Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lmWM_C-j2F40nQ4vaMAPtH-KItM.roa
File: lmWM_C-j2F40nQ4vaMAPtH-KItM.roa (raw, json)
Hash identifier: 4YvCaKajeLr7T2RAVT8EIkFTY6jTrSAt5v3q+xZDSHw=
Subject key identifier: 96:65:8C:FC:2F:A3:D8:5E:34:9D:0E:2F:68:C0:0F:B4:7F:8A:22:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DE7CBB7ACB5C3A7B6E8E86AE9330F5C4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lmWM_C-j2F40nQ4vaMAPtH-KItM.roa
Signing time: Wed 21 Jun 2023 15:04:56 +0000
ROA not before: Wed 21 Jun 2023 15:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:188:de7c:2c76/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:7c:bb:7a:cb:5c:3a:7b:6e:8e:86:ae:93:30:f5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 15:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96658cfc2fa3d85e349d0e2f68c00fb47f8a22d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:64:e5:ef:ca:98:80:1d:7c:01:b8:28:f4:
f5:84:dc:32:a8:d4:f0:41:04:96:8d:25:98:26:02:
c9:8f:35:26:c3:2a:4c:f6:19:82:fd:2d:0e:b8:26:
1c:ed:50:7e:1a:4e:c0:6b:cc:bd:80:d3:71:77:dd:
8f:31:62:8e:de:8c:8e:dd:cb:13:8d:60:7c:e7:ff:
64:ce:a4:28:7b:b5:72:90:10:25:95:3a:f2:f8:25:
af:10:df:d7:2d:86:1b:fe:73:49:e3:8a:12:ff:fc:
72:d4:ac:91:02:a4:a7:5b:ea:20:21:bc:3c:6f:06:
fd:9c:20:04:63:ff:bd:cb:bd:8f:23:cd:13:7d:fc:
e0:25:7d:65:f3:05:8b:fe:15:ad:18:9d:e8:ed:5f:
ab:ef:66:04:53:c2:99:f6:1d:87:ef:e5:68:9b:d3:
dc:e2:39:59:cd:4f:b2:6b:2c:cf:18:e5:51:36:70:
ec:54:37:d3:f9:38:87:b7:a5:54:47:de:ed:85:93:
2f:fc:a6:14:97:24:81:92:8e:76:e1:ac:cd:64:3f:
1a:2e:14:a8:6e:e4:fd:38:f4:45:26:1a:3f:56:10:
36:58:0f:ab:c5:25:e0:14:9b:16:88:58:1e:75:eb:
7b:ab:d9:06:0b:74:7e:91:61:f6:64:06:fa:4e:ae:
aa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:65:8C:FC:2F:A3:D8:5E:34:9D:0E:2F:68:C0:0F:B4:7F:8A:22:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lmWM_C-j2F40nQ4vaMAPtH-KItM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:aa:c0:07:41:f9:72:23:78:f3:a0:05:51:f9:17:38:96:00:
97:cf:45:b5:64:47:5e:1d:75:cd:c9:a3:2e:7a:6f:db:0e:17:
13:73:d0:15:db:46:c0:8c:9f:14:e3:ed:c1:17:a2:39:b2:a6:
05:22:f4:a5:cb:8f:7c:8e:d0:2d:57:f0:f1:e9:38:89:1c:6c:
fd:13:b2:69:37:21:c0:c9:6f:d5:f4:c4:3e:15:6b:ab:9e:13:
88:d5:39:80:9b:58:df:d7:df:c4:89:c4:5d:04:52:26:3f:aa:
15:9a:59:3a:99:4a:2e:07:4f:80:99:3c:d6:de:29:8a:f8:e8:
2f:f1:1a:a5:9c:06:88:f4:54:22:dd:14:38:ea:d5:42:7c:70:
d0:ca:b8:64:75:34:6a:fc:3b:95:13:55:f2:b9:c1:9d:ef:4b:
9e:bd:77:0b:6c:10:76:33:b4:a9:49:d4:b1:ac:dc:d5:5e:05:
6f:06:64:36:02:62:36:5b:01:17:f4:02:a1:82:93:54:64:57:
f8:6c:3c:82:4a:a1:ab:96:34:32:58:c7:c9:67:a1:c2:8f:05:
ee:07:ed:6e:79:38:15:d4:94:b1:ab:a5:ce:81:52:7f:19:5b:
d4:02:d8:18:b0:7f:9e:42:66:21:ad:2d:ac:09:6b:c2:14:0c:
82:ef:5f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:08:18 2025 by rpki-client