Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lJw_pYQZupQcihEuKF8hffOB8_g.roa
File: lJw_pYQZupQcihEuKF8hffOB8_g.roa (raw, json)
Hash identifier: 8F79ca5QF4K5vDpmvnO1STno7WEcPgUjC47kWA+7cng=
Subject key identifier: 94:9C:3F:A5:84:19:BA:94:1C:8A:11:2E:28:5F:21:7D:F3:81:F3:F8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868EEDCEDBD3B529E1E5637B185DFD8D35
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lJw_pYQZupQcihEuKF8hffOB8_g.roa
Signing time: Sun 26 Feb 2023 18:13:15 +0000
ROA not before: Sun 26 Feb 2023 18:13:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8e:ed:ce:db:d3:b5:29:e1:e5:63:7b:18:5d:fd:8d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 18:13:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=949c3fa58419ba941c8a112e285f217df381f3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:ae:23:c3:f9:ac:f4:1b:0f:49:16:32:8c:
85:6e:bf:8c:d3:24:42:db:be:41:f1:7e:8a:87:9c:
3b:ac:0f:66:fc:23:f9:71:c9:6d:48:24:8b:1c:32:
8b:af:1d:b5:69:4e:71:75:7a:a3:e0:4e:b8:7c:cb:
b7:4e:a9:bf:96:c9:db:2f:2b:52:8c:37:06:e8:1a:
07:26:db:24:c6:c0:40:8f:86:33:f1:31:69:12:fb:
00:3d:cc:4b:de:aa:04:1d:30:46:71:aa:0b:f7:15:
1e:8a:71:7e:31:9d:a6:ae:31:14:f2:f2:34:28:84:
4c:34:ba:e1:7b:12:8f:87:e1:53:50:46:ea:50:75:
fd:9b:f2:2b:1f:0c:db:95:e6:42:b6:ea:88:ee:f9:
0d:a2:0f:1f:a8:9d:c8:89:ef:53:3f:9b:f2:e1:f5:
89:22:dc:27:55:93:c4:5a:5d:c4:47:95:0e:dc:fd:
51:b8:68:d3:ed:bb:b7:fe:49:c7:c8:d1:bc:ed:bf:
80:a7:e2:be:eb:70:82:fc:2b:0e:53:bc:85:d1:03:
b5:87:d1:b7:37:68:d4:0e:1e:d1:6c:e0:aa:58:2a:
06:3c:dd:98:24:1f:99:4e:83:9c:7b:f0:b9:fa:68:
44:6f:4c:ef:6b:de:60:45:d7:e0:e8:23:70:17:83:
3a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9C:3F:A5:84:19:BA:94:1C:8A:11:2E:28:5F:21:7D:F3:81:F3:F8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lJw_pYQZupQcihEuKF8hffOB8_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:3d:1c:8e:61:00:42:b7:86:bc:e6:d0:18:5f:d5:a8:f3:8d:
e4:bf:d1:ea:61:c6:47:7d:fe:c9:dc:3f:7a:35:27:b9:b6:f3:
d0:ec:b5:c5:57:ad:1b:aa:40:9e:c8:d3:c3:be:d9:76:05:7f:
cf:b4:3d:6b:72:50:6e:6c:39:ed:e6:b1:05:c0:5f:2f:5d:9f:
69:af:26:4f:dc:00:2f:1b:94:1c:e1:fb:50:0b:ad:16:0f:af:
6e:23:bf:9f:ae:05:9e:30:1b:70:f1:98:83:43:05:dd:ba:0c:
2a:5b:69:25:b7:3d:53:70:67:fa:07:d1:07:c5:53:c6:65:c6:
a6:3e:ea:f5:4f:23:2e:51:1e:f1:13:03:b1:a6:23:17:cb:db:
d4:2f:6e:19:1c:f2:04:fa:f8:3b:df:34:e5:8d:ce:3b:ba:65:
ca:6d:e5:ea:31:60:83:83:cb:76:2f:89:7a:f7:29:bf:1c:34:
d6:f6:1d:88:e1:b9:37:0c:f1:03:2b:40:23:29:95:a4:c6:85:
f1:0e:57:7e:b8:56:6b:34:a6:41:9a:3f:43:9b:8a:80:76:3a:
cb:08:84:bb:f8:75:f5:7a:86:98:78:9a:59:84:47:97:4f:65:
61:14:7c:02:28:e9:ef:48:3d:ed:e9:58:a7:d0:cf:31:1f:db:
77:57:83:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:43:40 2025 by rpki-client