Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/LEyJ2WNBj9cTPetK4hsEfLcBcEI.roa
File: LEyJ2WNBj9cTPetK4hsEfLcBcEI.roa (raw, json)
Hash identifier: WmOLEifdPoH/joG2SNYp6mcbI8myXya9UUZozRyBF44=
Subject key identifier: 2C:4C:89:D9:63:41:8F:D7:13:3D:EB:4A:E2:1B:04:7C:B7:01:70:42
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 0194244492957B658BC03BEA8339153CABE2
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/LEyJ2WNBj9cTPetK4hsEfLcBcEI.roa
Signing time: Wed 01 Jan 2025 23:47:41 +0000
ROA not before: Wed 01 Jan 2025 23:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.107.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:92:95:7b:65:8b:c0:3b:ea:83:39:15:3c:ab:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c4c89d963418fd7133deb4ae21b047cb7017042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:20:63:8b:48:9e:0a:29:22:65:a1:f1:30:
35:9d:67:c1:60:db:57:76:dc:52:74:43:bf:b9:f6:
81:42:15:81:9d:55:65:32:bb:97:4e:a7:05:a2:b4:
a2:78:d1:03:06:45:f9:1d:2b:1c:02:be:1c:d3:1e:
ce:9c:75:74:c2:bc:aa:f7:c2:57:c4:f7:77:63:b8:
3e:2f:e3:85:a7:20:d3:e5:0b:7d:67:2c:fb:dd:29:
62:e9:eb:a7:2c:c1:c6:b6:26:9c:b6:58:ec:10:e3:
5f:22:cc:d9:1e:24:a8:10:28:9b:a5:46:e4:35:dc:
7e:ab:c1:f3:bb:3f:d3:58:c9:76:86:05:60:33:8a:
10:66:b0:00:54:d4:91:19:e4:0d:b2:9a:76:66:4c:
82:6c:31:ff:2d:6b:08:27:55:f5:09:a5:7d:d0:a8:
8e:80:d2:ec:ce:0d:1f:87:9f:50:47:14:52:97:d5:
ee:17:14:24:1f:7e:1a:9f:ad:29:be:02:cf:fa:ab:
b8:9e:64:37:47:d3:c0:48:99:5f:4c:d2:b6:25:4b:
35:51:09:89:55:04:e2:ff:93:c4:53:3f:63:24:7a:
a5:74:7d:1d:5c:48:d4:2e:18:7f:6d:97:82:f2:43:
f5:d9:5d:25:9a:35:91:22:16:db:09:0b:55:c5:75:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4C:89:D9:63:41:8F:D7:13:3D:EB:4A:E2:1B:04:7C:B7:01:70:42
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/LEyJ2WNBj9cTPetK4hsEfLcBcEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.196.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e4:42:49:45:75:23:27:45:ed:17:77:3e:8b:e4:f7:f5:2b:
26:98:30:8e:54:ab:a7:ae:d7:e7:48:9c:5f:6f:fa:93:41:c1:
e7:6e:96:e5:67:9e:a9:f0:2a:1f:ac:4f:60:3a:a2:d0:9b:df:
00:5b:75:e8:d9:e4:ac:42:fe:87:3d:05:f3:e9:2a:47:ba:c2:
bc:45:34:a3:d0:50:48:eb:23:00:6d:80:d5:a4:2e:b3:79:af:
ce:c5:1b:99:0e:4d:58:93:73:65:a4:78:be:2f:48:d4:59:46:
56:cf:68:6e:b3:3e:ae:71:2d:27:e2:40:ac:30:ea:40:72:44:
a5:35:4e:7e:c8:f2:b1:15:02:5f:a2:d1:4b:d3:b6:ba:4d:59:
0d:12:f4:01:a7:5b:0d:47:d9:f0:92:e3:c1:6d:92:d3:a6:b9:
64:c2:58:51:36:11:c5:e8:b4:ce:b4:6b:f2:f4:16:3a:ef:84:
42:45:02:62:8f:91:d2:45:03:0a:2b:91:39:9f:a5:31:d8:bf:
a0:a0:b5:ca:e3:d8:df:55:e5:c0:d9:77:0d:e9:71:55:52:d1:
0e:7b:97:ef:dd:b9:22:8c:72:42:bc:07:3a:6f:31:44:f9:7a:
f0:54:d5:c5:19:eb:58:94:74:6f:7f:57:f6:db:56:7f:31:4b:
97:00:10:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRJKVe2WLwDvqgzkVPKviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMjM3YzVhZmZlOTM1NDNhZTJmZTZlMWZmZWQxODIzOTZl
YjliYjMwHhcNMjUwMTAxMjM0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzRjODlkOTYzNDE4ZmQ3MTMzZGViNGFlMjFiMDQ3Y2I3MDE3MDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseMgY4tIngopImWh8TA1nWfBYNtX
dtxSdEO/ufaBQhWBnVVlMruXTqcForSieNEDBkX5HSscAr4c0x7OnHV0wryq98JX
xPd3Y7g+L+OFpyDT5Qt9Zyz73Sli6eunLMHGtiactljsEONfIszZHiSoECibpUbk
Ndx+q8Hzuz/TWMl2hgVgM4oQZrAAVNSRGeQNspp2ZkyCbDH/LWsIJ1X1CaV90KiO
gNLszg0fh59QRxRSl9XuFxQkH34an60pvgLP+qu4nmQ3R9PASJlfTNK2JUs1UQmJ
VQTi/5PEUz9jJHqldH0dXEjULhh/bZeC8kP12V0lmjWRIhbbCQtVxXXyVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCxMidljQY/XEz3rSuIbBHy3AXBCMB8GA1UdIwQY
MBaAFCsjfFr/6TVDri/m4f/tGCOW65uzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEt
MTQ3MDJhNGQyNjYwLzEvTEV5SjJXTkJqOWNUUGV0SzRoc0VmTGNCY0VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEtMTQ3MDJhNGQyNjYw
LzEvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWvEMA0G
CSqGSIb3DQEBCwUAA4IBAQA65EJJRXUjJ0XtF3c+i+T39SsmmDCOVKunrtfnSJxf
b/qTQcHnbpblZ56p8CofrE9gOqLQm98AW3Xo2eSsQv6HPQXz6SpHusK8RTSj0FBI
6yMAbYDVpC6zea/OxRuZDk1Yk3NlpHi+L0jUWUZWz2husz6ucS0n4kCsMOpAckSl
NU5+yPKxFQJfotFL07a6TVkNEvQBp1sNR9nwkuPBbZLTprlkwlhRNhHF6LTOtGvy
9BY674RCRQJij5HSRQMKK5E5n6Ux2L+goLXK49jfVeXA2XcN6XFVUtEOe5fv3bki
jHJCvAc6bzFE+XrwVNXFGetYlHRvf1f221Z/MUuXABBY
-----END CERTIFICATE-----
Generated at Thu Apr 10 08:45:34 2025 by rpki-client