Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lrs0t2CgzAVm0aRyxyS3QEmNGTs.roa
File: lrs0t2CgzAVm0aRyxyS3QEmNGTs.roa (raw, json)
Hash identifier: mcuttg1VpGfBdlFIpEmdScuxGQRSoFDcJueqOydmOdY=
Subject key identifier: 96:BB:34:B7:60:A0:CC:05:66:D1:A4:72:C7:24:B7:40:49:8D:19:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018558DC2930C2A9C04C6EBA53736684C1A4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lrs0t2CgzAVm0aRyxyS3QEmNGTs.roa
Signing time: Wed 28 Dec 2022 13:11:41 +0000
ROA not before: Wed 28 Dec 2022 13:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:dc:29:30:c2:a9:c0:4c:6e:ba:53:73:66:84:c1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 13:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96bb34b760a0cc0566d1a472c724b740498d193b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c0:c8:a3:ae:51:47:18:2a:72:27:1a:53:87:
81:e3:e3:8c:84:be:86:a0:a5:1d:c6:7f:02:69:d9:
33:c1:c6:5b:ef:88:12:55:95:8f:54:56:a7:62:8a:
36:a5:e7:33:04:8a:34:10:45:c2:7f:08:26:11:d1:
a7:5f:50:b9:fd:b0:38:42:cf:54:0b:35:60:d1:b3:
c7:f3:b9:7a:d5:69:8f:3c:4f:35:61:62:cd:e3:2b:
60:37:cf:1c:66:61:93:44:47:1b:2d:d1:49:f7:e6:
3d:b8:d8:02:8c:86:92:61:b2:4b:02:63:45:2a:77:
c1:88:22:71:c2:03:20:3a:81:bd:5c:73:6f:ef:28:
ff:c3:0c:74:f7:1c:82:22:a9:5f:cd:d8:bf:0c:e7:
f1:0e:1e:51:f7:c1:99:c7:fd:d4:38:b9:99:30:48:
43:0f:79:48:23:29:2a:ac:5c:20:c3:6d:ab:9c:9b:
1e:5d:63:f2:3a:e9:9f:27:f7:b0:06:cd:24:5e:da:
ed:62:19:07:7f:db:31:bd:e8:b6:f6:10:9b:1d:e8:
53:32:82:84:b5:6f:d0:4f:dd:06:e9:c5:23:71:2e:
48:82:67:d5:65:83:32:57:98:f5:c2:c1:51:52:69:
db:7d:92:07:70:8a:b4:d1:3f:4f:9a:fc:8d:f9:01:
ed:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BB:34:B7:60:A0:CC:05:66:D1:A4:72:C7:24:B7:40:49:8D:19:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lrs0t2CgzAVm0aRyxyS3QEmNGTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:4d:e5:f2:e7:cc:e8:ee:05:99:b8:7e:62:e5:fd:8e:02:61:
f6:7d:60:17:78:ff:9c:f6:20:6f:d0:59:df:86:d1:1a:b8:8c:
9a:4c:d9:41:8b:81:c0:1c:ba:1b:42:90:95:bf:9d:d7:01:ba:
9c:a0:51:03:3f:78:65:63:52:6a:08:54:d4:57:c8:ef:b2:1b:
87:6d:be:51:7b:9a:f3:92:e0:b2:20:34:3b:88:dd:ba:11:17:
f7:ad:4f:17:f9:b5:da:06:89:8a:a0:e5:cd:ac:fd:bc:ea:20:
1e:31:82:79:26:8e:1c:2c:0d:67:11:a5:74:14:14:bc:a1:2b:
cb:6e:6a:cc:11:96:67:6a:66:6a:94:c4:07:e6:2a:13:d7:d2:
80:a0:3d:a8:b3:cd:4e:c4:39:5e:32:95:51:93:4d:36:5a:40:
d4:3c:67:7e:9b:b8:d0:93:11:8f:8c:0e:5a:89:b7:a9:f8:1d:
c4:23:cc:5b:86:2d:a4:b4:b0:a4:79:a4:bf:26:f7:6c:89:99:
e6:c9:cd:51:96:19:de:b4:61:e7:95:9e:47:80:56:76:b9:2c:
b3:ed:38:4b:3f:fa:5a:01:1f:a4:dc:cb:51:c9:82:f9:53:8c:
e5:5b:69:56:bc:6e:01:91:45:f4:8d:7e:85:06:2a:42:d2:4a:
09:7b:aa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:49:39 2025 by rpki-client