Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lnEyijfH60Grh4k7TEb9NzdW7m8.roa
File: lnEyijfH60Grh4k7TEb9NzdW7m8.roa (raw, json)
Hash identifier: rKbszR9kz6vU2556UVpIK8m400DogDraAeVOymFWJTk=
Subject key identifier: 96:71:32:8A:37:C7:EB:41:AB:87:89:3B:4C:46:FD:37:37:56:EE:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188145EFD8284C6AEEC92ED2D746914EED6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lnEyijfH60Grh4k7TEb9NzdW7m8.roa
Signing time: Sat 13 May 2023 09:09:09 +0000
ROA not before: Sat 13 May 2023 09:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:14:5e:fd:82:84:c6:ae:ec:92:ed:2d:74:69:14:ee:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 13 09:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9671328a37c7eb41ab87893b4c46fd373756ee6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:99:01:3b:17:6f:d2:a8:d0:bb:5c:b4:fa:
e9:90:ed:33:28:a7:a4:7c:86:44:76:cd:61:94:72:
95:2b:cb:17:8a:d1:2e:66:df:61:8e:67:23:d7:db:
54:1e:c5:41:da:17:48:59:45:1c:e3:1c:27:88:06:
4c:19:85:30:1c:a0:3b:13:21:7d:d5:f1:bd:7b:df:
13:9a:d7:18:60:b3:1c:34:25:6a:4f:0b:ee:c0:1d:
26:d9:55:01:4e:2e:95:ec:e2:e8:b7:4d:c5:7c:34:
7b:6a:80:12:45:c8:a1:aa:5e:d4:5a:9a:76:6f:a8:
33:d4:c5:0d:79:af:e5:fa:f4:65:38:d3:19:c5:1d:
03:f6:13:91:ea:51:e0:54:1a:77:2d:14:1b:0f:a7:
35:61:04:7c:a5:d6:1f:62:af:5f:9e:c4:c1:a4:55:
45:3d:a1:52:58:15:7a:3e:cb:5d:f3:a3:1b:ba:c1:
70:9f:2a:d3:f1:e4:48:2d:bb:d9:f7:ca:2a:34:f2:
ac:35:1a:44:fd:2b:c1:0e:3f:7d:e0:1d:5c:cb:78:
43:e3:93:36:dd:20:d0:e6:5e:92:6e:0a:80:1d:ad:
9c:0b:79:f8:94:a0:54:c1:54:51:28:7f:8c:29:d5:
84:8d:ca:d6:9b:af:e4:f0:6a:55:ca:4e:02:36:cd:
b6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:71:32:8A:37:C7:EB:41:AB:87:89:3B:4C:46:FD:37:37:56:EE:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lnEyijfH60Grh4k7TEb9NzdW7m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:52:71:af:5c:bf:e5:a1:80:ca:ea:d6:56:fd:c7:f8:00:47:
b7:d6:b9:d1:36:ae:16:42:66:ba:06:1b:67:a8:e3:08:b8:16:
34:4b:69:bd:99:51:4e:0d:be:d2:88:e6:2e:fa:74:bf:81:ca:
7e:bc:72:1c:98:d2:22:8d:3e:0a:d1:f2:e7:b8:3f:e0:22:91:
26:2c:a2:67:2a:21:48:dd:bd:ba:a5:b1:08:34:c5:c5:17:93:
d7:66:b8:63:76:72:76:12:be:49:a6:00:cd:ec:b0:76:e7:a4:
e8:7a:85:47:16:09:3d:e7:dd:cb:b7:70:b5:43:32:10:01:9a:
f8:27:07:cd:9f:da:f1:0a:63:b4:3d:e3:1f:11:75:19:da:8d:
b5:b6:76:5f:46:d6:1d:35:79:a8:3a:d5:cd:ac:f4:d0:35:2f:
17:8c:ef:b7:8c:ba:d5:ce:ff:f5:6d:c5:bb:c9:b2:de:95:f8:
61:42:35:77:90:be:cb:c9:14:38:99:29:26:88:e1:85:77:16:
f9:78:b1:45:cd:a0:d1:92:91:78:51:dd:f0:23:8b:a4:af:46:
25:80:30:42:0d:8c:55:cf:cd:d1:86:73:55:54:69:b9:7e:0b:
48:6a:51:91:55:0f:53:c4:34:64:83:db:9a:9b:fa:a9:42:f2:
6f:bb:fb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:13:57 2025 by rpki-client