Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/lcVRgFmTlCcww53NFkFkK4iGqbM.roa
File: lcVRgFmTlCcww53NFkFkK4iGqbM.roa (raw, json)
Hash identifier: VtMzZFJ3NTiMK6oaatZagMMBJQTfT5IjLjDY1x6iB7w=
Subject key identifier: 95:C5:51:80:59:93:94:27:30:C3:9D:CD:16:41:64:2B:88:86:A9:B3
Certificate issuer: /CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e
Certificate serial: 019421B1FC37BF4DC747BCDB964DE0A41847
Authority key identifier: B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/lcVRgFmTlCcww53NFkFkK4iGqbM.roa
Signing time: Wed 01 Jan 2025 11:48:20 +0000
ROA not before: Wed 01 Jan 2025 11:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44454
IP address blocks: 85.202.144.0/20 maxlen: 32
178.216.88.0/21 maxlen: 32
185.46.104.0/22 maxlen: 32
2a01:8160::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:fc:37:bf:4d:c7:47:bc:db:96:4d:e0:a4:18:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e
Validity
Not Before: Jan 1 11:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95c551805993942730c39dcd1641642b8886a9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:33:df:b3:4d:3d:cf:95:3b:62:d5:56:d0:7c:
38:25:18:6c:97:58:59:e2:6f:9f:6d:10:a8:6e:ef:
80:95:70:ee:19:f5:4b:f4:c9:5b:d4:b0:e9:dc:b8:
73:31:fe:49:0d:7f:a2:00:81:ce:2f:47:c8:ce:bf:
30:73:af:f7:cb:46:f6:f1:6e:c4:23:2b:b0:62:47:
68:41:2a:48:d3:fe:32:5f:38:13:5b:31:a6:d1:31:
e2:fa:d2:ee:e3:8a:f0:65:3a:e7:46:78:7b:63:ac:
3b:e3:a9:b7:0a:5f:3b:7c:a4:e2:7f:38:f3:66:0a:
19:42:be:51:e7:85:48:e0:17:25:8c:d7:79:cc:7b:
d5:21:0b:48:6c:a1:e0:ba:f3:e6:76:a2:ab:a5:dd:
ec:43:cf:22:4d:ab:d1:52:d4:60:7d:11:f7:0c:7d:
e1:dc:0e:ee:b0:b6:05:00:b3:34:be:0e:ea:b1:ba:
02:01:f7:92:43:8b:e0:8c:35:92:be:ee:7d:55:9c:
52:80:51:cb:46:a9:09:30:4a:b8:98:a5:d4:e0:35:
71:25:8f:74:f5:50:de:0c:63:70:bb:19:57:c5:cf:
77:9c:e1:79:8a:d2:ea:c4:24:3f:ff:f1:be:fc:b6:
fa:ee:14:ce:84:cc:33:31:7b:7e:b8:c6:24:87:a0:
09:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C5:51:80:59:93:94:27:30:C3:9D:CD:16:41:64:2B:88:86:A9:B3
X509v3 Authority Key Identifier:
keyid:B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/lcVRgFmTlCcww53NFkFkK4iGqbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.144.0/20
178.216.88.0/21
185.46.104.0/22
IPv6:
2a01:8160::/32
Signature Algorithm: sha256WithRSAEncryption
4d:93:61:a2:94:8f:38:fc:4d:47:d0:bf:e2:f2:5f:a2:f3:b3:
81:dd:c5:36:f1:8d:7a:3a:ba:05:20:a2:ee:92:85:7f:72:64:
d9:00:95:8a:5d:49:fd:5b:b2:2f:e0:9e:37:95:63:16:a4:a0:
6f:7a:e0:56:79:4a:37:fd:77:b6:3b:b9:45:c7:fd:10:ba:78:
ba:af:4a:e1:c8:8a:23:a5:cb:7c:0d:7c:a2:80:da:f3:66:9b:
0c:34:d6:d4:5e:25:30:af:08:6b:cd:28:de:e0:86:48:fa:a8:
28:af:b7:1b:b4:de:52:f2:78:0b:83:12:58:36:24:24:49:5f:
37:75:8f:f9:8a:37:8b:db:ca:96:9c:f2:39:70:6f:27:3c:c0:
45:ac:9b:16:6c:4b:14:17:b0:9b:0a:cd:49:58:98:b0:f2:5c:
4b:84:c9:34:c6:40:a4:bf:aa:22:ea:fe:36:82:b8:d3:46:7c:
fa:36:df:2e:7d:97:ff:63:98:ef:31:8c:d4:5d:35:15:90:8b:
43:5e:4a:80:81:8f:d6:a9:b4:2c:33:e0:3f:62:98:0a:44:c9:
46:65:49:81:df:e2:2a:f4:fa:a4:07:2f:6b:02:f1:de:58:67:
23:47:cf:37:72:17:ca:9a:92:a3:09:22:82:8e:14:9e:47:8d:
0f:89:ba:90
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQhsfw3v03HR7zblk3gpBhHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YjZiNDliZTRkNjBhMDcyYTRiYTZjYTk3OTNmODkzYjU5
ZTRjOWUwHhcNMjUwMTAxMTE0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWM1NTE4MDU5OTM5NDI3MzBjMzlkY2QxNjQxNjQyYjg4ODZhOWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zPfs009z5U7YtVW0Hw4JRhsl1hZ
4m+fbRCobu+AlXDuGfVL9Mlb1LDp3LhzMf5JDX+iAIHOL0fIzr8wc6/3y0b28W7E
IyuwYkdoQSpI0/4yXzgTWzGm0THi+tLu44rwZTrnRnh7Y6w746m3Cl87fKTifzjz
ZgoZQr5R54VI4BcljNd5zHvVIQtIbKHguvPmdqKrpd3sQ88iTavRUtRgfRH3DH3h
3A7usLYFALM0vg7qsboCAfeSQ4vgjDWSvu59VZxSgFHLRqkJMEq4mKXU4DVxJY90
9VDeDGNwuxlXxc93nOF5itLqxCQ///G+/Lb67hTOhMwzMXt+uMYkh6AJkwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFJXFUYBZk5QnMMOdzRZBZCuIhqmzMB8GA1UdIwQY
MBaAFLi2tJvk1goHKkumypeT+JO1nkyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUxhMG0tVFdDZ2NxUzZiS2w1UDRrN1dlVEo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83ZmQ1MDAtMDBiOC00NTRlLTg3MzMt
OTliNGQ0YWNlNjkzLzEvbGNWUmdGbVRsQ2N3dzUzTkZrRmtLNGlHcWJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS83ZmQ1MDAtMDBiOC00NTRlLTg3MzMtOTliNGQ0YWNlNjkz
LzEvdUxhMG0tVFdDZ2NxUzZiS2w1UDRrN1dlVEo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEVcqQAwQD
sthYAwQCuS5oMA0EAgACMAcDBQAqAYFgMA0GCSqGSIb3DQEBCwUAA4IBAQBNk2Gi
lI84/E1H0L/i8l+i87OB3cU28Y16OroFIKLukoV/cmTZAJWKXUn9W7Iv4J43lWMW
pKBveuBWeUo3/Xe2O7lFx/0Quni6r0rhyIojpct8DXyigNrzZpsMNNbUXiUwrwhr
zSje4IZI+qgor7cbtN5S8ngLgxJYNiQkSV83dY/5ijeL28qWnPI5cG8nPMBFrJsW
bEsUF7CbCs1JWJiw8lxLhMk0xkCkv6oi6v42grjTRnz6Nt8ufZf/Y5jvMYzUXTUV
kItDXkqAgY/WqbQsM+A/YpgKRMlGZUmB3+Iq9PqkBy9rAvHeWGcjR883chfKmpKj
CSKCjhSeR40PibqQ
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:50:21 2025 by rpki-client