Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lEqgdjPTpllnncgV67cdyJo_Nj8.roa
File: lEqgdjPTpllnncgV67cdyJo_Nj8.roa (raw, json)
Hash identifier: IjCWdToQZSjy7dV29K9bIL1Yj79PYKZr8Yy4ZoK5+oc=
Subject key identifier: 94:4A:A0:76:33:D3:A6:59:67:9D:C8:15:EB:B7:1D:C8:9A:3F:36:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A036B3ADD64CB1A084143F2CB042AA1F1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lEqgdjPTpllnncgV67cdyJo_Nj8.roa
Signing time: Thu 17 Aug 2023 12:14:33 +0000
ROA not before: Thu 17 Aug 2023 12:14:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:6b:3a:dd:64:cb:1a:08:41:43:f2:cb:04:2a:a1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 12:14:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=944aa07633d3a659679dc815ebb71dc89a3f363f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:fc:e1:2c:02:5c:7f:49:9c:74:54:a0:c4:
2b:5f:0e:f4:a5:96:6d:96:b8:a4:bc:e5:6c:14:74:
ac:52:8e:c5:d7:7e:c1:d4:08:62:9a:b0:c1:c0:2b:
e0:af:d9:20:59:c1:9c:09:1d:30:82:bb:fc:4e:52:
75:e6:1a:d6:9c:41:49:19:c3:df:51:fb:a7:1d:ed:
0b:ef:30:bc:4a:e4:bb:63:cc:cb:ed:f5:76:10:b1:
80:41:63:6f:b0:bc:80:2c:c5:5c:24:38:20:f2:7d:
a6:17:9d:ff:11:81:82:5e:88:8d:ba:d1:7f:25:20:
4e:4b:eb:d8:b1:e5:f4:96:89:90:95:cb:a5:8a:dd:
3d:2b:be:99:36:dd:3f:3e:62:7d:ef:5e:67:c1:70:
65:83:bb:a9:9b:7a:65:80:0d:0f:9c:d4:e6:df:48:
68:33:f2:20:f1:53:19:d3:0a:ee:36:f1:cf:f2:c0:
97:87:1e:7e:83:31:d1:c4:34:6d:cd:3d:aa:cd:0e:
4d:43:9b:47:45:08:b8:05:6e:94:9a:bf:10:d0:00:
3b:a5:3e:7d:08:7e:ea:f3:e8:e8:34:79:a0:f9:44:
8e:22:f7:ed:32:2a:68:ec:9a:01:16:97:f1:10:21:
7d:70:db:92:e4:6d:34:80:d6:e2:2e:ee:f0:23:18:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4A:A0:76:33:D3:A6:59:67:9D:C8:15:EB:B7:1D:C8:9A:3F:36:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lEqgdjPTpllnncgV67cdyJo_Nj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:80:c3:99:eb:a5:72:14:4d:79:d7:70:f7:34:cd:9d:00:5d:
87:7c:84:95:5f:fc:9b:b1:01:46:b3:99:75:de:bc:26:a6:f1:
55:01:ad:d6:3b:80:a4:c7:5e:49:46:ee:35:30:fb:50:64:85:
d1:7f:42:c3:16:9e:28:7f:51:3b:5d:ce:f4:29:89:c4:e6:90:
6b:e4:3c:c4:33:9b:ea:53:0c:11:27:f1:b5:e1:62:d2:c2:65:
53:ed:7b:ef:8c:be:20:c3:3a:a7:d7:10:7f:c6:4c:bc:e2:00:
c2:8b:38:fb:52:e2:03:b7:9f:4d:b5:fe:42:87:54:84:af:7c:
f0:60:f1:2d:8b:c5:45:9c:1d:8d:ca:98:10:99:c5:50:31:86:
50:b0:78:43:f5:43:16:92:82:1b:0d:0e:c9:d2:8d:3a:ab:51:
cf:b4:33:ba:14:83:d5:ab:c4:5c:c9:27:9b:62:0f:c8:39:60:
0a:98:5d:2d:2f:e8:ed:1b:34:86:3d:67:57:58:37:d6:01:91:
80:5c:bd:91:4c:8d:bf:1b:b6:a9:a9:ef:58:28:b0:07:aa:22:
1d:a5:e3:99:09:c9:1d:99:35:3f:91:37:70:5b:27:3e:f3:87:
87:86:74:dd:65:3b:24:4f:b6:f7:1e:75:ba:26:57:8a:b8:ee:
e9:16:20:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 10:10:51 2025 by rpki-client