Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LwTV1jBgkLB8WnefmkP9AirpMzY.roa
File: LwTV1jBgkLB8WnefmkP9AirpMzY.roa (raw, json)
Hash identifier: 1Wji6/4T8zKauBdaxK9vdDsFMnjCLOjKPU8huVshpXI=
Subject key identifier: 2F:04:D5:D6:30:60:90:B0:7C:5A:77:9F:9A:43:FD:02:2A:E9:33:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3B02E37AFFEAE2EF5E0108A312750FC9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LwTV1jBgkLB8WnefmkP9AirpMzY.roa
Signing time: Mon 28 Aug 2023 07:19:19 +0000
ROA not before: Mon 28 Aug 2023 07:19:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:02:e3:7a:ff:ea:e2:ef:5e:01:08:a3:12:75:0f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 07:19:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f04d5d6306090b07c5a779f9a43fd022ae93336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e3:c0:1d:06:3f:2b:ec:d6:16:fd:f4:b1:e0:
f3:a6:f6:e9:2d:a8:8d:23:22:b7:44:ac:a5:41:b2:
8e:4d:53:fa:64:f6:d2:ff:39:e1:74:fe:ad:c2:41:
e1:b3:e0:9c:f6:65:bb:24:8f:af:15:d0:96:14:69:
d7:17:e2:8c:c8:60:d7:e7:27:20:20:e3:4b:19:fa:
db:44:2d:c5:c2:e6:9d:d8:a5:6d:30:f6:6c:f1:bd:
e4:02:3d:cc:6e:88:07:82:74:69:d8:d3:f4:54:1a:
f8:94:96:1e:33:0c:a4:97:69:36:e5:23:cd:26:66:
99:98:76:a3:15:78:42:3c:5e:bf:a8:34:8d:eb:d0:
20:05:3f:bb:1b:a0:06:6d:f8:f1:0d:04:7a:f0:4b:
86:fa:fd:73:99:e9:31:c2:c8:76:c1:db:01:08:7b:
1e:08:2b:b9:b6:40:eb:26:31:e2:a6:65:1c:ce:dd:
9b:31:8a:a3:3d:1e:ee:60:da:81:d4:bf:1c:e8:7a:
60:18:9d:e0:9e:44:77:15:f4:c5:14:06:56:0e:81:
70:c6:be:0b:7c:0e:90:c1:d0:97:4d:9e:43:71:c0:
de:84:0d:85:f1:b8:1a:5f:b3:21:7f:6d:6b:e3:1f:
5a:34:a8:a8:a5:a8:29:4c:f7:65:48:c2:09:a3:94:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:04:D5:D6:30:60:90:B0:7C:5A:77:9F:9A:43:FD:02:2A:E9:33:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LwTV1jBgkLB8WnefmkP9AirpMzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:c6:2e:93:7c:a3:01:16:83:3c:77:13:28:42:32:0b:19:e6:
9d:fb:c0:36:a3:e3:ed:cb:58:b5:dc:53:a8:be:56:d3:d7:17:
e6:01:59:83:6f:a6:2d:05:49:e1:8d:bc:24:36:c2:0a:5e:9c:
db:e7:8f:ca:22:0e:2e:ee:3f:45:3d:33:68:bc:09:a0:5d:91:
97:4e:0a:d4:0e:fc:3c:3a:fd:49:9b:1d:64:6e:6e:54:42:04:
b4:65:91:eb:4a:b4:cb:03:ee:50:2c:88:86:b5:22:df:0d:ed:
c3:d1:96:f7:75:55:78:90:4a:02:21:45:b2:d1:a2:5c:53:61:
6e:b9:15:58:fa:a6:24:44:9c:ab:ad:ea:58:8d:c4:90:8c:e2:
d1:22:3f:d1:ef:48:9e:76:30:24:86:a9:6b:12:0f:35:a0:dc:
c4:9d:87:bf:8c:db:e4:37:0b:a1:c3:3f:9f:aa:fa:d5:80:ef:
e7:af:db:52:b5:a9:42:fc:73:fb:b4:72:eb:86:12:a9:16:92:
35:56:b7:7f:76:e3:f7:91:99:cd:c7:a2:64:20:51:0f:12:c1:
1b:d7:d1:84:ae:01:6f:e6:b2:e7:3c:01:e6:ad:fc:06:ac:71:
b5:16:2e:93:98:05:85:00:a1:88:54:63:5c:97:49:46:0f:22:
c7:2f:6d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:52:10 2025 by rpki-client