Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/lpv1RjMotpZVLeCDaYXWWnyP_LQ.roa
File: lpv1RjMotpZVLeCDaYXWWnyP_LQ.roa (raw, json)
Hash identifier: /sJBrZ6NkqdnT+sqRrnEtVzwXXK6nEtnouYQkrWkdSw=
Subject key identifier: 96:9B:F5:46:33:28:B6:96:55:2D:E0:83:69:85:D6:5A:7C:8F:FC:B4
Certificate issuer: /CN=8023d3d35800ef3cb2a56c38bf914397381e0ff1
Certificate serial: 018480D6FD91BFF92DE3A6514717936C4DAF
Authority key identifier: 80:23:D3:D3:58:00:EF:3C:B2:A5:6C:38:BF:91:43:97:38:1E:0F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCPT01gA7zyypWw4v5FDlzgeD_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/lpv1RjMotpZVLeCDaYXWWnyP_LQ.roa
Signing time: Wed 16 Nov 2022 14:28:03 +0000
ROA not before: Wed 16 Nov 2022 14:28:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25459
IP address blocks: 178.18.128.0/20 maxlen: 24
37.247.32.0/20 maxlen: 24
94.103.144.0/20 maxlen: 24
77.243.224.0/20 maxlen: 24
2a02:990::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:80:d6:fd:91:bf:f9:2d:e3:a6:51:47:17:93:6c:4d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8023d3d35800ef3cb2a56c38bf914397381e0ff1
Validity
Not Before: Nov 16 14:28:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=969bf5463328b696552de0836985d65a7c8ffcb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:26:21:ab:98:d8:01:a0:bf:ac:6f:9e:37:
d9:a7:83:aa:f5:4b:e7:3e:e8:16:60:f6:0e:0b:97:
b7:b2:41:bf:d7:52:b4:8c:6d:73:fa:ec:9c:8c:60:
8a:a3:8f:92:4e:db:76:d4:c6:84:b3:c8:ce:69:b1:
68:66:2a:79:d4:86:f3:20:c9:36:2b:62:0f:31:62:
12:7e:66:0f:f1:2c:fe:b7:60:cb:c5:d5:0c:42:4a:
46:dc:b6:2c:cf:7b:b5:c1:a7:79:40:f0:08:59:26:
98:74:f5:06:36:c2:ee:15:0a:4b:f8:29:ef:24:45:
df:ba:36:9e:33:3a:11:54:97:f3:89:67:e9:4f:30:
4f:8f:12:fe:84:cd:03:bb:91:60:84:fe:77:7f:0e:
c5:2a:98:0e:10:8a:c1:ab:52:e2:c9:35:9f:cb:72:
a8:fe:bf:ff:57:a9:f8:aa:21:d9:d6:32:55:91:cb:
0d:4b:e2:aa:50:b4:46:79:f8:b4:c5:d4:29:14:84:
ef:bd:2b:64:b8:24:70:c5:69:32:1c:02:2c:61:99:
68:14:16:d7:09:f8:2c:00:cb:8f:35:c1:f3:46:b6:
f6:8d:b2:ea:5f:3f:3c:49:80:12:fe:bd:2a:ba:ad:
31:e9:8e:11:4c:e9:1f:6c:2a:17:09:dd:63:f9:26:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9B:F5:46:33:28:B6:96:55:2D:E0:83:69:85:D6:5A:7C:8F:FC:B4
X509v3 Authority Key Identifier:
keyid:80:23:D3:D3:58:00:EF:3C:B2:A5:6C:38:BF:91:43:97:38:1E:0F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCPT01gA7zyypWw4v5FDlzgeD_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/lpv1RjMotpZVLeCDaYXWWnyP_LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2038aa-7de5-4581-933a-d1a0c320c28a/1/gCPT01gA7zyypWw4v5FDlzgeD_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.32.0/20
77.243.224.0/20
94.103.144.0/20
178.18.128.0/20
IPv6:
2a02:990::/32
Signature Algorithm: sha256WithRSAEncryption
a4:dd:0e:e7:a6:e3:2a:8c:8d:07:49:d2:e0:0a:c4:fe:7e:c3:
31:fa:7f:42:48:98:10:bd:6b:6c:be:f5:2b:a5:44:c2:2d:d6:
12:99:e9:e5:c0:1e:7b:81:91:40:f1:93:a8:e9:9b:30:c3:5d:
a2:50:90:b5:56:17:8a:05:7e:8b:4b:e3:55:10:d7:67:23:08:
7b:b6:2e:49:61:66:57:d3:e7:2c:e9:2c:8f:31:a5:6b:87:68:
97:a3:17:fa:b4:b0:e5:1b:83:5c:b4:4f:6c:e7:0d:94:c7:2e:
c8:71:73:53:30:68:69:93:37:aa:75:5e:36:34:4c:d4:85:79:
6d:35:b3:6b:aa:72:50:9a:ad:8b:4a:1f:b9:12:08:4b:20:a1:
87:73:ee:44:1d:c4:4b:b3:e0:89:40:92:04:a3:bb:48:24:42:
5f:72:71:ec:16:3c:2d:14:8d:8c:c9:8d:73:c0:d4:ab:82:68:
b0:4f:1e:28:1f:81:65:3b:b4:dc:6a:44:1e:a3:9a:43:a8:ad:
30:4c:e1:de:41:c6:5d:93:cd:37:a5:20:93:61:3b:ed:d5:6f:
7c:fa:e8:8c:52:3a:1f:c1:a4:a0:de:c0:ce:16:91:60:2b:c0:
d0:52:52:d7:6e:da:6b:7d:b1:cd:a2:72:36:77:77:3d:e9:4b:
78:af:cc:ba
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYSA1v2Rv/kt46ZRRxeTbE2vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMjNkM2QzNTgwMGVmM2NiMmE1NmMzOGJmOTE0Mzk3Mzgx
ZTBmZjEwHhcNMjIxMTE2MTQyODAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjliZjU0NjMzMjhiNjk2NTUyZGUwODM2OTg1ZDY1YTdjOGZmY2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvMmIauY2AGgv6xvnjfZp4Oq9Uvn
PugWYPYOC5e3skG/11K0jG1z+uycjGCKo4+STtt21MaEs8jOabFoZip51IbzIMk2
K2IPMWISfmYP8Sz+t2DLxdUMQkpG3LYsz3u1wad5QPAIWSaYdPUGNsLuFQpL+Cnv
JEXfujaeMzoRVJfziWfpTzBPjxL+hM0Du5FghP53fw7FKpgOEIrBq1LiyTWfy3Ko
/r//V6n4qiHZ1jJVkcsNS+KqULRGefi0xdQpFITvvStkuCRwxWkyHAIsYZloFBbX
CfgsAMuPNcHzRrb2jbLqXz88SYAS/r0quq0x6Y4RTOkfbCoXCd1j+SZx7wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFJab9UYzKLaWVS3gg2mF1lp8j/y0MB8GA1UdIwQY
MBaAFIAj09NYAO88sqVsOL+RQ5c4Hg/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0NQVDAxZ0E3enl5cFd3NHY1RkRsemdlRF9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yMDM4YWEtN2RlNS00NTgxLTkzM2Et
ZDFhMGMzMjBjMjhhLzEvbHB2MVJqTW90cFpWTGVDRGFZWFdXbnlQX0xRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yMDM4YWEtN2RlNS00NTgxLTkzM2EtZDFhMGMzMjBjMjhh
LzEvZ0NQVDAxZ0E3enl5cFd3NHY1RkRsemdlRF9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEJfcgAwQE
TfPgAwQEXmeQAwQEshKAMA0EAgACMAcDBQAqAgmQMA0GCSqGSIb3DQEBCwUAA4IB
AQCk3Q7npuMqjI0HSdLgCsT+fsMx+n9CSJgQvWtsvvUrpUTCLdYSmenlwB57gZFA
8ZOo6Zsww12iUJC1VheKBX6LS+NVENdnIwh7ti5JYWZX0+cs6SyPMaVrh2iXoxf6
tLDlG4NctE9s5w2Uxy7IcXNTMGhpkzeqdV42NEzUhXltNbNrqnJQmq2LSh+5EghL
IKGHc+5EHcRLs+CJQJIEo7tIJEJfcnHsFjwtFI2MyY1zwNSrgmiwTx4oH4FlO7Tc
akQeo5pDqK0wTOHeQcZdk803pSCTYTvt1W98+uiMUjofwaSg3sDOFpFgK8DQUlLX
btprfbHNonI2d3c96Ut4r8y6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:01 2024 by rpki-client on console-fra.rpki-client.org