Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/LZt4gb-xWjsUFFEJJlr5snAnfj4.roa
File: LZt4gb-xWjsUFFEJJlr5snAnfj4.roa (raw, json)
Hash identifier: iVanuwhOVMx/ABZHooPm82UQY207412XKo2wvn51IRE=
Subject key identifier: 2D:9B:78:81:BF:B1:5A:3B:14:14:51:09:26:5A:F9:B2:70:27:7E:3E
Certificate issuer: /CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Certificate serial: 01942522322729D27ACEFD8B7ACBE51D2F93
Authority key identifier: 95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/LZt4gb-xWjsUFFEJJlr5snAnfj4.roa
Signing time: Thu 02 Jan 2025 03:49:45 +0000
ROA not before: Thu 02 Jan 2025 03:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34154
IP address blocks: 185.121.196.0/22 maxlen: 24
193.17.230.0/24 maxlen: 24
195.160.196.0/22 maxlen: 24
217.71.216.0/21 maxlen: 24
2a00:1fe8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:32:27:29:d2:7a:ce:fd:8b:7a:cb:e5:1d:2f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d9b7881bfb15a3b14145109265af9b270277e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:90:af:0f:c6:29:ed:ee:7c:91:47:bc:95:
88:f3:da:9c:8b:ba:ff:87:29:0e:62:18:eb:6e:e2:
a2:b5:92:ab:15:25:09:0a:3c:32:4d:3e:22:9d:2b:
95:4f:49:f5:cd:ba:40:6e:cb:8e:8a:76:81:2e:5e:
4d:b4:91:f2:99:3b:d9:23:7f:91:a1:a8:17:d9:19:
88:c2:a1:ac:65:4d:8f:38:76:10:5a:b9:cc:1d:ad:
0b:30:77:e8:cc:70:4d:3e:72:6f:c9:a1:c4:e1:64:
3c:c3:b1:db:4b:e5:de:92:8e:35:94:e7:89:98:09:
13:bf:f7:14:6f:33:c0:1e:ef:68:41:ad:83:c1:f2:
59:a0:e3:87:a6:6d:4c:bf:b9:f9:83:4a:c3:91:f1:
42:ff:f4:13:8b:8e:78:2c:6a:29:d7:57:0c:16:cf:
00:45:ff:40:e5:ef:64:a0:2d:c8:98:5d:a9:e6:04:
f9:df:94:6e:d2:ed:3c:86:e7:25:95:3a:02:a5:56:
40:e2:a9:9a:ff:9f:d9:79:d9:06:25:38:81:cd:05:
4a:f8:56:f3:fd:d7:52:2d:8a:aa:5b:f0:60:c9:63:
62:e2:73:e7:cf:71:e5:38:c4:9d:7b:52:06:b7:bf:
58:e2:da:1c:57:a3:de:1f:4f:ed:74:59:de:84:3b:
f1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9B:78:81:BF:B1:5A:3B:14:14:51:09:26:5A:F9:B2:70:27:7E:3E
X509v3 Authority Key Identifier:
keyid:95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/LZt4gb-xWjsUFFEJJlr5snAnfj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.196.0/22
193.17.230.0/24
195.160.196.0/22
217.71.216.0/21
IPv6:
2a00:1fe8::/32
Signature Algorithm: sha256WithRSAEncryption
3a:e0:f3:78:fc:74:41:f7:9d:97:48:81:ac:21:f3:31:1a:1a:
0b:eb:28:d3:bc:1f:f4:97:f5:86:71:58:7a:b5:f1:f3:4a:63:
c4:0a:f0:a0:b5:a0:80:68:f7:99:10:89:1d:db:56:5a:a0:2e:
b0:7a:df:73:8f:d8:21:80:54:b8:35:e0:45:6f:98:d5:07:e7:
e9:50:51:2b:d2:1e:ad:8a:14:3d:9c:d0:5f:64:72:e1:86:88:
35:75:20:4d:6c:89:d4:39:cf:16:f2:11:68:55:9b:e0:e9:47:
3b:e5:8f:fd:34:61:16:fb:f3:86:5d:cc:20:ee:e0:fb:21:21:
bf:83:82:c5:76:e9:58:cc:63:d8:1d:5a:00:2e:7f:a3:d7:40:
3f:8c:e6:2f:9d:23:56:1e:96:0a:0c:93:f3:e7:60:bd:34:04:
dc:44:fa:6f:d1:09:cb:3d:da:6b:90:8d:2e:1b:38:f7:8f:29:
77:c2:6d:75:6b:e4:1d:03:a6:7b:08:64:82:d4:d4:20:51:aa:
77:24:00:42:fc:25:85:0d:43:ff:6a:37:10:b2:79:09:4e:94:
aa:14:fd:f2:ad:1e:dd:6a:e1:04:5e:35:34:a6:69:4a:f8:69:
c1:63:d3:0d:64:de:8f:0b:2c:45:7a:4d:7f:0f:82:0e:69:32:
85:89:1c:50
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQlIjInKdJ6zv2LesvlHS+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZmQwM2I1ZjM1YjMxN2I0ZDMyZmYxYTRiMmMxN2JiMzc2
YzIxZTEwHhcNMjUwMTAyMDM0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDliNzg4MWJmYjE1YTNiMTQxNDUxMDkyNjVhZjliMjcwMjc3ZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DuQrw/GKe3ufJFHvJWI89qci7r/
hykOYhjrbuKitZKrFSUJCjwyTT4inSuVT0n1zbpAbsuOinaBLl5NtJHymTvZI3+R
oagX2RmIwqGsZU2POHYQWrnMHa0LMHfozHBNPnJvyaHE4WQ8w7HbS+Xeko41lOeJ
mAkTv/cUbzPAHu9oQa2DwfJZoOOHpm1Mv7n5g0rDkfFC//QTi454LGop11cMFs8A
Rf9A5e9koC3ImF2p5gT535Ru0u08hucllToCpVZA4qma/5/ZedkGJTiBzQVK+Fbz
/ddSLYqqW/BgyWNi4nPnz3HlOMSde1IGt79Y4tocV6PeH0/tdFnehDvxVwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFC2beIG/sVo7FBRRCSZa+bJwJ34+MB8GA1UdIwQY
MBaAFJX9A7XzWzF7TTL/GkssF7s3bCHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGYwRHRmTmJNWHROTXY4YVN5d1h1emRzSWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mOWQwZTktYmRhNC00MmIyLThlN2Et
ZDYwZjQ0YTkzNGIxLzEvTFp0NGdiLXhXanNVRkZFSkpscjVzbkFuZmo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9mOWQwZTktYmRhNC00MmIyLThlN2EtZDYwZjQ0YTkzNGIx
LzEvbGYwRHRmTmJNWHROTXY4YVN5d1h1emRzSWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCuXnEAwQA
wRHmAwQCw6DEAwQD2UfYMA0EAgACMAcDBQAqAB/oMA0GCSqGSIb3DQEBCwUAA4IB
AQA64PN4/HRB952XSIGsIfMxGhoL6yjTvB/0l/WGcVh6tfHzSmPECvCgtaCAaPeZ
EIkd21ZaoC6wet9zj9ghgFS4NeBFb5jVB+fpUFEr0h6tihQ9nNBfZHLhhog1dSBN
bInUOc8W8hFoVZvg6Uc75Y/9NGEW+/OGXcwg7uD7ISG/g4LFdulYzGPYHVoALn+j
10A/jOYvnSNWHpYKDJPz52C9NATcRPpv0QnLPdprkI0uGzj3jyl3wm11a+QdA6Z7
CGSC1NQgUap3JABC/CWFDUP/ajcQsnkJTpSqFP3yrR7dauEEXjU0pmlK+GnBY9MN
ZN6PCyxFek1/D4IOaTKFiRxQ
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:27 2025 by rpki-client