Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lmxf1LwJIXFe3dmwg2JHcZwiudk.roa
File: lmxf1LwJIXFe3dmwg2JHcZwiudk.roa (raw, json)
Hash identifier: K3krdL1MELwrc/ijFi6I8BZMAHHMVX9M+NeDhdqNJFI=
Subject key identifier: 96:6C:5F:D4:BC:09:21:71:5E:DD:D9:B0:83:62:47:71:9C:22:B9:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018281E28335A79628E737AED9A0F3425273
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lmxf1LwJIXFe3dmwg2JHcZwiudk.roa
Signing time: Tue 09 Aug 2022 09:14:41 +0000
ROA not before: Tue 09 Aug 2022 09:14:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:e2:83:35:a7:96:28:e7:37:ae:d9:a0:f3:42:52:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 09:14:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=966c5fd4bc0921715eddd9b0836247719c22b9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2e:6a:ec:f1:10:8c:14:00:49:79:fb:f0:82:
63:a5:c2:70:f3:9f:be:98:3f:7a:4b:39:69:21:48:
da:15:d4:6f:e9:b2:b9:60:c3:35:3b:9d:b0:ae:42:
6e:27:98:34:92:cd:25:5e:c3:ce:8e:0a:9d:45:46:
32:8c:37:65:27:04:b5:56:44:7a:7c:48:fb:f2:e0:
d8:0f:da:bd:0e:4a:d2:b8:79:c8:92:9f:f3:fc:a5:
28:2e:26:bf:df:94:ab:f3:46:14:9c:bc:7c:f5:51:
08:63:2d:94:97:8a:e6:85:5e:8d:13:a5:8a:8e:ac:
4a:74:8a:fe:dc:ed:d3:37:5a:6a:ab:b0:cb:ee:a2:
4a:24:65:22:5b:62:7c:b3:69:23:d3:85:f5:41:89:
77:ed:2f:25:7d:b4:33:f3:33:15:ad:a7:93:17:42:
a4:f5:4c:80:6c:f1:dc:65:f9:a5:fc:90:81:2c:34:
d7:55:73:32:da:8c:fe:54:c1:78:8e:bf:0e:cc:28:
e8:fb:7c:e6:8e:29:8c:68:e4:0f:f3:5c:00:aa:8d:
04:2f:f9:75:10:0e:bb:22:a7:a9:b9:c1:ea:69:22:
a5:e4:44:b5:81:44:fb:5b:22:35:e3:7f:fe:6a:a9:
68:5e:79:72:59:dd:d6:b6:e5:75:ca:5c:18:99:63:
20:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6C:5F:D4:BC:09:21:71:5E:DD:D9:B0:83:62:47:71:9C:22:B9:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lmxf1LwJIXFe3dmwg2JHcZwiudk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:a7:15:5b:f2:c2:fe:bc:63:20:0c:2e:93:25:1b:52:62:dd:
e0:98:f4:de:99:d7:3c:28:5f:20:20:d3:28:12:5b:b3:bc:aa:
d6:15:4d:07:4a:8b:1b:fa:32:9c:d6:5c:e5:56:c0:08:c9:5b:
4b:49:6f:d8:57:cf:7e:a6:f9:41:18:7d:e0:11:12:3a:dd:2f:
91:08:82:ae:57:5f:40:0e:a6:02:5c:e0:1e:81:a1:3a:68:e6:
e9:88:7d:02:6a:a0:90:ac:4b:cd:e5:d3:8f:d1:8d:e1:48:e5:
84:c2:f9:1f:aa:51:b0:a5:8e:ba:cc:6b:f5:0a:09:62:2e:58:
4f:e6:aa:c2:a7:d1:ae:97:0c:11:b6:d2:cf:19:93:1e:ca:a5:
f7:5f:38:8f:f5:8d:f5:53:0b:88:54:bd:8d:fb:9c:5e:73:c9:
56:27:da:ac:7c:32:65:50:e7:49:67:bd:20:4a:d3:ae:a6:95:
93:63:e8:e9:2b:b0:61:5a:b3:9e:0d:d1:2d:d0:83:6a:b0:ae:
c4:b4:32:1e:58:bd:f2:33:72:53:94:5f:57:73:ff:58:2a:25:
a3:ec:a7:c4:4d:66:4b:7e:6c:c5:c0:ab:c4:c6:90:69:27:86:
c9:04:01:90:8d:50:d2:b3:5e:68:da:e8:ce:14:54:c5:99:f9:
41:93:fa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:48:44 2025 by rpki-client