Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/Lc2MOeHrhJYACH3DTtJSFK-up5U.roa
File: Lc2MOeHrhJYACH3DTtJSFK-up5U.roa (raw, json)
Hash identifier: jsqmE6guApHIEUr5xOYbDvIqn7++Rg1hChyQTZ/F2xY=
Subject key identifier: 2D:CD:8C:39:E1:EB:84:96:00:08:7D:C3:4E:D2:52:14:AF:AE:A7:95
Certificate issuer: /CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Certificate serial: 0194B1ABFDB3E2FB011DF29A223B0332D4B5
Authority key identifier: 29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/Lc2MOeHrhJYACH3DTtJSFK-up5U.roa
Signing time: Wed 29 Jan 2025 10:47:06 +0000
ROA not before: Wed 29 Jan 2025 10:47:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57608
IP address blocks: 84.205.172.0/22 maxlen: 22
91.233.112.0/22 maxlen: 22
185.46.168.0/22 maxlen: 22
185.238.120.0/22 maxlen: 22
2a04:9b80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b1:ab:fd:b3:e2:fb:01:1d:f2:9a:22:3b:03:32:d4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Validity
Not Before: Jan 29 10:47:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dcd8c39e1eb849600087dc34ed25214afaea795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:39:21:26:15:63:3a:4f:54:88:70:d9:e0:
eb:2a:2a:25:03:06:3e:94:25:d9:86:a7:80:55:60:
21:09:1f:e6:15:9f:3c:7d:b5:45:24:4c:21:7b:40:
38:7f:53:ea:1e:9e:5d:1d:57:4e:a7:aa:3a:65:58:
63:d5:05:c9:f8:8e:5a:17:e8:68:82:37:fb:81:ec:
a3:08:3c:ad:79:73:0a:bd:da:63:73:62:56:c6:c1:
4e:3c:20:ed:2e:7a:fd:4b:f3:96:c7:4f:3f:17:d9:
3f:aa:97:fa:38:db:93:ab:d2:3a:a6:c7:ba:7a:8e:
12:22:c8:cf:34:f1:f6:60:6a:31:6c:b9:80:cd:b6:
58:e4:09:c6:be:77:47:f9:d9:36:78:4c:36:f7:bc:
af:33:15:f0:a0:31:81:aa:ab:52:ae:a8:31:b0:ac:
ea:85:69:8b:3d:0e:e1:10:69:63:e3:2b:45:26:96:
d4:a6:ec:95:39:ee:a1:75:84:a5:88:e9:66:44:2c:
1d:57:2b:b9:c5:f0:b7:b1:f8:19:f4:94:f9:46:42:
72:ad:d7:80:f1:57:a4:04:2c:15:f6:6d:da:27:45:
5c:25:bb:44:b4:3b:60:25:6b:c9:6a:39:b1:48:6f:
15:ef:e9:e5:e5:c2:06:8b:42:47:d6:f8:2e:29:af:
70:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CD:8C:39:E1:EB:84:96:00:08:7D:C3:4E:D2:52:14:AF:AE:A7:95
X509v3 Authority Key Identifier:
keyid:29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/Lc2MOeHrhJYACH3DTtJSFK-up5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.172.0/22
91.233.112.0/22
185.46.168.0/22
185.238.120.0/22
IPv6:
2a04:9b80::/29
Signature Algorithm: sha256WithRSAEncryption
74:b1:2e:bb:c1:a5:0f:18:30:23:d9:58:2d:fe:de:a2:2f:8b:
98:fc:60:5f:10:98:4d:b9:af:83:78:8e:d9:db:81:4e:00:52:
d7:78:3d:da:1e:4b:ed:4c:7a:ed:a1:b6:4a:81:7d:f0:b2:7a:
a2:67:8a:66:c7:0f:3a:87:12:5d:24:b8:df:b3:ad:72:44:77:
cd:30:2a:85:4b:b4:08:c3:21:e5:a7:06:0d:a1:bc:71:62:99:
d0:af:0b:bd:d4:4d:77:13:1d:1e:2d:7f:c0:2d:96:f4:e7:3a:
e5:a5:11:3c:9d:f2:f5:b3:d8:9d:03:d3:64:2c:e0:62:e4:0d:
72:2f:db:16:94:ad:33:7d:e5:89:ca:dd:84:f9:87:9f:57:ca:
2c:d1:13:75:ad:fd:4a:fb:17:fc:cd:41:66:05:f8:2c:06:ec:
4b:bd:47:cc:e4:1a:42:f7:96:56:8c:c3:f4:38:1d:36:48:2c:
75:77:91:b8:90:f0:75:83:37:c5:b1:c9:04:5e:22:34:a6:2b:
3b:e6:6a:ad:f7:71:ef:11:7d:ab:0e:d3:90:9b:02:71:6f:19:
a3:d6:86:0b:a7:08:4e:4c:35:a9:6e:08:53:23:85:7b:75:30:
dc:4c:07:6e:ca:59:ae:da:67:ce:69:63:90:83:01:04:2d:36:
65:3c:b9:e8
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZSxq/2z4vsBHfKaIjsDMtS1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5M2YyZWM3NGI0MDY2YWM2N2E4NzY4ZDhlMzg2MDZlZmNk
NjQwMTMwHhcNMjUwMTI5MTA0NzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGNkOGMzOWUxZWI4NDk2MDAwODdkYzM0ZWQyNTIxNGFmYWVhNzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlY5ISYVYzpPVIhw2eDrKiolAwY+
lCXZhqeAVWAhCR/mFZ88fbVFJEwhe0A4f1PqHp5dHVdOp6o6ZVhj1QXJ+I5aF+ho
gjf7geyjCDyteXMKvdpjc2JWxsFOPCDtLnr9S/OWx08/F9k/qpf6ONuTq9I6pse6
eo4SIsjPNPH2YGoxbLmAzbZY5AnGvndH+dk2eEw297yvMxXwoDGBqqtSrqgxsKzq
hWmLPQ7hEGlj4ytFJpbUpuyVOe6hdYSliOlmRCwdVyu5xfC3sfgZ9JT5RkJyrdeA
8VekBCwV9m3aJ0VcJbtEtDtgJWvJajmxSG8V7+nl5cIGi0JH1vguKa9wYQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFC3NjDnh64SWAAh9w07SUhSvrqeVMB8GA1UdIwQY
MBaAFCk/LsdLQGasZ6h2jY44YG781kATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OTA0NWEtYTViMS00ZTU5LTk3MTct
MjNmMjI2M2I5YmQyLzEvTGMyTU9lSHJoSllBQ0gzRFR0SlNGSy11cDVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82OTA0NWEtYTViMS00ZTU5LTk3MTctMjNmMjI2M2I5YmQy
LzEvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCVM2sAwQC
W+lwAwQCuS6oAwQCue54MA0EAgACMAcDBQMqBJuAMA0GCSqGSIb3DQEBCwUAA4IB
AQB0sS67waUPGDAj2Vgt/t6iL4uY/GBfEJhNua+DeI7Z24FOAFLXeD3aHkvtTHrt
obZKgX3wsnqiZ4pmxw86hxJdJLjfs61yRHfNMCqFS7QIwyHlpwYNobxxYpnQrwu9
1E13Ex0eLX/ALZb05zrlpRE8nfL1s9idA9NkLOBi5A1yL9sWlK0zfeWJyt2E+Yef
V8os0RN1rf1K+xf8zUFmBfgsBuxLvUfM5BpC95ZWjMP0OB02SCx1d5G4kPB1gzfF
sckEXiI0pis75mqt93HvEX2rDtOQmwJxbxmj1oYLpwhOTDWpbghTI4V7dTDcTAdu
ylmu2mfOaWOQgwEELTZlPLno
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:32:20 2025 by rpki-client