Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/lWvdh1tW9Nr29e037SncsLGwjfI.roa
File: lWvdh1tW9Nr29e037SncsLGwjfI.roa (raw, json)
Hash identifier: j1dUTiHWBt3aDo99E5yf928X8VvKCbJydPoVbx3OYLA=
Subject key identifier: 95:6B:DD:87:5B:56:F4:DA:F6:F5:ED:37:ED:29:DC:B0:B1:B0:8D:F2
Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial: 01942823A55E65652B7E9B948E5F61561070
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/lWvdh1tW9Nr29e037SncsLGwjfI.roa
Signing time: Thu 02 Jan 2025 17:50:12 +0000
ROA not before: Thu 02 Jan 2025 17:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49624
IP address blocks: 188.93.170.0/23 maxlen: 23
2001:7f8:4c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:a5:5e:65:65:2b:7e:9b:94:8e:5f:61:56:10:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
Validity
Not Before: Jan 2 17:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=956bdd875b56f4daf6f5ed37ed29dcb0b1b08df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:41:e7:f7:fb:5f:b4:61:d4:65:f8:40:ee:b1:
b6:64:f3:7f:46:20:7b:4b:5f:f4:a7:46:81:0a:5e:
aa:45:21:d5:4d:10:d2:74:c2:4c:06:13:84:1b:fd:
ce:36:ac:3e:e8:d1:71:5f:50:0a:92:95:b8:a6:b5:
ca:32:2f:ec:c3:f8:73:7c:01:b6:cf:9e:ed:bd:46:
6a:f2:a1:7f:bd:f2:79:1c:1b:1e:11:05:a3:fa:25:
2b:ba:a4:66:14:ec:51:a0:a3:f6:a7:dd:86:8c:a5:
94:4f:02:f4:40:38:84:8b:87:bf:cc:e5:b3:7a:f2:
19:92:63:79:d7:44:9c:a3:83:d4:d8:39:ff:8e:ef:
02:00:6e:10:0a:8f:11:c8:0b:40:ff:b7:d8:bb:06:
f9:47:ec:f9:fe:18:e8:54:2f:90:91:84:40:12:92:
d8:03:fb:07:aa:79:8b:a5:ef:ed:21:2f:67:8d:b7:
48:8d:8e:23:cf:3e:84:f5:a0:11:73:cd:70:b7:f0:
4e:86:96:8e:a8:d0:9c:a3:38:21:6e:7e:d9:16:98:
b8:e1:90:e4:56:fc:62:62:5a:9e:64:52:43:1e:04:
fb:69:08:f5:e6:d7:fd:6c:28:c9:76:74:f8:0f:ac:
59:86:99:c7:93:60:3a:2e:e6:dc:15:c1:60:b7:62:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6B:DD:87:5B:56:F4:DA:F6:F5:ED:37:ED:29:DC:B0:B1:B0:8D:F2
X509v3 Authority Key Identifier:
keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/lWvdh1tW9Nr29e037SncsLGwjfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.170.0/23
IPv6:
2001:7f8:4c::/48
Signature Algorithm: sha256WithRSAEncryption
c6:ed:b4:42:00:0e:b0:75:4b:91:9a:e6:1c:1b:78:38:4d:71:
93:7e:8b:bb:be:59:13:5b:da:77:a6:62:08:0d:97:44:b0:5c:
8c:e8:6c:4f:f2:c4:bf:f4:a4:0a:49:9e:81:99:79:e7:8c:4a:
62:9b:a9:f9:84:25:d5:0f:b5:59:78:11:d4:1f:cd:c6:5c:7d:
c5:33:03:85:08:4c:87:f6:57:54:5a:e5:68:22:10:fd:00:e7:
6c:4d:d4:5f:91:55:0e:4d:75:59:76:77:06:e5:c5:dd:8c:3a:
d0:bd:78:24:6e:3d:49:19:c3:c9:91:a3:a8:a3:fe:44:2a:e9:
62:cc:e8:91:b5:73:da:95:e8:7d:78:4a:f0:33:d2:d6:ab:da:
49:99:09:63:74:51:83:47:8b:66:c1:20:92:de:43:b3:8a:de:
d6:af:1e:57:20:14:a1:f9:71:15:42:26:2c:8e:de:3f:57:41:
4f:4e:a8:97:02:82:79:e2:c7:40:53:39:f9:22:c6:51:27:28:
9b:c7:6f:01:39:58:a1:3f:45:95:b5:bc:fb:c5:e9:ee:d0:69:
9d:fd:a6:7c:e3:04:f0:ed:bc:00:2b:56:7a:56:80:fa:17:b4:
42:a4:cb:3d:d8:f6:42:0e:cd:b0:b2:a4:97:ac:55:f9:62:6a:
19:69:50:7c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQoI6VeZWUrfpuUjl9hVhBwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2OTVjYjg2NTg2Y2JmZDI0NjJhZmEwNTJjOTZhMjVjMTYy
ODMwYTgwHhcNMjUwMTAyMTc1MDEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTZiZGQ4NzViNTZmNGRhZjZmNWVkMzdlZDI5ZGNiMGIxYjA4ZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UHn9/tftGHUZfhA7rG2ZPN/RiB7
S1/0p0aBCl6qRSHVTRDSdMJMBhOEG/3ONqw+6NFxX1AKkpW4prXKMi/sw/hzfAG2
z57tvUZq8qF/vfJ5HBseEQWj+iUruqRmFOxRoKP2p92GjKWUTwL0QDiEi4e/zOWz
evIZkmN510Sco4PU2Dn/ju8CAG4QCo8RyAtA/7fYuwb5R+z5/hjoVC+QkYRAEpLY
A/sHqnmLpe/tIS9njbdIjY4jzz6E9aARc81wt/BOhpaOqNCcozghbn7ZFpi44ZDk
VvxiYlqeZFJDHgT7aQj15tf9bCjJdnT4D6xZhpnHk2A6LubcFcFgt2JTewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJVr3YdbVvTa9vXtN+0p3LCxsI3yMB8GA1UdIwQY
MBaAFNaVy4ZYbL/SRir6BSyWolwWKDCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZGJmZWItYjJlMi00ODE2LTliYTkt
YTVjZDgxYjVlMDBiLzEvbFd2ZGgxdFc5TnIyOWUwMzdTbmNzTEd3amZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zZGJmZWItYjJlMi00ODE2LTliYTktYTVjZDgxYjVlMDBi
LzEvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBvF2qMA8E
AgACMAkDBwAgAQf4AEwwDQYJKoZIhvcNAQELBQADggEBAMbttEIADrB1S5Ga5hwb
eDhNcZN+i7u+WRNb2nemYggNl0SwXIzobE/yxL/0pApJnoGZeeeMSmKbqfmEJdUP
tVl4EdQfzcZcfcUzA4UITIf2V1Ra5WgiEP0A52xN1F+RVQ5NdVl2dwblxd2MOtC9
eCRuPUkZw8mRo6ij/kQq6WLM6JG1c9qV6H14SvAz0tar2kmZCWN0UYNHi2bBIJLe
Q7OK3tavHlcgFKH5cRVCJiyO3j9XQU9OqJcCgnnix0BTOfkixlEnKJvHbwE5WKE/
RZW1vPvF6e7QaZ39pnzjBPDtvAArVnpWgPoXtEKkyz3Y9kIOzbCypJesVfliahlp
UHw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:05:47 2025 by rpki-client