Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lHLVeicgdeC2WTuU6jhAfODvOoM.roa
File: lHLVeicgdeC2WTuU6jhAfODvOoM.roa (raw, json)
Hash identifier: 3GLf0CyAfVXNBZRkFuovDPWAjrstK+BWLeR0gC/NKKg=
Subject key identifier: 94:72:D5:7A:27:20:75:E0:B6:59:3B:94:EA:38:40:7C:E0:EF:3A:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018730F143A029C53772ABFFD6AE6A7C1405
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lHLVeicgdeC2WTuU6jhAfODvOoM.roa
Signing time: Thu 30 Mar 2023 05:15:30 +0000
ROA not before: Thu 30 Mar 2023 05:15:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:30:f1:43:a0:29:c5:37:72:ab:ff:d6:ae:6a:7c:14:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 05:15:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9472d57a272075e0b6593b94ea38407ce0ef3a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:93:ee:2b:3f:af:9c:17:f1:62:25:d6:eb:
ce:17:91:4f:b9:6b:3a:07:54:69:43:31:ab:4d:05:
55:03:e9:8e:3f:a1:91:0b:63:5c:ef:6a:7a:62:a6:
2a:73:0a:a5:d5:8d:70:bd:71:b6:f0:1e:e6:16:14:
0b:35:b5:d0:16:ea:94:c6:c7:3c:69:28:5c:0c:b2:
d7:4c:2f:ad:4e:cc:fd:9b:3e:33:52:76:8c:21:d6:
58:0b:11:8d:d4:d9:7a:9f:c2:dd:ce:94:da:b7:de:
b8:f7:2a:7b:4f:60:7d:0c:bd:5a:17:4f:ca:3a:3a:
27:3f:36:4c:d4:90:bc:8d:07:d1:a9:a1:16:ce:fe:
93:a6:eb:8f:b4:06:f6:15:c4:9c:ce:db:1a:14:1e:
7a:09:2f:13:a2:59:5e:c4:1f:b2:f0:74:d7:d1:e1:
c9:5b:d0:91:81:c9:13:e7:2b:7a:29:e3:3e:94:2b:
65:a7:03:ff:d9:a6:2b:96:e3:90:e4:44:34:5b:51:
d7:30:08:11:26:a6:18:d8:6f:5e:60:e3:75:a8:fd:
d4:68:c2:a3:9b:f3:00:c7:1f:3a:87:59:af:66:7a:
8c:ec:2d:b3:2b:2a:0f:b1:6c:34:62:5f:4c:18:05:
13:54:f9:bf:8a:48:09:dc:3e:ef:d7:c7:21:98:92:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:72:D5:7A:27:20:75:E0:B6:59:3B:94:EA:38:40:7C:E0:EF:3A:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lHLVeicgdeC2WTuU6jhAfODvOoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:5f:1a:64:da:6b:e8:c9:d9:b4:44:c5:56:e1:2b:e0:6a:27:
58:55:39:f3:57:4e:93:51:a5:ad:d8:01:a3:9a:6a:45:b1:35:
72:29:d3:55:86:f6:ef:54:67:94:c5:8b:e4:e1:f5:e8:62:b6:
c1:1c:e4:50:d6:6b:f2:c0:5b:2b:62:51:54:52:7c:fb:69:13:
df:33:7d:8e:5f:64:f2:fe:c6:ba:9a:06:ff:8c:7a:a1:f0:06:
17:e1:c5:d6:18:19:db:23:69:c1:b8:ec:a0:f5:94:c1:2a:ec:
6e:0b:5c:2c:17:e8:35:59:65:46:fe:35:ea:1a:d6:0d:a9:81:
7a:ec:b0:05:2b:d9:81:e9:6a:bd:75:11:e3:8f:0c:a8:21:d9:
ba:66:fc:f3:c8:cc:3c:81:2a:75:c9:b2:92:9a:bc:e7:1c:1e:
ff:e7:0b:26:e7:b9:2b:ac:ea:51:04:c2:f6:9e:5b:ff:63:2d:
ef:64:b7:5b:d0:9b:32:cd:09:2f:d7:9a:50:a9:de:15:e7:bb:
9c:fd:fa:92:88:67:15:67:af:24:9a:12:22:9c:06:f7:61:18:
3d:5c:6a:83:d3:40:de:02:d6:a7:68:dc:a4:5c:77:4e:97:e1:
f2:97:33:7f:1f:b0:c2:8a:d4:34:79:01:d1:94:e7:f3:97:8e:
8b:a6:1a:52
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcw8UOgKcU3cqv/1q5qfBQFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzMwMDUxNTMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDcyZDU3YTI3MjA3NWUwYjY1OTNiOTRlYTM4NDA3Y2UwZWYzYTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw+T7is/r5wX8WIl1uvOF5FPuWs6
B1RpQzGrTQVVA+mOP6GRC2Nc72p6YqYqcwql1Y1wvXG28B7mFhQLNbXQFuqUxsc8
aShcDLLXTC+tTsz9mz4zUnaMIdZYCxGN1Nl6n8LdzpTat9649yp7T2B9DL1aF0/K
OjonPzZM1JC8jQfRqaEWzv6TpuuPtAb2FcScztsaFB56CS8TollexB+y8HTX0eHJ
W9CRgckT5yt6KeM+lCtlpwP/2aYrluOQ5EQ0W1HXMAgRJqYY2G9eYON1qP3UaMKj
m/MAxx86h1mvZnqM7C2zKyoPsWw0Yl9MGAUTVPm/ikgJ3D7v18chmJLhXwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJRy1XonIHXgtlk7lOo4QHzg7zqDMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbEhMVmVpY2dkZUMyV1R1VTZqaEFmT0R2T29NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG1fGmTaa+jJ2bRExVbh
K+BqJ1hVOfNXTpNRpa3YAaOaakWxNXIp01WG9u9UZ5TFi+Th9ehitsEc5FDWa/LA
WytiUVRSfPtpE98zfY5fZPL+xrqaBv+MeqHwBhfhxdYYGdsjacG47KD1lMEq7G4L
XCwX6DVZZUb+Neoa1g2pgXrssAUr2YHpar11EeOPDKgh2bpm/PPIzDyBKnXJspKa
vOccHv/nCybnuSus6lEEwvaeW/9jLe9kt1vQmzLNCS/XmlCp3hXnu5z9+pKIZxVn
rySaEiKcBvdhGD1caoPTQN4C1qdo3KRcd06X4fKXM38fsMKK1DR5AdGU5/OXjoum
GlI=
-----END CERTIFICATE-----
Generated at Tue Jun 10 20:56:11 2025 by rpki-client