Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lCTfy44S_SXimptqVZ1tC3VezvE.roa
File: lCTfy44S_SXimptqVZ1tC3VezvE.roa (raw, json)
Hash identifier: IBBl+6EAI8+Bvnr0I3ELgnvs16EPGAQtl2tZcXJ632Y=
Subject key identifier: 94:24:DF:CB:8E:12:FD:25:E2:9A:9B:6A:55:9D:6D:0B:75:5E:CE:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 75D96775
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lCTfy44S_SXimptqVZ1tC3VezvE.roa
Signing time: Sat 26 Mar 2022 11:09:22 +0000
ROA not before: Sat 26 Mar 2022 11:09:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1977182069 (0x75d96775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 11:09:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9424dfcb8e12fd25e29a9b6a559d6d0b755ecef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:87:47:54:b1:65:82:e3:19:c6:39:4e:b3:
75:71:57:eb:0d:4a:af:91:f8:cf:0d:aa:29:d2:cf:
aa:49:bf:38:1a:a8:d9:77:68:9d:7e:6f:97:c1:dd:
6a:40:bc:24:7f:a7:fa:e9:ff:96:c1:2d:37:9a:e0:
9f:83:a7:81:91:d8:65:f0:ba:99:42:af:b9:ed:ef:
75:5b:9c:3e:59:c3:3c:46:96:53:7b:51:bc:d2:ce:
5a:a0:ce:93:26:bc:fb:b8:51:cc:0b:67:03:89:d0:
32:0d:b8:a7:58:e6:6b:85:1c:32:18:5c:92:3e:76:
a0:56:94:1c:12:54:d6:9f:8f:48:32:f7:95:c3:b5:
d6:63:8e:e6:2d:56:36:8c:32:e0:e2:36:58:48:6e:
c6:42:47:ea:60:58:4a:ec:82:58:de:f3:de:b9:63:
2a:78:89:6a:f6:39:3e:ce:f0:fa:d3:6b:52:83:1d:
77:02:ee:73:66:07:ee:03:7f:b1:f5:39:3a:92:43:
77:31:66:cc:37:d2:62:ab:24:4d:fc:f7:53:74:61:
9b:4f:1b:bd:23:6d:ee:70:1d:b7:1c:30:a6:0f:ba:
e3:e0:de:7a:fb:76:65:be:f0:50:b8:05:6a:e8:48:
30:52:2b:03:66:be:37:8b:0a:fe:da:93:0b:98:29:
f3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:24:DF:CB:8E:12:FD:25:E2:9A:9B:6A:55:9D:6D:0B:75:5E:CE:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lCTfy44S_SXimptqVZ1tC3VezvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:05:74:12:08:8a:c7:0a:86:e3:37:57:52:1a:77:65:57:92:
a3:86:f2:2d:7e:77:0c:a1:21:95:42:7f:b9:28:06:70:83:28:
e8:35:be:03:a0:50:4b:93:bd:d0:3f:7e:0d:70:eb:07:3d:88:
eb:45:2d:0e:19:21:27:a9:7e:d1:94:26:ee:f4:a3:bb:aa:dc:
00:b0:02:99:99:a2:f5:db:c3:a8:3b:d9:9f:21:39:cc:43:d9:
42:69:30:7c:a4:e9:5a:90:38:d2:50:f3:6b:3f:24:e8:eb:9a:
86:41:9e:66:6d:b6:11:f3:dd:69:64:df:d8:0e:66:05:a8:43:
10:a1:f6:12:89:4f:28:db:f7:65:72:57:5e:48:ce:38:37:e2:
77:76:61:4b:f0:63:4c:86:c7:78:25:68:0c:49:dc:bc:18:2f:
85:64:32:c7:4b:10:76:14:8e:f6:0c:62:b8:3e:76:f1:ab:c5:
35:32:74:a2:c3:16:6b:86:da:21:13:a0:34:ce:2c:b8:2f:80:
91:62:2b:08:84:6e:26:7e:04:d3:3b:93:0d:84:57:f9:69:fd:
51:65:fc:cd:ed:b3:22:3f:1b:dd:e5:34:29:36:af:4d:d7:f6:
4e:02:e0:25:8d:13:16:da:c6:9c:b7:ec:72:c2:e6:65:3f:8d:
d4:69:f3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:46:16 2025 by rpki-client