Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa
File: LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa (raw, json)
Hash identifier: bW1H7SUVyNKU/d0SmTWJeMi8GRblO5Rw7PlbZQty7ek=
Subject key identifier: 2C:15:19:AA:CA:C5:D1:78:BF:B7:2B:29:E5:F8:26:B2:A2:87:BB:A5
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 019420685E6A23E55C9E72221C372B89EF21
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa
Signing time: Wed 01 Jan 2025 05:48:18 +0000
ROA not before: Wed 01 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34136
IP address blocks: 212.110.138.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5e:6a:23:e5:5c:9e:72:22:1c:37:2b:89:ef:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c1519aacac5d178bfb72b29e5f826b2a287bba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:89:94:cd:47:ab:f2:ff:9d:65:05:db:94:
be:a1:d5:71:a7:76:56:ce:63:34:3e:62:75:7d:56:
77:85:f4:33:c6:7a:33:88:6b:ea:ba:ad:29:b0:ff:
bf:9f:ef:d4:5e:50:3e:fe:4d:62:4e:21:48:04:ce:
a9:50:de:f0:bd:97:77:35:6f:1f:51:a5:91:8f:ae:
7d:03:8b:49:a7:a5:43:07:c7:d0:91:4e:1c:ed:50:
33:fe:8b:d8:09:71:12:88:52:e4:74:65:84:18:46:
8c:0f:78:13:81:d5:43:df:0e:df:41:94:6e:9d:da:
6c:cb:4d:d1:e0:92:a4:52:4c:bd:cc:4a:b3:59:22:
80:88:d4:b3:f2:2f:1f:6c:19:a0:d0:24:77:4b:96:
9d:0c:c2:de:e9:d2:f3:9b:7a:2f:e8:18:34:58:f0:
da:63:0c:1c:bc:14:46:04:90:f4:f7:ab:f7:8d:14:
27:57:8c:cb:81:73:d6:d1:31:50:03:90:db:2f:78:
3a:bb:a3:c9:ae:f7:52:a2:dc:42:0a:0a:cb:b4:95:
69:c8:80:48:b2:71:23:69:67:a0:cd:20:b7:44:5c:
7a:7d:1a:e7:15:a8:57:e8:18:ad:20:99:d8:3f:a3:
d1:98:dc:44:91:8a:1b:27:2d:00:10:8f:57:2b:99:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:15:19:AA:CA:C5:D1:78:BF:B7:2B:29:E5:F8:26:B2:A2:87:BB:A5
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.110.138.0/23
Signature Algorithm: sha256WithRSAEncryption
95:01:1b:17:a2:8f:05:f1:de:44:61:ba:75:fd:cb:f6:50:19:
60:78:88:7e:25:d2:e6:78:aa:24:80:26:18:4c:f0:c4:57:0a:
53:64:31:f3:88:78:e7:6a:19:3d:08:62:b8:fa:aa:01:98:de:
ab:91:fd:c2:c8:42:ce:8b:05:88:b8:84:38:2b:29:52:3e:e8:
24:97:d1:a8:ab:85:2c:a3:c5:0a:b5:b5:40:ac:ea:ff:ca:c9:
85:1e:25:1e:14:c1:5b:49:b8:af:55:a0:9a:44:2a:24:af:b9:
13:f3:0d:28:df:f9:31:4b:9d:d2:68:90:71:9c:00:46:89:f5:
34:6e:6d:a8:d0:c7:67:ce:89:55:9f:32:d3:2e:a6:81:51:29:
6b:0c:9e:2b:5d:2b:2c:8c:c7:0e:49:9e:5a:78:cf:a5:af:00:
93:c3:c2:2c:32:29:ee:be:6a:cd:90:93:47:9f:cb:fe:5c:29:
1d:44:70:a6:59:e9:29:fe:68:20:60:42:4d:aa:c7:d0:7c:45:
05:05:0e:3b:bf:25:9b:bc:18:04:99:ba:a2:71:1c:e6:07:30:
27:75:94:38:61:66:c2:9a:f0:c0:73:c9:53:ce:2a:ad:5f:57:
c2:f3:b6:c7:2a:54:c4:36:f8:fe:bd:81:eb:45:a9:c1:3d:8f:
80:2d:ed:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaF5qI+VcnnIiHDcrie8hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy
MWU3ZDMwHhcNMjUwMTAxMDU0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzE1MTlhYWNhYzVkMTc4YmZiNzJiMjllNWY4MjZiMmEyODdiYmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQCJlM1Hq/L/nWUF25S+odVxp3ZW
zmM0PmJ1fVZ3hfQzxnoziGvquq0psP+/n+/UXlA+/k1iTiFIBM6pUN7wvZd3NW8f
UaWRj659A4tJp6VDB8fQkU4c7VAz/ovYCXESiFLkdGWEGEaMD3gTgdVD3w7fQZRu
ndpsy03R4JKkUky9zEqzWSKAiNSz8i8fbBmg0CR3S5adDMLe6dLzm3ov6Bg0WPDa
YwwcvBRGBJD096v3jRQnV4zLgXPW0TFQA5DbL3g6u6PJrvdSotxCCgrLtJVpyIBI
snEjaWegzSC3RFx6fRrnFahX6BitIJnYP6PRmNxEkYobJy0AEI9XK5kUvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCwVGarKxdF4v7crKeX4JrKih7ulMB8GA1UdIwQY
MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt
NjI1MjQ1YTAwYWJmLzEvTEJVWnFzckYwWGlfdHlzcDVmZ21zcUtIdTZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm
LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1G6KMA0G
CSqGSIb3DQEBCwUAA4IBAQCVARsXoo8F8d5EYbp1/cv2UBlgeIh+JdLmeKokgCYY
TPDEVwpTZDHziHjnahk9CGK4+qoBmN6rkf3CyELOiwWIuIQ4KylSPugkl9Goq4Us
o8UKtbVArOr/ysmFHiUeFMFbSbivVaCaRCokr7kT8w0o3/kxS53SaJBxnABGifU0
bm2o0MdnzolVnzLTLqaBUSlrDJ4rXSssjMcOSZ5aeM+lrwCTw8IsMinuvmrNkJNH
n8v+XCkdRHCmWekp/mggYEJNqsfQfEUFBQ47vyWbvBgEmbqicRzmBzAndZQ4YWbC
mvDAc8lTziqtX1fC87bHKlTENvj+vYHrRanBPY+ALe1k
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:43 2025 by rpki-client