Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lQlBTgzq8qTxjixiGUjovXHaSGc.roa
File: lQlBTgzq8qTxjixiGUjovXHaSGc.roa (raw, json)
Hash identifier: pMu0jUCn5UHK6c+oN3EkDLs9Pozsheo3EH8IlvSMHXw=
Subject key identifier: 95:09:41:4E:0C:EA:F2:A4:F1:8E:2C:62:19:48:E8:BD:71:DA:48:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864BC0C841DB87181678C39D2B74CDA231
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lQlBTgzq8qTxjixiGUjovXHaSGc.roa
Signing time: Mon 13 Feb 2023 17:09:30 +0000
ROA not before: Mon 13 Feb 2023 17:09:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4b:c0:c8:41:db:87:18:16:78:c3:9d:2b:74:cd:a2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 17:09:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9509414e0ceaf2a4f18e2c621948e8bd71da4867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:62:95:32:97:a9:9b:3f:b8:1d:15:e6:0d:
9e:d1:e8:a0:d8:02:78:21:30:c2:cd:6b:46:f9:18:
e5:89:6e:ee:95:3e:ef:fd:50:bd:95:12:a0:f7:33:
77:96:f6:bd:14:a8:bb:b6:0e:c0:cc:d0:38:f3:92:
a2:cc:06:08:dd:4b:91:c5:ad:ea:4f:38:3f:7a:c9:
09:3f:19:52:e9:ff:51:61:6e:e7:3f:4e:5e:a8:ef:
60:0a:12:67:94:4f:cf:0a:e2:89:c0:95:2b:ec:d0:
9c:a7:56:96:2b:f8:15:a6:d3:fb:c4:e6:5a:3f:e8:
9f:99:72:e2:c0:f3:f9:1d:4e:af:ac:14:41:9c:ba:
6b:42:9c:b2:1b:9c:4c:96:53:39:26:0f:9b:5f:e6:
29:9c:7f:66:34:07:a3:09:9d:f0:de:ea:a9:cc:81:
96:84:30:c7:98:a1:85:6a:0d:28:8b:de:6d:da:c0:
33:52:56:59:00:df:8b:9d:d5:16:44:a4:ed:b4:ae:
f3:5c:5d:5c:3b:a6:c5:e8:8c:94:03:44:f5:69:ea:
c7:85:0e:3a:6d:26:50:10:90:f2:00:bf:5c:94:de:
71:0b:9d:38:df:87:8d:d8:76:5f:37:9f:fe:f6:14:
88:fd:08:46:9b:88:29:4d:d7:6b:e9:54:f6:b3:38:
99:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:09:41:4E:0C:EA:F2:A4:F1:8E:2C:62:19:48:E8:BD:71:DA:48:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lQlBTgzq8qTxjixiGUjovXHaSGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:91:10:09:af:26:b2:bf:40:a8:de:02:e6:76:03:5b:a9:da:
09:25:3a:d1:91:ed:e7:20:ed:d3:60:fa:7e:08:e4:af:c9:32:
1c:c5:be:0f:18:35:8a:2d:da:66:44:24:42:06:74:1d:82:fa:
0e:3c:51:4c:f2:4f:95:6f:94:b6:2d:94:9b:48:4b:bd:80:7c:
1c:83:a0:17:f2:a3:13:45:89:56:66:06:e0:b6:9c:f1:33:b6:
d0:98:8b:a5:a6:d8:14:ac:48:dd:9d:41:23:dc:43:f6:9f:8c:
ae:e7:48:b0:1e:1e:e9:ae:a6:8c:d1:9d:12:56:48:7f:b3:1e:
a1:8b:68:1b:bb:d1:cf:3e:46:71:2d:fd:55:7b:ac:b6:d6:12:
ba:d7:88:7a:11:fb:83:97:13:b6:6e:d2:2f:e4:1b:53:2a:ac:
1c:7a:50:5f:3a:2a:2a:e0:ab:c8:16:02:ae:67:3b:29:60:2f:
d6:4b:dd:13:82:d5:d9:42:e5:9a:6a:96:a9:3c:b4:08:e8:d8:
ea:19:bf:44:b7:ad:6d:3b:7d:61:f3:3b:fa:c2:91:4c:32:5f:
ca:15:7a:1d:68:75:b7:e9:f7:1e:29:43:34:bf:98:da:4c:00:
b1:f8:52:8a:39:4d:1c:79:bb:22:b1:75:9f:86:a3:47:9a:2e:
e6:4f:80:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:56:59 2025 by rpki-client