Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LO9o-AxgSeGHB_0Gwxq1GQ1Nzag.roa
File: LO9o-AxgSeGHB_0Gwxq1GQ1Nzag.roa (raw, json)
Hash identifier: 09aBYI3Rs+nKpuECrV8TnmbhmMxCr6Oa/nWDBKPxYPY=
Subject key identifier: 2C:EF:68:F8:0C:60:49:E1:87:07:FD:06:C3:1A:B5:19:0D:4D:CD:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185B3D525B12E4145AEDB15740FEF12199A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LO9o-AxgSeGHB_0Gwxq1GQ1Nzag.roa
Signing time: Sun 15 Jan 2023 05:09:28 +0000
ROA not before: Sun 15 Jan 2023 05:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b3:d5:25:b1:2e:41:45:ae:db:15:74:0f:ef:12:19:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 15 05:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cef68f80c6049e18707fd06c31ab5190d4dcda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e8:3a:7e:91:84:ff:e6:e3:b0:3f:34:c3:c0:
eb:ae:07:a5:d2:de:eb:1c:08:9c:41:68:07:28:ec:
3d:91:4c:72:85:16:ff:9a:a2:45:23:f2:f7:87:64:
19:d8:3a:fb:97:2c:6c:82:4c:5f:37:2c:a8:e1:3f:
e7:bd:7f:e0:06:0d:e7:12:8b:8c:76:32:98:84:96:
ea:f4:2d:cc:b7:29:c2:74:0d:9a:87:48:58:7c:86:
97:7d:ee:af:5f:ed:4d:05:21:d7:84:15:84:40:e6:
17:ee:5e:78:bb:32:d8:58:fb:c0:c2:2e:64:fc:9a:
ca:4a:59:a3:0c:03:fb:33:14:e1:59:1a:d8:a4:a9:
6c:84:b1:df:a8:28:29:66:57:3c:a5:6f:25:2e:d5:
c2:ab:09:cf:ab:d8:40:c9:39:6a:b2:c0:22:24:3d:
e5:a3:e9:67:1a:f0:be:23:22:03:bd:a9:cc:04:27:
7a:c7:f2:7e:72:0c:d4:b7:2f:3a:cb:1a:37:16:c1:
7e:ee:af:e2:d5:b4:0a:ef:49:cc:98:e0:e6:bc:93:
75:e1:c1:b2:b9:2c:51:46:04:d0:fd:44:81:9c:0f:
37:7a:40:2f:27:86:3a:22:10:b6:97:fa:90:27:bd:
4a:36:4d:18:88:c3:fe:0a:96:bb:e6:7c:ed:94:26:
a3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EF:68:F8:0C:60:49:E1:87:07:FD:06:C3:1A:B5:19:0D:4D:CD:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LO9o-AxgSeGHB_0Gwxq1GQ1Nzag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:14:49:81:0a:83:c9:b7:a1:1e:04:1b:e8:f7:40:a9:6e:7e:
11:e2:df:f6:d9:6b:1f:e2:5c:a1:c8:e9:0c:7b:42:f7:8f:16:
83:45:b3:cd:30:20:78:eb:1c:a3:a6:83:ea:fc:54:44:50:4d:
2e:ed:d8:c5:e3:de:72:c6:ca:6c:2e:c7:fa:9b:95:13:ff:e1:
7b:cc:d4:a9:66:a8:f1:ff:6d:7b:d9:58:a6:10:2f:38:f1:74:
e2:0c:51:14:1e:43:54:1a:93:c1:c6:2c:67:bc:58:47:b3:19:
b0:a3:9a:51:5b:ab:4c:6d:c6:01:ec:9c:d8:ce:af:4a:5d:06:
eb:43:16:6d:5e:bc:b1:b9:03:fe:29:e4:9c:86:bb:f2:31:bf:
f3:f4:94:7b:07:8d:9c:fe:54:2f:dd:9c:f5:70:f7:75:48:ef:
d2:83:42:ce:5e:c7:bc:64:6b:b2:d2:01:9f:29:3f:6a:54:3b:
f9:ed:76:2c:f7:35:7a:c5:e7:af:08:0d:6b:57:c0:d4:6a:0d:
ea:4e:48:4f:13:1a:da:1d:35:79:ba:50:e2:03:73:ea:b4:a9:
9a:ea:c8:66:e9:fb:22:bf:69:bd:20:13:a1:52:44:d7:d8:50:
ac:c0:55:93:67:5c:89:56:20:b0:b8:c9:99:a7:76:a4:e7:e5:
7a:c3:74:29
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWz1SWxLkFFrtsVdA/vEhmaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTE1MDUwOTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2VmNjhmODBjNjA0OWUxODcwN2ZkMDZjMzFhYjUxOTBkNGRjZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhug6fpGE/+bjsD80w8Drrgel0t7r
HAicQWgHKOw9kUxyhRb/mqJFI/L3h2QZ2Dr7lyxsgkxfNyyo4T/nvX/gBg3nEouM
djKYhJbq9C3MtynCdA2ah0hYfIaXfe6vX+1NBSHXhBWEQOYX7l54uzLYWPvAwi5k
/JrKSlmjDAP7MxThWRrYpKlshLHfqCgpZlc8pW8lLtXCqwnPq9hAyTlqssAiJD3l
o+lnGvC+IyIDvanMBCd6x/J+cgzUty86yxo3FsF+7q/i1bQK70nMmODmvJN14cGy
uSxRRgTQ/USBnA83ekAvJ4Y6IhC2l/qQJ71KNk0YiMP+Cpa75nztlCajtwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCzvaPgMYEnhhwf9BsMatRkNTc2oMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTE85by1BeGdTZUdIQl8wR3d4cTFHUTFOemFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA0USYEKg8m3oR4EG+j3
QKlufhHi3/bZax/iXKHI6Qx7QvePFoNFs80wIHjrHKOmg+r8VERQTS7t2MXj3nLG
ymwux/qblRP/4XvM1KlmqPH/bXvZWKYQLzjxdOIMURQeQ1Qak8HGLGe8WEezGbCj
mlFbq0xtxgHsnNjOr0pdButDFm1evLG5A/4p5JyGu/Ixv/P0lHsHjZz+VC/dnPVw
93VI79KDQs5ex7xka7LSAZ8pP2pUO/ntdiz3NXrF568IDWtXwNRqDepOSE8TGtod
NXm6UOIDc+q0qZrqyGbp+yK/ab0gE6FSRNfYUKzAVZNnXIlWILC4yZmndqTn5XrD
dCk=
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:43:49 2025 by rpki-client