Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/lz1Zu-7Dd1zohtmSo2B7eoc-JLk.roa
File: lz1Zu-7Dd1zohtmSo2B7eoc-JLk.roa (raw, json)
Hash identifier: 4nM0pH6w4uGyHRxAYln0YQ8h8FqFvJIZzMm3lqAMtRM=
Subject key identifier: 97:3D:59:BB:EE:C3:77:5C:E8:86:D9:92:A3:60:7B:7A:87:3E:24:B9
Certificate issuer: /CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
Certificate serial: 01941F8C1559E457B74ABFC6F72C3E8FA340
Authority key identifier: 97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/lz1Zu-7Dd1zohtmSo2B7eoc-JLk.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205362
IP address blocks: 80.240.106.0/24 maxlen: 24
128.0.42.0/23 maxlen: 23
128.0.42.0/24 maxlen: 24
128.0.43.0/24 maxlen: 24
185.216.4.0/22 maxlen: 22
185.216.4.0/24 maxlen: 24
185.216.5.0/24 maxlen: 24
185.216.6.0/24 maxlen: 24
185.216.7.0/24 maxlen: 24
188.212.251.0/24 maxlen: 24
188.215.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:15:59:e4:57:b7:4a:bf:c6:f7:2c:3e:8f:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=973d59bbeec3775ce886d992a3607b7a873e24b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:cc:6a:06:32:13:3f:53:e6:aa:08:9f:11:
5a:d5:93:d7:82:b3:f2:5f:33:b8:3f:2b:49:57:df:
0a:af:df:5c:7e:c5:d6:16:43:06:8f:20:11:9e:9b:
4c:48:b4:78:ce:7c:f1:53:72:0c:4f:f2:73:ff:ff:
ac:7d:8a:6c:8c:ad:89:b3:7a:be:04:9f:4c:0d:66:
88:55:f8:7c:df:c2:e6:d2:27:71:ee:a5:66:f7:42:
72:0b:b1:f9:32:40:a5:0f:7f:74:a2:cf:c8:8f:7f:
de:2b:a5:e7:01:79:8d:fb:2c:64:f2:cc:0e:1f:2e:
e2:36:64:60:a0:fd:8b:90:83:2c:f5:e7:5e:90:ab:
c5:8f:0e:0a:b9:7c:e9:c1:08:89:8f:95:f5:51:e3:
39:1c:03:fd:1f:9b:85:3e:fd:ab:b3:2f:0b:2f:fc:
52:d2:4e:04:73:52:4a:c2:88:11:b8:10:2c:ea:b9:
b8:52:98:4f:c8:88:1d:f1:7c:3b:e6:72:88:1a:fd:
19:32:10:1f:83:47:6f:34:62:07:b2:40:0a:a4:09:
59:34:fa:bc:bb:a6:3c:e1:ce:65:c6:ed:80:38:c9:
bd:82:fc:14:67:2b:d8:d0:6a:79:55:d2:73:95:0f:
d2:b3:f6:05:a7:ea:cb:3a:f9:f9:eb:f4:d2:f2:89:
86:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3D:59:BB:EE:C3:77:5C:E8:86:D9:92:A3:60:7B:7A:87:3E:24:B9
X509v3 Authority Key Identifier:
keyid:97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/lz1Zu-7Dd1zohtmSo2B7eoc-JLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.106.0/24
128.0.42.0/23
185.216.4.0/22
188.212.251.0/24
188.215.32.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a6:9c:ea:0f:01:49:d1:69:1a:e8:bd:57:a6:33:2f:d2:fc:
04:09:bd:ac:e5:ba:f6:17:01:b5:e8:cf:a8:17:93:5a:3a:2d:
5d:da:0f:8f:e8:de:d6:63:26:fc:9e:e7:ec:dd:9e:89:a3:0c:
42:ad:4e:b0:dc:64:d9:a0:72:c2:3c:d7:93:7f:3e:39:89:c5:
86:5f:e1:c2:f4:2b:53:ab:f3:6d:75:8a:c8:62:a2:0d:9a:9c:
e3:d2:dc:2f:f4:df:db:93:b5:52:22:56:fa:4f:bc:c5:e0:1d:
74:bb:67:5a:ed:a9:8a:af:53:e0:f2:d0:f6:bd:51:85:3c:aa:
e8:6d:c2:9b:ac:87:39:94:74:1f:01:aa:fa:e6:f8:fe:42:eb:
ae:69:de:17:c8:a8:24:db:16:35:c9:53:ad:bf:f2:1c:24:06:
fe:9f:1e:2e:b1:fe:87:c8:15:be:1e:72:e8:49:d8:08:49:34:
7b:6b:3c:f6:3c:67:16:cc:ad:84:95:44:c8:96:56:ae:d1:ee:
a7:b5:ad:a4:2b:bb:b9:a3:fc:8a:56:81:7e:f5:d1:b3:f4:a5:
81:f4:74:ad:ce:b5:99:60:0a:12:ad:40:0c:df:02:52:60:97:
f0:4f:c6:7f:0e:2e:97:0e:74:cd:1d:a0:64:e7:5b:48:30:2a:
3e:58:63:43
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQfjBVZ5Fe3Sr/G9yw+j6NAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZWNmYmIzNTUwYmYyYzc2NzRjYzUyZTljYmJmM2E5MzNm
NWU3NzgwHhcNMjUwMTAxMDE0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzNkNTliYmVlYzM3NzVjZTg4NmQ5OTJhMzYwN2I3YTg3M2UyNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvrMagYyEz9T5qoInxFa1ZPXgrPy
XzO4PytJV98Kr99cfsXWFkMGjyARnptMSLR4znzxU3IMT/Jz//+sfYpsjK2Js3q+
BJ9MDWaIVfh838Lm0idx7qVm90JyC7H5MkClD390os/Ij3/eK6XnAXmN+yxk8swO
Hy7iNmRgoP2LkIMs9edekKvFjw4KuXzpwQiJj5X1UeM5HAP9H5uFPv2rsy8LL/xS
0k4Ec1JKwogRuBAs6rm4UphPyIgd8Xw75nKIGv0ZMhAfg0dvNGIHskAKpAlZNPq8
u6Y84c5lxu2AOMm9gvwUZyvY0Gp5VdJzlQ/Ss/YFp+rLOvn56/TS8omGbQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJc9Wbvuw3dc6IbZkqNge3qHPiS5MB8GA1UdIwQY
MBaAFJfs+7NVC/LHZ0zFLpy786kz9ed4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC16N3MxVUw4c2RuVE1VdW5MdnpxVFAxNTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xYzBlYTYtYTZkZi00NTIyLThiYzkt
OGM1MTE2OThmY2FlLzEvbHoxWnUtN0RkMXpvaHRtU28yQjdlb2MtSkxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xYzBlYTYtYTZkZi00NTIyLThiYzktOGM1MTE2OThmY2Fl
LzEvbC16N3MxVUw4c2RuVE1VdW5MdnpxVFAxNTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUPBqAwQB
gAAqAwQCudgEAwQAvNT7AwQAvNcgMA0GCSqGSIb3DQEBCwUAA4IBAQAUppzqDwFJ
0Wka6L1XpjMv0vwECb2s5br2FwG16M+oF5NaOi1d2g+P6N7WYyb8nufs3Z6JowxC
rU6w3GTZoHLCPNeTfz45icWGX+HC9CtTq/NtdYrIYqINmpzj0twv9N/bk7VSIlb6
T7zF4B10u2da7amKr1Pg8tD2vVGFPKrobcKbrIc5lHQfAar65vj+Quuuad4XyKgk
2xY1yVOtv/IcJAb+nx4usf6HyBW+HnLoSdgISTR7azz2PGcWzK2ElUTIllau0e6n
ta2kK7u5o/yKVoF+9dGz9KWB9HStzrWZYAoSrUAM3wJSYJfwT8Z/Di6XDnTNHaBk
51tIMCo+WGND
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:55:24 2025 by rpki-client