Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lIcQS7LDH--T_pmov5waA35bEVg.roa
File: lIcQS7LDH--T_pmov5waA35bEVg.roa (raw, json)
Hash identifier: of6Xq3TEHUE37A8bdhd+X+8lGlNlL/2QIxyPla1EdM4=
Subject key identifier: 94:87:10:4B:B2:C3:1F:EF:93:FE:99:A8:BF:9C:1A:03:7E:5B:11:58
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185FFCD13F70275089654A1E492CEBD36B9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lIcQS7LDH--T_pmov5waA35bEVg.roa
Signing time: Sun 29 Jan 2023 23:11:48 +0000
ROA not before: Sun 29 Jan 2023 23:11:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ff:cd:13:f7:02:75:08:96:54:a1:e4:92:ce:bd:36:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 29 23:11:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9487104bb2c31fef93fe99a8bf9c1a037e5b1158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:70:d3:40:e0:ab:76:92:aa:36:33:42:e9:
74:0f:21:e7:fd:60:5f:e0:ed:9e:4b:4f:9e:74:76:
c5:64:29:3c:1d:91:35:4e:13:d5:27:13:12:6e:d5:
48:51:2e:4c:49:4b:3a:e0:11:04:d5:2d:5d:1c:91:
75:56:4f:f1:6a:c7:5e:ed:14:0f:90:b6:ca:83:9b:
2b:e8:07:d0:36:07:dd:ec:05:d6:ad:f8:f0:cf:f4:
d3:04:11:23:2e:d5:55:41:9d:44:e2:75:50:6b:42:
65:8b:32:8d:fe:f9:6c:b3:62:8b:d2:e0:bb:cd:8d:
21:5e:81:15:d7:96:b1:fe:53:5b:37:55:ec:93:f2:
ba:2a:77:3e:81:62:11:d5:32:ff:6a:3b:d6:c9:4f:
4c:ce:47:b8:ea:9e:c1:31:0c:b5:e8:dc:2e:f7:f2:
d6:ef:b2:7f:37:c3:f1:0f:1f:7d:26:ff:3d:93:48:
e4:3e:ba:6e:93:2a:82:75:a8:80:ea:b8:1b:1a:d1:
64:0c:34:cf:bf:e3:b3:a9:2c:a9:2f:8e:b4:e8:e6:
25:f6:75:46:89:41:33:64:ac:fc:30:65:2c:99:5e:
e2:b9:27:0b:ed:0e:09:e0:f0:31:f4:ad:be:f7:c5:
16:62:a4:41:22:b2:60:13:32:a4:26:2a:e3:fa:41:
ce:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:87:10:4B:B2:C3:1F:EF:93:FE:99:A8:BF:9C:1A:03:7E:5B:11:58
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lIcQS7LDH--T_pmov5waA35bEVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:06:c4:63:80:97:3e:14:f4:30:fa:1b:f3:df:0b:4f:07:fb:
ea:a1:ff:33:e9:31:f2:85:b0:0e:6e:3b:f2:db:71:5d:a1:90:
c9:a0:c2:d6:d7:e6:ac:df:60:2c:d4:99:db:4c:87:52:82:72:
d8:e6:57:50:6d:1e:19:b7:42:f2:9b:b8:c9:31:4a:cd:99:3a:
47:c4:34:62:ab:40:dd:78:bb:62:fe:03:ba:bb:ea:cc:4f:38:
59:da:a2:bc:73:d4:eb:ec:73:8c:5e:b1:f7:cf:93:ea:9e:ec:
0c:d0:27:00:57:3c:a1:1b:11:70:91:7e:bb:62:9f:f0:fd:7f:
15:b3:81:0d:15:5f:38:fe:e8:d3:fb:9c:eb:bd:e7:e0:bb:e9:
b5:08:d5:5c:c1:d9:22:2a:0b:5f:66:16:26:4d:e6:75:72:6f:
68:d1:bb:8d:23:2f:e4:69:2b:c3:b0:3d:c6:1a:41:e5:3d:c3:
0a:52:0b:8e:21:cd:43:0b:4c:f9:a2:6d:ce:bd:83:b2:d0:25:
1c:64:3e:cd:cc:c2:a0:f1:d8:b5:fc:8f:cd:2a:36:8a:4e:51:
35:dd:10:a9:f3:8c:f1:84:80:e7:2d:e9:e0:bf:32:ea:67:94:
6d:6a:84:38:c6:70:17:57:ff:bb:30:68:84:b3:2e:34:ca:6a:
59:71:45:75
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYX/zRP3AnUIllSh5JLOvTa5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTI5MjMxMTQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDg3MTA0YmIyYzMxZmVmOTNmZTk5YThiZjljMWEwMzdlNWIxMTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x1w00Dgq3aSqjYzQul0DyHn/WBf
4O2eS0+edHbFZCk8HZE1ThPVJxMSbtVIUS5MSUs64BEE1S1dHJF1Vk/xasde7RQP
kLbKg5sr6AfQNgfd7AXWrfjwz/TTBBEjLtVVQZ1E4nVQa0JlizKN/vlss2KL0uC7
zY0hXoEV15ax/lNbN1Xsk/K6Knc+gWIR1TL/ajvWyU9Mzke46p7BMQy16Nwu9/LW
77J/N8PxDx99Jv89k0jkPrpukyqCdaiA6rgbGtFkDDTPv+OzqSypL4606OYl9nVG
iUEzZKz8MGUsmV7iuScL7Q4J4PAx9K2+98UWYqRBIrJgEzKkJirj+kHOuQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJSHEEuywx/vk/6ZqL+cGgN+WxFYMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbEljUVM3TERILS1UX3Btb3Y1d2FBMzViRVZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEYGxGOAlz4U9DD6G/Pf
C08H++qh/zPpMfKFsA5uO/LbcV2hkMmgwtbX5qzfYCzUmdtMh1KCctjmV1BtHhm3
QvKbuMkxSs2ZOkfENGKrQN14u2L+A7q76sxPOFnaorxz1Ovsc4xesffPk+qe7AzQ
JwBXPKEbEXCRfrtin/D9fxWzgQ0VXzj+6NP7nOu95+C76bUI1VzB2SIqC19mFiZN
5nVyb2jRu40jL+RpK8OwPcYaQeU9wwpSC44hzUMLTPmibc69g7LQJRxkPs3MwqDx
2LX8j80qNopOUTXdEKnzjPGEgOct6eC/MupnlG1qhDjGcBdX/7swaISzLjTKallx
RXU=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:11:42 2025 by rpki-client