Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lm9xwd2N93GWraseyMUDlF2wGas.roa
File: lm9xwd2N93GWraseyMUDlF2wGas.roa (raw, json)
Hash identifier: cNrT1j0dZhgefzwtYZeldC2SrB3pw+ntnWqXR8MniBs=
Subject key identifier: 96:6F:71:C1:DD:8D:F7:71:96:AD:AB:1E:C8:C5:03:94:5D:B0:19:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182A138431DD965A1829607ADC246D273D4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lm9xwd2N93GWraseyMUDlF2wGas.roa
Signing time: Mon 15 Aug 2022 11:16:35 +0000
ROA not before: Mon 15 Aug 2022 11:16:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a1:38:43:1d:d9:65:a1:82:96:07:ad:c2:46:d2:73:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 11:16:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=966f71c1dd8df77196adab1ec8c503945db019ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:29:f7:f4:ad:47:d1:9c:ba:c2:ce:25:a3:
9e:07:48:f0:2e:d8:f0:72:d8:0d:fc:57:af:f8:22:
e1:eb:85:e2:d6:4e:91:94:41:9f:1c:22:75:7d:db:
7b:a8:64:95:19:08:f7:46:e1:09:24:f6:93:1d:bf:
e7:68:d2:b9:2c:93:94:65:4f:57:9f:a3:a4:bd:c0:
06:00:9a:17:6f:89:00:da:7c:22:57:4e:5d:8b:95:
82:66:80:1a:1e:a8:67:05:a1:98:70:71:4a:26:26:
89:82:cd:ae:60:12:23:53:52:3e:f6:31:e3:85:28:
4d:01:d0:1c:c0:dd:90:11:4f:85:3b:cf:41:df:ac:
67:b8:af:58:df:0d:0a:74:ba:b9:b0:66:a3:2f:6f:
4f:7e:3d:bd:60:f4:e9:d8:fe:9b:30:56:7c:92:ad:
71:7e:32:0d:ff:0d:0f:ee:b1:c2:a5:3a:49:05:38:
72:8b:97:a3:88:3d:60:b2:9f:2e:bd:db:c2:4c:24:
eb:fe:de:3c:fb:eb:80:43:f4:11:40:2a:d4:d1:22:
76:21:bd:ab:a2:2c:f7:53:e1:83:0e:fd:b1:15:f1:
02:35:e0:a1:c6:53:e1:f8:f7:46:32:32:81:63:73:
b8:cf:61:af:3d:2a:79:ee:e5:5f:a8:58:85:43:9b:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6F:71:C1:DD:8D:F7:71:96:AD:AB:1E:C8:C5:03:94:5D:B0:19:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lm9xwd2N93GWraseyMUDlF2wGas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:0f:ba:67:ed:da:d5:07:69:8a:d2:9f:fa:a1:76:0f:55:78:
72:0e:59:6e:d1:3f:a3:df:79:c8:ef:b3:4e:bb:c5:81:7e:f6:
0d:35:ec:b3:b3:85:be:11:85:7b:e1:b0:fe:99:c4:6f:cb:54:
57:54:63:14:1d:a6:79:80:54:b4:04:9a:a8:b3:66:e8:fb:a8:
e2:6e:0f:23:84:1f:4b:80:04:b3:39:81:64:2e:15:d8:11:c6:
b8:49:d8:95:1d:7d:1e:f7:1d:db:b2:d0:07:ec:00:ec:f1:b7:
e7:ca:c5:b0:9e:c5:8a:aa:69:90:e6:c4:17:95:8f:07:87:0e:
72:fb:95:3f:a1:5a:3a:f1:44:97:90:79:5e:48:25:a6:dc:02:
ab:81:a7:ee:96:54:bb:9c:8a:03:db:60:17:0b:20:51:97:eb:
bd:25:e5:00:68:bd:04:89:7a:e3:ac:e0:6b:c9:10:e3:7f:3c:
c4:84:d8:fa:5d:31:00:2e:0f:21:30:42:a9:6a:6b:4a:d1:73:
b0:fc:0d:bd:49:ee:c8:f7:1e:00:54:4e:c0:e9:3a:06:39:43:
71:87:e1:50:20:4c:be:e2:84:9a:9f:99:00:6f:ca:07:fa:25:
1a:c3:b0:5e:d5:34:f8:2d:ca:08:86:7c:cd:59:ab:e6:91:e5:
d0:84:92:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:06:56 2025 by rpki-client