Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LbSiho4kICkuELR5BJazD3n9BOQ.roa
File: LbSiho4kICkuELR5BJazD3n9BOQ.roa (raw, json)
Hash identifier: VYA6lhp3mPqcsw1oOjgCmlBtfMv5NmQf5TueUB4SQvs=
Subject key identifier: 2D:B4:A2:86:8E:24:20:29:2E:10:B4:79:04:96:B3:0F:79:FD:04:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852CA767EBE4F7703FF2B42747C2E283E8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LbSiho4kICkuELR5BJazD3n9BOQ.roa
Signing time: Mon 19 Dec 2022 23:10:46 +0000
ROA not before: Mon 19 Dec 2022 23:10:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2c:a7:67:eb:e4:f7:70:3f:f2:b4:27:47:c2:e2:83:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 23:10:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2db4a2868e2420292e10b4790496b30f79fd04e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:e4:c7:3f:4d:25:bc:58:67:33:76:e2:4c:
90:af:01:5d:d2:a8:23:d8:5f:b7:12:4e:39:04:8d:
76:7c:6a:14:2b:53:fd:1a:a7:c1:27:72:8c:7f:3e:
f7:95:a4:b2:05:f4:3c:6e:21:43:86:3a:37:70:12:
08:51:e4:5d:a2:8c:3d:a0:41:73:b8:49:04:a4:d2:
21:a9:5c:fe:99:1b:1d:b5:35:cf:f7:cc:ae:0a:f4:
2e:a8:54:a0:d5:59:a3:c1:e4:08:99:6f:b3:50:a1:
56:60:7b:69:53:e0:34:1e:22:a1:48:1a:2a:44:8c:
84:5a:49:dd:f0:b9:9b:cb:ed:06:fc:95:12:2d:74:
a0:ad:be:c0:ab:95:1e:1c:60:9e:68:b8:9a:5a:2f:
81:32:98:9f:60:14:61:95:6e:a5:c4:bd:9b:72:d1:
37:9e:04:e0:57:bc:80:f5:95:d0:c2:9c:80:6d:28:
9b:c4:51:40:a3:9b:e3:76:60:00:59:38:23:ec:10:
ad:68:61:23:62:6d:c0:e6:c0:dc:1b:83:77:d2:c1:
1c:3b:b0:5a:4f:1b:39:1a:a6:eb:f4:63:e8:17:45:
17:12:dc:de:fa:06:50:29:cd:89:48:4f:c6:6b:3c:
64:0f:49:3a:ef:39:75:b3:da:93:36:8c:fe:ea:ea:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B4:A2:86:8E:24:20:29:2E:10:B4:79:04:96:B3:0F:79:FD:04:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LbSiho4kICkuELR5BJazD3n9BOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:c8:6e:f7:5e:36:7c:60:4f:57:9b:13:dd:52:3b:db:e7:7a:
f0:30:38:25:8a:c7:97:77:f6:86:3f:75:f8:e0:b0:e1:4e:cc:
1f:14:01:ae:f0:3b:dd:f2:6a:37:33:55:11:03:0a:51:ad:07:
cc:e7:0a:46:40:89:c3:5d:77:95:74:75:00:9e:06:fb:e8:20:
0b:89:20:88:fc:c5:11:09:d0:f0:2b:20:10:27:c3:25:59:37:
d2:3b:9c:e3:05:38:6f:20:19:2d:95:a9:6e:02:09:97:cc:aa:
bc:8e:8f:3a:ac:f2:e8:28:39:92:ea:92:70:34:e1:77:fd:e1:
a4:02:dc:44:15:b3:75:e8:62:9b:be:25:57:36:e3:50:46:44:
ea:c7:7f:13:e5:af:f2:5c:60:6b:03:bc:74:6d:57:fa:85:5c:
5e:a9:25:4b:13:43:48:49:04:57:a0:d3:1b:2f:87:60:1c:4e:
0c:4c:17:0d:b0:7e:37:e9:6c:bc:1c:24:a1:91:79:8f:a3:d7:
53:99:91:fa:19:0e:1a:07:99:73:77:33:e3:66:46:cc:6f:1c:
cd:81:52:92:34:eb:93:ca:fa:c0:18:d4:44:69:93:25:73:81:
82:b5:03:00:67:a0:ec:30:d7:2b:32:7b:fc:e9:09:33:43:86:
ca:90:f9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:58:19 2025 by rpki-client