Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/lhEsnQRcgV6eBGDYNJ-_D4JjyNM.roa
File: lhEsnQRcgV6eBGDYNJ-_D4JjyNM.roa (raw, json)
Hash identifier: AUDMeoLm+YUww5X5SPRA2SQOM8LoUbEjInNIQxukMuQ=
Subject key identifier: 96:11:2C:9D:04:5C:81:5E:9E:04:60:D8:34:9F:BF:0F:82:63:C8:D3
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 0194CB07155F3ADC82C38C76E7C68327F0CF
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/lhEsnQRcgV6eBGDYNJ-_D4JjyNM.roa
Signing time: Mon 03 Feb 2025 08:57:06 +0000
ROA not before: Mon 03 Feb 2025 08:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 83.136.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:07:15:5f:3a:dc:82:c3:8c:76:e7:c6:83:27:f0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Feb 3 08:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96112c9d045c815e9e0460d8349fbf0f8263c8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:00:8f:b0:ac:5a:5d:2a:48:34:c3:cf:fb:
26:42:da:f2:b4:a9:91:9a:32:90:1e:36:04:47:52:
5b:8e:a2:fa:15:21:cf:1c:b4:26:58:6f:2b:18:61:
c6:94:b0:f1:bb:c2:05:94:43:6c:2a:4c:20:51:33:
ad:e8:9c:f1:7d:6f:61:ff:01:c7:03:3f:c3:5f:aa:
39:a2:73:2c:3f:b9:a4:7c:3a:69:d1:a4:48:55:af:
3c:5f:33:c0:20:bd:6b:bb:c4:06:6e:3f:aa:f8:f0:
31:a5:f2:84:12:cf:10:c3:34:28:7b:73:ff:ce:3a:
a7:ea:83:2e:7d:a8:87:02:24:16:51:67:a5:fb:90:
9c:16:14:7f:85:0b:bd:1e:89:80:06:f8:e2:e3:10:
48:57:b7:b1:61:c4:6b:ab:6e:fa:da:84:03:41:80:
d8:f8:9c:24:5b:23:8d:5a:4d:3e:75:30:11:c7:0f:
52:8b:44:e1:12:48:35:b6:b9:95:3f:a9:64:28:69:
2c:00:71:4f:b8:f3:c5:52:c3:b9:e9:b2:cb:df:d5:
a4:f9:d9:4b:10:4f:1c:75:c3:b6:f6:b9:c8:8b:2e:
4a:d9:5b:e1:fb:6f:8d:f1:ee:83:c9:a5:cc:63:8c:
00:3e:9e:42:f3:2d:4b:93:08:c9:fa:ae:2c:b5:34:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:11:2C:9D:04:5C:81:5E:9E:04:60:D8:34:9F:BF:0F:82:63:C8:D3
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/lhEsnQRcgV6eBGDYNJ-_D4JjyNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.212.0/24
Signature Algorithm: sha256WithRSAEncryption
98:85:f3:39:f1:df:e8:04:5f:13:a4:ac:f3:ee:85:db:69:3f:
18:86:32:27:de:d4:93:ae:9d:52:cf:44:5e:cd:5f:3b:31:ac:
4f:db:18:a0:d9:e7:02:35:30:49:c5:9c:22:8d:e4:4c:0a:72:
34:ff:66:1f:43:6d:6f:94:3f:8f:cb:04:2e:82:05:a6:e2:15:
28:48:1f:a7:f4:93:93:83:55:e2:d3:dc:c1:63:34:61:9d:2d:
1b:4a:10:b6:88:08:00:49:7a:d9:a3:2f:db:b4:ab:c8:9e:1f:
88:9b:f3:93:b9:c5:5e:b6:e8:90:0a:4a:69:17:e3:03:1f:d5:
6d:45:c1:cf:5c:f7:0d:1a:9c:e3:6b:10:61:ab:95:80:d5:8d:
5e:be:e9:83:36:27:ba:3a:10:d0:70:23:a1:eb:cc:a6:d3:d8:
29:d6:2a:fa:d4:2f:b8:e6:c5:47:8b:83:ce:db:1d:f2:96:91:
12:b5:24:6b:0b:2b:cd:3c:f7:f4:7a:0c:19:de:4c:4a:91:18:
b1:48:7b:20:44:e5:57:d5:78:bd:b9:59:41:64:90:78:b7:6d:
2a:c1:e0:4b:ff:2a:9a:9b:31:d5:d8:ea:00:fe:f8:fa:fd:a3:
f1:0b:cc:f8:5e:b6:d3:87:91:4d:3c:d1:69:8f:52:de:cf:77:
c3:f2:ed:23
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZTLBxVfOtyCw4x258aDJ/DPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Nzk5ODhlMGY0OTk3MWEzMjZmNDE5ZTVjZmFjYmZkZGNj
OTkzZTcwHhcNMjUwMjAzMDg1NzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjExMmM5ZDA0NWM4MTVlOWUwNDYwZDgzNDlmYmYwZjgyNjNjOGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutEAj7CsWl0qSDTDz/smQtrytKmR
mjKQHjYER1JbjqL6FSHPHLQmWG8rGGHGlLDxu8IFlENsKkwgUTOt6JzxfW9h/wHH
Az/DX6o5onMsP7mkfDpp0aRIVa88XzPAIL1ru8QGbj+q+PAxpfKEEs8QwzQoe3P/
zjqn6oMufaiHAiQWUWel+5CcFhR/hQu9HomABvji4xBIV7exYcRrq2762oQDQYDY
+JwkWyONWk0+dTARxw9Si0ThEkg1trmVP6lkKGksAHFPuPPFUsO56bLL39Wk+dlL
EE8cdcO29rnIiy5K2Vvh+2+N8e6DyaXMY4wAPp5C8y1LkwjJ+q4stTTfFwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJYRLJ0EXIFengRg2DSfvw+CY8jTMB8GA1UdIwQY
MBaAFPh5mI4PSZcaMm9Bnlz6y/3cyZPnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IbVlqZzlKbHhveWIwR2VYUHJMX2R6SmstYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0
LTA0NzBiNGJiMzBkYi8xL2xoRXNuUVJjZ1Y2ZUJHRFlOSi1fRDRKanlOTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0LTA0NzBiNGJiMzBk
Yi8xLzEtSG1Zamc5Smx4b3liMEdlWFByTF9kekprLWMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABTiNQw
DQYJKoZIhvcNAQELBQADggEBAJiF8znx3+gEXxOkrPPuhdtpPxiGMife1JOunVLP
RF7NXzsxrE/bGKDZ5wI1MEnFnCKN5EwKcjT/Zh9DbW+UP4/LBC6CBabiFShIH6f0
k5ODVeLT3MFjNGGdLRtKELaICABJetmjL9u0q8ieH4ib85O5xV626JAKSmkX4wMf
1W1Fwc9c9w0anONrEGGrlYDVjV6+6YM2J7o6ENBwI6HrzKbT2CnWKvrUL7jmxUeL
g87bHfKWkRK1JGsLK8089/R6DBneTEqRGLFIeyBE5VfVeL25WUFkkHi3bSrB4Ev/
KpqbMdXY6gD++Pr9o/ELzPhettOHkU080WmPUt7Pd8Py7SM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:15:24 2025 by rpki-client