVk
cb/F2YiP+0f56oP0zi5UJ8A67KP7fDXZuLDWnobc87HO4MqW0aiZx0ppHiB0TNce
kF2pb8Ps6xEF1bUu/KEVbqOgNiFWZUULPpUhHIxMB72niXWQU1hkwynhtDUwvLXK
LKHdIcsFVtKwCht5LjKw64KMuH7cYvIjbp2aHNkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQsxYcgTyT+gYYJGFn7ZFKnhzKkJDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0xNV0hJRThrX29HR0NSaFotMlJTcDRjeXBDUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCuFTy1c5yJ0pWnFqDZcIgn+yh+S5t5YumR5/UN
j+J+3IIeq304ksNpqM2NAsJnrQNe87qPiNpD27zk2IbTzQG2BcJ11AWEduyBfcM1
uWL0QbMWeRscF85eSKsdhdQEFH7FdgVJxAnv6R5A4JIoI7RzRUYFjCOyq5P2uJ4H
WnySyAKFLxKWOCQRJMRZxqV820XtI9J9IvApTT5/xrC+xeHGgqqolcDMdjtP3CIw
9a/rBH/efrYZIcS3pLhRtL8x0fEz8P8QLKgrUN+Fh6vznxb2GjwLlX/r3mP2V5Q/
9haJrj8NJwRRnJmNz/3HskmFEiAfTJIQOo2MmLE1pNrhkqu3
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:14:55 2025 by rpki-client