Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lxohzH1YSFk4asGZgiIbFhOEIfM.roa
File: lxohzH1YSFk4asGZgiIbFhOEIfM.roa (raw, json)
Hash identifier: WejAPEHbmYg51IH/t+BbyuopEbvqBHpby6tVfMFfoWw=
Subject key identifier: 97:1A:21:CC:7D:58:48:59:38:6A:C1:99:82:22:1B:16:13:84:21:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01877226F5D1E6D5BC3CC4EB13F7CD68DBD9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lxohzH1YSFk4asGZgiIbFhOEIfM.roa
Signing time: Tue 11 Apr 2023 21:09:28 +0000
ROA not before: Tue 11 Apr 2023 21:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:72:26:f5:d1:e6:d5:bc:3c:c4:eb:13:f7:cd:68:db:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 11 21:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=971a21cc7d584859386ac19982221b16138421f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:be:ac:76:01:fe:76:25:d8:e3:82:14:ca:
ca:fa:d8:0c:9a:73:7c:7b:f9:02:d3:de:5b:4a:0c:
8c:da:dd:cf:39:f9:42:9e:83:89:cf:2e:95:86:c5:
d1:2a:a9:f9:6d:53:4d:55:b9:fc:30:65:c8:47:cb:
aa:59:ae:d7:15:26:74:f7:0f:20:30:7a:74:30:f9:
1d:1c:50:7e:7a:4b:19:81:c0:56:e6:64:16:10:01:
b9:5d:24:8c:53:47:61:ea:02:33:37:bb:25:5e:ac:
ad:4a:0c:c0:e6:92:b9:e7:91:bf:70:76:ce:a0:73:
3a:77:a2:81:55:3a:5d:8b:d2:f6:11:00:90:c5:39:
05:84:b0:5f:c2:3f:15:b1:b2:eb:7a:d6:5a:51:5c:
e1:01:d9:2a:bf:94:73:1e:ec:58:83:11:8d:fb:7a:
8b:a6:6d:45:37:4e:da:1f:93:33:dd:2a:e0:43:57:
72:d2:29:ef:aa:cb:de:8e:05:15:2b:ca:cb:cb:06:
1e:57:99:df:46:6a:c1:3f:c6:a7:cf:09:c8:70:62:
5c:58:22:64:c8:9d:f6:cc:21:9d:65:62:d3:04:fd:
01:1d:d9:1c:84:68:a4:48:dd:ac:fd:d5:c2:9b:c2:
86:c0:4d:92:40:d4:96:cf:2c:a9:ec:89:77:7a:5a:
ab:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1A:21:CC:7D:58:48:59:38:6A:C1:99:82:22:1B:16:13:84:21:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lxohzH1YSFk4asGZgiIbFhOEIfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:f6:fe:56:4e:45:2b:f8:d7:60:64:ea:30:dd:df:55:6b:1d:
96:71:96:5d:a7:a6:c7:cc:e9:d3:13:95:94:38:e6:da:4c:0d:
69:90:a4:ab:67:f2:8a:9e:91:a9:d5:0e:22:53:26:f0:97:b4:
61:1a:a2:cd:e6:db:f8:62:3e:0b:fd:4d:5b:88:dd:74:22:77:
11:f3:15:31:2f:6b:20:dc:ef:a7:50:1f:bd:0c:f9:02:38:48:
07:22:7e:4b:80:ec:96:d9:ab:5f:65:dd:fd:6b:2b:fe:d2:ca:
26:22:9e:de:ed:cb:d2:4d:0c:c6:9e:f9:f6:69:8c:e1:af:1c:
8d:ee:6b:5d:f1:f2:ca:52:d7:35:46:51:a2:81:06:0b:5b:84:
9e:f6:6f:2d:1d:af:98:24:31:94:9b:89:15:4b:af:87:fe:e3:
07:ed:d9:41:f6:e4:db:2f:37:3e:37:20:44:a6:3e:12:aa:2f:
c1:70:45:ff:de:5c:73:4f:0c:e2:48:c4:de:ee:5c:4a:87:af:
48:64:b8:e5:be:d0:a4:1a:37:e9:9c:03:d3:a8:fd:be:6a:88:
0f:fd:21:1b:6d:2b:4a:77:46:df:21:57:a9:2b:fd:3a:c1:82:
6e:1e:84:82:ff:75:b2:c8:6f:f2:be:3c:1b:32:0c:c2:0e:89:
ca:3f:ca:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:13:27 2025 by rpki-client