Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lazNDTzEch70RM5kNcr5RzaenhM.roa
File: lazNDTzEch70RM5kNcr5RzaenhM.roa (raw, json)
Hash identifier: rNkZKXDf/Qxh5pCed3gEjjgVSQAE5874MEdFPNy059c=
Subject key identifier: 95:AC:CD:0D:3C:C4:72:1E:F4:44:CE:64:35:CA:F9:47:36:9E:9E:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F31AFA6D77F86E39F012E8DCCF93CD50
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lazNDTzEch70RM5kNcr5RzaenhM.roa
Signing time: Mon 14 Aug 2023 08:12:58 +0000
ROA not before: Mon 14 Aug 2023 08:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f3:1a:fa:6d:77:f8:6e:39:f0:12:e8:dc:cf:93:cd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 08:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95accd0d3cc4721ef444ce6435caf947369e9e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ae:82:75:ff:be:92:c8:61:c1:99:70:c0:4a:
9d:7f:73:16:c4:29:47:7d:07:5a:31:cf:1c:ee:dd:
14:9e:11:1f:81:7a:f1:9b:ad:81:f1:99:4b:dd:08:
f0:27:1b:84:cf:5a:f7:4c:cd:eb:99:48:93:af:ce:
9d:9e:0e:fb:40:53:ab:a3:1d:64:33:0f:7c:a3:db:
16:44:a5:6a:4b:25:d0:55:e8:35:a8:e5:06:97:d5:
7b:59:8e:63:9f:ff:60:89:78:72:f3:ab:d4:3a:d7:
3e:9d:76:3a:fd:87:4c:ba:93:86:f3:6b:95:7d:f4:
27:16:e6:7d:10:e3:ab:44:8f:c8:b5:d2:9f:1b:04:
30:6e:04:12:ee:2b:c7:6d:54:0b:aa:fa:9b:ea:b7:
e6:37:aa:83:19:8e:92:99:7f:ca:c1:08:6c:d5:e8:
43:ee:b9:85:76:67:89:d3:23:11:cb:0b:96:99:96:
08:1a:7a:55:67:b5:94:84:69:6f:66:1b:a0:f4:8a:
b8:8c:23:53:8a:f6:83:77:a1:2b:da:18:b9:34:cb:
be:4b:3f:65:c5:6d:4f:b5:d8:56:17:e4:3d:02:25:
49:07:9b:e9:53:90:cd:06:a4:3a:92:ab:a1:3d:a7:
a9:4e:02:d3:2a:69:9d:8c:bf:64:1e:ea:d6:53:5e:
14:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AC:CD:0D:3C:C4:72:1E:F4:44:CE:64:35:CA:F9:47:36:9E:9E:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lazNDTzEch70RM5kNcr5RzaenhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:00:71:b5:6f:16:52:0f:d7:9b:45:c5:5c:02:10:52:87:6c:
41:1f:e0:34:43:44:a6:c0:c3:6a:b8:b4:3f:b5:6e:47:0f:81:
3b:43:44:07:88:f7:43:f0:80:80:53:85:83:ad:b9:fb:66:31:
da:05:ee:21:b8:33:a1:eb:e8:60:e3:bd:ef:53:a4:fd:fc:a3:
32:57:92:fa:be:1d:02:04:58:f6:2c:0b:c8:b1:85:f7:58:b2:
9f:d2:5b:9e:f8:b4:84:2f:72:d1:0f:6f:b7:5e:cb:60:c0:3f:
d4:4c:b2:8d:95:20:57:7c:7a:ea:2a:b6:3a:39:e1:ee:78:ae:
78:25:15:f2:81:d4:15:91:c4:2a:2a:5a:b9:0d:19:ae:e0:28:
83:eb:82:3b:27:0b:1c:e4:ae:23:58:54:9f:83:e6:4f:25:ee:
d1:6a:02:1a:ad:fd:66:d1:e2:85:22:5f:93:a2:a6:99:1c:df:
92:00:be:7a:98:9d:20:cb:3b:2b:19:b0:0a:7b:96:4d:2c:b5:
75:02:58:6d:e5:9f:63:61:64:ff:2d:20:a5:16:5c:eb:a3:ec:
c9:d2:0d:e1:d3:fd:8e:58:81:be:07:1d:2a:d6:da:56:e4:53:
54:b1:19:b3:7d:a7:a2:a7:cf:54:8c:e2:ba:d0:a9:20:0d:91:
3d:c0:a6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:33:04 2025 by rpki-client