Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/laQ-v51oY28_RyMOD_A00LMRcXo.roa
File: laQ-v51oY28_RyMOD_A00LMRcXo.roa (raw, json)
Hash identifier: 4BcSdKcb7kJU5zWNGVCIEoW7fxe7rxruh7HLXXQeqgM=
Subject key identifier: 95:A4:3E:BF:9D:68:63:6F:3F:47:23:0E:0F:F0:34:D0:B3:11:71:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183EAFB75BBF9D0A1EDDEA649EE390F3B40
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/laQ-v51oY28_RyMOD_A00LMRcXo.roa
Signing time: Tue 18 Oct 2022 12:04:51 +0000
ROA not before: Tue 18 Oct 2022 12:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:eafb:11c7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ea:fb:75:bb:f9:d0:a1:ed:de:a6:49:ee:39:0f:3b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 18 12:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95a43ebf9d68636f3f47230e0ff034d0b311717a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:50:2b:c0:d1:38:1f:e7:96:ec:c3:45:71:
8e:5f:4e:45:49:d0:21:7a:c0:98:4d:a1:78:47:4b:
65:83:80:b8:99:5a:2e:21:5b:36:e8:26:26:fb:16:
39:36:6d:2d:74:92:6a:f9:f2:0d:7d:53:a4:aa:40:
45:bb:84:2a:55:80:54:fd:ff:88:6c:e6:85:86:30:
ad:0e:42:5f:31:cb:86:5b:99:f2:92:58:16:dc:30:
38:2a:fd:02:71:b3:2e:91:91:65:bc:ce:3e:d7:19:
e6:c4:76:66:fc:af:89:06:52:b6:a9:09:7c:b0:d1:
d1:4b:1f:09:07:38:41:63:67:2d:dc:bd:81:0c:7b:
f7:fc:d5:3e:2e:4a:f0:f9:90:4e:ea:5f:59:b5:ae:
2f:c1:fd:e9:42:ca:fb:6e:84:84:2e:ea:c9:47:ac:
41:e3:14:9e:b2:03:36:1a:e1:3a:f0:e8:9a:fa:2a:
5f:1a:f1:b8:f8:eb:26:99:8e:af:b3:52:ea:77:70:
ef:15:0e:fc:90:e0:17:07:b6:f1:c2:26:c5:e6:0e:
5b:6e:60:cf:04:e0:09:26:32:04:9f:50:52:37:32:
2c:6c:02:12:71:1f:cb:d5:70:01:d7:c3:32:28:1f:
76:e7:b7:3a:d4:5a:e2:30:45:9d:c3:7c:e4:d1:ae:
ea:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A4:3E:BF:9D:68:63:6F:3F:47:23:0E:0F:F0:34:D0:B3:11:71:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/laQ-v51oY28_RyMOD_A00LMRcXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:a2:dd:9f:01:41:b0:20:74:55:e2:60:9b:0c:95:07:b7:ea:
a1:85:13:3f:b6:f4:95:a8:63:1a:b1:f8:84:58:3f:57:c9:1b:
4d:5a:66:79:3f:39:ec:e6:d1:4e:9e:75:51:62:23:09:79:97:
4a:a8:c0:5b:d5:d9:c9:5e:92:a7:aa:1a:07:3c:64:84:f6:fd:
b0:e0:4d:40:58:4f:8a:30:e6:ae:c7:b6:dd:4b:76:4f:ab:20:
4b:4a:fd:83:0c:65:fd:ab:db:f8:3f:be:86:92:29:96:9d:40:
db:a4:a7:75:19:0b:81:f9:3b:5b:a3:59:10:6e:34:a9:f8:ad:
fe:df:45:35:06:33:1d:b8:d9:62:b1:4e:da:03:1f:e7:a2:86:
35:ee:af:48:c7:9c:1b:65:6c:f2:42:75:b5:05:88:c7:61:b1:
41:27:18:08:f3:9d:b3:3e:61:a1:97:e9:45:62:17:bd:92:f7:
49:98:4b:2f:4a:41:dd:eb:6f:d7:38:0b:2d:20:df:4e:aa:63:
40:ef:3e:d1:58:ed:00:fd:0b:9b:58:06:ad:a6:79:77:3e:10:
1b:33:75:82:2e:39:04:bb:0d:25:9e:2d:16:5d:e9:ef:68:b9:
00:e1:af:47:f7:3a:7e:41:cd:69:40:7b:59:63:d8:07:49:38:
0c:c6:a1:82
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYPq+3W7+dCh7d6mSe45DztAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDE4MTIwNDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWE0M2ViZjlkNjg2MzZmM2Y0NzIzMGUwZmYwMzRkMGIzMTE3MTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O9QK8DROB/nluzDRXGOX05FSdAh
esCYTaF4R0tlg4C4mVouIVs26CYm+xY5Nm0tdJJq+fINfVOkqkBFu4QqVYBU/f+I
bOaFhjCtDkJfMcuGW5nyklgW3DA4Kv0CcbMukZFlvM4+1xnmxHZm/K+JBlK2qQl8
sNHRSx8JBzhBY2ct3L2BDHv3/NU+Lkrw+ZBO6l9Zta4vwf3pQsr7boSELurJR6xB
4xSesgM2GuE68Oia+ipfGvG4+OsmmY6vs1Lqd3DvFQ78kOAXB7bxwibF5g5bbmDP
BOAJJjIEn1BSNzIsbAIScR/L1XAB18MyKB9257c61FriMEWdw3zk0a7qoQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJWkPr+daGNvP0cjDg/wNNCzEXF6MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbGFRLXY1MW9ZMjhfUnlNT0RfQTAwTE1SY1hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB2i3Z8BQbAgdFXiYJsM
lQe36qGFEz+29JWoYxqx+IRYP1fJG01aZnk/Oezm0U6edVFiIwl5l0qowFvV2cle
kqeqGgc8ZIT2/bDgTUBYT4ow5q7Htt1Ldk+rIEtK/YMMZf2r2/g/voaSKZadQNuk
p3UZC4H5O1ujWRBuNKn4rf7fRTUGMx242WKxTtoDH+eihjXur0jHnBtlbPJCdbUF
iMdhsUEnGAjznbM+YaGX6UViF72S90mYSy9KQd3rb9c4Cy0g306qY0DvPtFY7QD9
C5tYBq2meXc+EBszdYIuOQS7DSWeLRZd6e9ouQDhr0f3On5BzWlAe1lj2AdJOAzG
oYI=
-----END CERTIFICATE-----
Generated at Thu Jun 12 12:15:58 2025 by rpki-client