Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/LcUYT5oYCnIlb4BWDoSlk32d2MM.roa
File: LcUYT5oYCnIlb4BWDoSlk32d2MM.roa (raw, json)
Hash identifier: jVA2zeCexldZLAA7C+SoiCtcqgabKoDcHk+AmuKbioQ=
Subject key identifier: 2D:C5:18:4F:9A:18:0A:72:25:6F:80:56:0E:84:A5:93:7D:9D:D8:C3
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 019426D89C9DB461903DCF7F6FCE121AB2E5
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/LcUYT5oYCnIlb4BWDoSlk32d2MM.roa
Signing time: Thu 02 Jan 2025 11:48:37 +0000
ROA not before: Thu 02 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207088
IP address blocks: 195.210.96.0/22 maxlen: 22
195.210.104.0/22 maxlen: 22
195.210.116.0/22 maxlen: 22
195.210.120.0/22 maxlen: 22
2a0a:a200::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:9c:9d:b4:61:90:3d:cf:7f:6f:ce:12:1a:b2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Jan 2 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dc5184f9a180a72256f80560e84a5937d9dd8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:73:7b:54:d5:f6:00:fb:22:80:f6:78:03:a6:
fa:12:d4:39:9b:72:42:96:60:ef:4e:52:51:66:5c:
dc:ea:b1:6a:3f:a7:ad:f3:58:81:00:ae:4b:e8:50:
7a:e8:a4:ad:d9:db:cc:5e:2c:6f:04:2d:5e:a3:38:
c1:5f:0e:1f:b3:a6:27:6f:c6:9b:6c:47:a5:ca:11:
bd:6d:75:94:ed:07:47:b1:93:6e:1a:68:4e:3b:02:
61:3e:4b:ac:37:4d:e1:df:e9:b2:ff:bc:4e:ce:7d:
a1:ae:f5:f2:01:45:3c:5c:08:68:e2:7f:e4:ab:77:
36:e6:a1:0a:58:95:96:42:92:89:85:ac:26:7e:0a:
8f:e5:3f:b8:c5:92:84:e8:61:f0:7f:fb:05:a0:a5:
76:48:66:5a:ba:d5:56:ac:0c:70:8e:50:f1:70:37:
56:b5:98:8e:fa:94:42:9e:19:7c:eb:42:0f:c9:d1:
98:52:81:32:2f:a9:e7:8a:9d:92:0e:a3:e2:d7:a1:
6b:ae:60:a9:b8:db:3c:0f:c5:7b:02:56:cd:64:95:
ae:35:26:82:2d:fa:8a:50:4e:ad:cb:f2:34:10:cc:
9f:cf:03:7c:ea:de:d2:a1:19:fa:71:f6:f2:b3:41:
60:92:04:fd:a3:3f:d2:6e:42:72:d8:4c:17:5f:94:
18:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C5:18:4F:9A:18:0A:72:25:6F:80:56:0E:84:A5:93:7D:9D:D8:C3
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/LcUYT5oYCnIlb4BWDoSlk32d2MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.96.0/22
195.210.104.0/22
195.210.116.0-195.210.123.255
IPv6:
2a0a:a200::/29
Signature Algorithm: sha256WithRSAEncryption
2b:bc:e0:b0:05:a6:4d:e5:71:c6:d1:a8:7d:50:5a:74:41:a3:
1c:91:c6:d4:85:23:b3:fe:c2:b7:b0:b5:61:5f:ab:55:50:a0:
8f:69:ec:41:81:97:6d:9e:8e:ee:bb:32:38:ff:89:ff:52:79:
ed:0b:43:9d:4f:7b:9e:e3:39:b4:a6:0d:bf:cf:f5:7b:30:2b:
a6:35:74:91:7b:7c:11:4f:6c:e4:c8:d9:df:4c:6c:ad:31:7f:
2c:3e:6c:0c:01:04:d9:7b:e1:95:27:83:d4:a5:d7:09:22:d9:
57:3f:34:78:97:d1:b0:7b:fc:96:77:81:9c:11:17:5d:6d:bd:
90:cf:43:69:ec:81:41:e0:e0:d4:43:5e:1d:4a:87:7e:17:d3:
88:11:24:7b:7b:d6:b2:43:ac:8a:e6:c2:1b:c2:e0:8b:16:09:
39:5a:ad:d9:ff:64:7d:11:d2:f9:14:a2:a7:a1:90:58:1b:5c:
cc:13:f1:c1:22:1a:dc:54:94:ac:cd:74:42:9a:dd:71:d9:ee:
2a:e2:66:fe:e1:3b:53:1b:54:d0:92:19:e6:ec:04:05:72:ba:
f3:c1:20:41:10:02:79:06:4b:82:a4:b7:7c:79:d0:9e:73:af:
50:2e:a7:4d:c2:9a:21:dc:39:e7:65:d4:f1:a7:93:ac:df:69:
0f:4d:dc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:05:30 2025 by rpki-client