Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LnJ-UVGhKJcbjC565Z8D8yUgzaA.roa
File: LnJ-UVGhKJcbjC565Z8D8yUgzaA.roa (raw, json)
Hash identifier: bwIMxV2SBHUXGjR11Jq8bS/FO+7isPGW0d5npN70jv0=
Subject key identifier: 2E:72:7E:51:51:A1:28:97:1B:8C:2E:7A:E5:9F:03:F3:25:20:CD:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01858163D7A7BB2343287AEC8EBC59CBB171
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LnJ-UVGhKJcbjC565Z8D8yUgzaA.roa
Signing time: Thu 05 Jan 2023 10:04:41 +0000
ROA not before: Thu 05 Jan 2023 10:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:8163:76c4/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:81:63:d7:a7:bb:23:43:28:7a:ec:8e:bc:59:cb:b1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 5 10:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e727e5151a128971b8c2e7ae59f03f32520cda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:d7:7d:df:2e:ed:35:62:7a:d1:ae:c1:69:
37:7a:62:dc:d2:60:6e:d5:b9:f5:eb:5a:65:2e:d3:
91:37:bf:73:65:5b:f3:7d:a0:44:08:ef:9d:63:2d:
a6:68:cb:a1:20:45:e4:c7:f6:a7:8b:9b:00:69:6f:
4c:a8:09:a0:75:03:26:f0:eb:7e:b4:22:64:2f:db:
e2:b9:45:93:af:c2:ae:0a:f5:38:1e:80:2c:20:7e:
04:9e:02:86:b2:9c:16:2f:1b:92:fd:ab:e6:32:b4:
b1:00:ae:fb:97:3f:2e:85:38:7f:9f:41:a6:87:ef:
b6:a3:f4:09:3a:e6:7c:79:d8:d5:0b:00:8d:b1:28:
2b:09:a1:18:3c:6e:e0:49:c0:eb:b3:a7:ee:d9:8d:
a7:63:2a:59:a0:b5:c7:24:91:19:b0:93:61:24:85:
ec:2e:8a:eb:df:3d:b8:a7:ec:c2:bf:ef:a7:94:a9:
e0:55:f8:a2:00:6a:ad:9b:0b:84:60:44:49:4b:07:
8b:ee:ea:5a:50:bb:eb:ae:75:99:ed:1c:8a:76:56:
c2:4d:c8:08:0d:59:29:2d:63:12:51:4b:ed:39:40:
85:22:06:fd:19:f9:87:ea:fe:b7:5e:75:76:1c:bb:
16:ce:18:a8:b1:6e:0d:b2:93:2e:01:bc:1e:10:f7:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:72:7E:51:51:A1:28:97:1B:8C:2E:7A:E5:9F:03:F3:25:20:CD:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LnJ-UVGhKJcbjC565Z8D8yUgzaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:74:80:5b:02:1a:d4:6d:ea:ec:69:cb:ea:ea:2d:02:09:7c:
1c:c3:13:ec:5a:e9:37:30:77:e2:e1:4d:8b:a3:2c:b2:b3:e0:
66:b2:bf:9c:e4:74:69:ea:c2:94:48:1b:03:3d:75:67:91:32:
d8:a4:f4:e2:8f:95:51:15:bd:33:aa:a9:24:b5:5b:5f:ff:1d:
0b:25:7e:b8:70:4d:f3:8c:a7:3c:25:70:e3:c0:34:71:3d:97:
84:d7:59:41:67:fa:46:fe:8b:67:47:0c:57:ee:5d:aa:a6:46:
b3:04:90:d2:43:76:17:89:3a:66:2e:70:5d:82:c9:6a:a6:fe:
7c:db:32:2f:34:7c:e1:2e:6f:2d:28:83:e1:45:dc:47:ee:72:
7e:c3:5a:c8:1f:af:58:f6:af:9e:22:63:fb:a5:1d:b5:f7:56:
bb:20:be:1f:a9:10:04:00:6c:03:7c:ba:cc:a1:03:6d:d4:54:
fb:b2:60:9a:78:9d:6f:a3:0e:ee:94:59:e8:26:22:ff:9e:2e:
bb:5f:90:e4:cc:af:e8:d7:a2:5a:33:bc:6e:ed:44:25:7f:50:
c4:0c:c5:0f:b0:16:96:8f:30:1d:86:88:dc:84:ed:61:94:30:
80:e4:fb:eb:58:e1:32:03:aa:e8:32:1e:2a:5e:12:b7:98:f4:
70:df:d5:50
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWBY9enuyNDKHrsjrxZy7FxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTA1MTAwNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTcyN2U1MTUxYTEyODk3MWI4YzJlN2FlNTlmMDNmMzI1MjBjZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVnXfd8u7TVietGuwWk3emLc0mBu
1bn161plLtORN79zZVvzfaBECO+dYy2maMuhIEXkx/ani5sAaW9MqAmgdQMm8Ot+
tCJkL9viuUWTr8KuCvU4HoAsIH4EngKGspwWLxuS/avmMrSxAK77lz8uhTh/n0Gm
h++2o/QJOuZ8edjVCwCNsSgrCaEYPG7gScDrs6fu2Y2nYypZoLXHJJEZsJNhJIXs
Lorr3z24p+zCv++nlKngVfiiAGqtmwuEYERJSweL7upaULvrrnWZ7RyKdlbCTcgI
DVkpLWMSUUvtOUCFIgb9GfmH6v63XnV2HLsWzhiosW4NspMuAbweEPfyaQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC5yflFRoSiXG4wueuWfA/MlIM2gMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTG5KLVVWR2hLSmNiakM1NjVaOEQ4eVVnemFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGt0gFsCGtRt6uxpy+rq
LQIJfBzDE+xa6Tcwd+LhTYujLLKz4Gayv5zkdGnqwpRIGwM9dWeRMtik9OKPlVEV
vTOqqSS1W1//HQslfrhwTfOMpzwlcOPANHE9l4TXWUFn+kb+i2dHDFfuXaqmRrME
kNJDdheJOmYucF2CyWqm/nzbMi80fOEuby0og+FF3Efucn7DWsgfr1j2r54iY/ul
HbX3Vrsgvh+pEAQAbAN8usyhA23UVPuyYJp4nW+jDu6UWegmIv+eLrtfkOTMr+jX
olozvG7tRCV/UMQMxQ+wFpaPMB2GiNyE7WGUMIDk++tY4TIDqugyHipeEreY9HDf
1VA=
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:46:32 2025 by rpki-client