Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/LqOd_lY8iFCUlggFL95wM2C9kPE.roa
File: LqOd_lY8iFCUlggFL95wM2C9kPE.roa (raw, json)
Hash identifier: jlF+erIduoc6aYsI3tCispQ1nXuQcrQ/JzlV8Aewde0=
Subject key identifier: 2E:A3:9D:FE:56:3C:88:50:94:96:08:05:2F:DE:70:33:60:BD:90:F1
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 01942747AA60BB7F746D9E2306AF70476A61
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/LqOd_lY8iFCUlggFL95wM2C9kPE.roa
Signing time: Thu 02 Jan 2025 13:49:55 +0000
ROA not before: Thu 02 Jan 2025 13:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206575
IP address blocks: 80.253.160.0/22 maxlen: 22
80.253.160.0/24 maxlen: 24
185.155.224.0/23 maxlen: 23
194.5.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:aa:60:bb:7f:74:6d:9e:23:06:af:70:47:6a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Jan 2 13:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ea39dfe563c8850949608052fde703360bd90f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ac:75:66:b6:e6:9c:3a:f5:fd:69:c7:ec:24:
19:d9:1f:d2:7e:39:75:b2:8c:91:cf:e8:30:6d:d2:
ca:d2:41:d8:c1:0e:6d:d1:97:cc:5f:4d:50:84:9b:
7d:52:16:7d:9b:cf:46:60:17:fc:43:6e:17:b5:76:
bf:ca:ed:9b:5e:8b:40:06:af:5d:36:d3:b4:d4:f5:
3d:79:0e:b6:26:f7:c2:84:e8:46:80:58:00:13:67:
69:1c:ef:e1:45:7c:86:5e:75:57:ed:06:90:8d:65:
12:67:b0:66:5f:6e:e2:fe:c2:e3:ab:b8:c7:a6:ae:
cf:5e:ce:37:63:63:f1:9a:0a:4c:5c:c7:cf:7d:f2:
1e:12:3c:3a:ca:cc:a0:ff:eb:ea:42:d2:ad:a0:c8:
be:bd:80:6b:29:e5:11:76:fe:ec:43:49:ee:26:bf:
60:af:b4:80:e6:87:4c:45:1f:0c:62:59:e2:cf:46:
2d:9e:12:14:d0:00:49:8a:6f:e2:dc:b9:44:07:e0:
8a:9c:d8:40:37:da:ef:80:c2:b3:31:f5:c9:ee:20:
9d:12:08:72:04:13:61:dd:99:f1:10:84:03:19:3b:
fc:ab:e1:bc:db:04:0f:a5:b8:8d:0c:24:5b:28:e2:
0a:a5:ae:4e:e7:07:24:08:39:0b:2a:c0:90:0b:22:
83:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A3:9D:FE:56:3C:88:50:94:96:08:05:2F:DE:70:33:60:BD:90:F1
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/LqOd_lY8iFCUlggFL95wM2C9kPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.160.0/22
185.155.224.0/23
194.5.68.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:03:ff:f2:95:91:1c:58:b8:b0:d8:43:29:85:8f:27:ce:94:
3e:60:01:89:9b:ee:45:c0:8a:f2:2b:a7:9f:49:01:7d:f0:30:
39:cc:aa:65:bd:ee:81:2c:7a:87:9b:d2:bc:4a:52:8a:9e:d1:
fc:89:f8:94:c3:ab:80:c5:b9:e1:ea:c3:32:1d:f8:48:1b:cb:
7c:a5:19:b2:79:ff:42:51:1b:99:cd:4b:20:0a:30:54:77:87:
2b:bf:d7:f4:c1:9e:4c:d4:b7:80:43:a0:21:fd:6a:cd:c3:6f:
40:15:95:74:38:72:6a:ed:6e:41:4c:31:8e:55:6c:7b:ea:2a:
91:96:9a:f1:d8:ba:37:e5:ef:20:a5:c9:2d:81:6b:2c:8f:0d:
60:44:02:d6:ea:2b:42:98:c7:1f:86:cf:c2:68:b4:b4:53:e6:
87:cc:bc:0a:d1:25:6d:ba:3a:76:d5:0b:f6:01:5a:81:a6:fa:
a2:73:52:78:bb:eb:32:e0:ba:24:38:8b:e3:d4:fc:c0:5d:4c:
0c:da:a0:8a:f7:0f:91:e1:db:d4:f3:70:c4:2b:1b:46:c6:c3:
3a:be:80:b1:34:c3:c1:14:50:eb:b7:ce:73:ac:5c:ed:e8:fc:
3f:d2:87:e1:09:d3:0f:46:5c:a5:9f:04:79:99:a8:08:40:81:
14:6d:7e:ea
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQnR6pgu390bZ4jBq9wR2phMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NDM2Mzc1ZmIwMzIyNzU2YjU1ZGFmZjY0ZTI2NWVmNzJj
MGRhNTIwHhcNMjUwMTAyMTM0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWEzOWRmZTU2M2M4ODUwOTQ5NjA4MDUyZmRlNzAzMzYwYmQ5MGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Kx1ZrbmnDr1/WnH7CQZ2R/Sfjl1
soyRz+gwbdLK0kHYwQ5t0ZfMX01QhJt9UhZ9m89GYBf8Q24XtXa/yu2bXotABq9d
NtO01PU9eQ62JvfChOhGgFgAE2dpHO/hRXyGXnVX7QaQjWUSZ7BmX27i/sLjq7jH
pq7PXs43Y2PxmgpMXMfPffIeEjw6ysyg/+vqQtKtoMi+vYBrKeURdv7sQ0nuJr9g
r7SA5odMRR8MYlniz0YtnhIU0ABJim/i3LlEB+CKnNhAN9rvgMKzMfXJ7iCdEghy
BBNh3ZnxEIQDGTv8q+G82wQPpbiNDCRbKOIKpa5O5wckCDkLKsCQCyKDfwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFC6jnf5WPIhQlJYIBS/ecDNgvZDxMB8GA1UdIwQY
MBaAFKdDY3X7AyJ1a1Xa/2TiZe9ywNpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lNWUzZmEtOTllZS00NWNmLWJkOWEt
MGU2YzFmZTlkMDE1LzEvTHFPZF9sWThpRkNVbGdnRkw5NXdNMkM5a1BFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lNWUzZmEtOTllZS00NWNmLWJkOWEtMGU2YzFmZTlkMDE1
LzEvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCUP2gAwQB
uZvgAwQCwgVEMA0GCSqGSIb3DQEBCwUAA4IBAQBuA//ylZEcWLiw2EMphY8nzpQ+
YAGJm+5FwIryK6efSQF98DA5zKplve6BLHqHm9K8SlKKntH8ifiUw6uAxbnh6sMy
HfhIG8t8pRmyef9CURuZzUsgCjBUd4crv9f0wZ5M1LeAQ6Ah/WrNw29AFZV0OHJq
7W5BTDGOVWx76iqRlprx2Lo35e8gpcktgWssjw1gRALW6itCmMcfhs/CaLS0U+aH
zLwK0SVtujp21Qv2AVqBpvqic1J4u+sy4LokOIvj1PzAXUwM2qCK9w+R4dvU83DE
KxtGxsM6voCxNMPBFFDrt85zrFzt6Pw/0ofhCdMPRlylnwR5magIQIEUbX7q
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:14:35 2025 by rpki-client