Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/Lu657SoGRO5i41akpdqVykwmDPo.roa
File: Lu657SoGRO5i41akpdqVykwmDPo.roa (raw, json)
Hash identifier: L0TXwFUTYgd55jn30MVoW0Y/jyiw8Ro0oBxR271bBjw=
Subject key identifier: 2E:EE:B9:ED:2A:06:44:EE:62:E3:56:A4:A5:DA:95:CA:4C:26:0C:FA
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 01942825FA197E1FB60723F8D40E82193889
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/Lu657SoGRO5i41akpdqVykwmDPo.roa
Signing time: Thu 02 Jan 2025 17:52:44 +0000
ROA not before: Thu 02 Jan 2025 17:52:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 46.253.3.0/24 maxlen: 24
46.253.4.0/24 maxlen: 24
46.253.5.0/24 maxlen: 24
95.169.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:fa:19:7e:1f:b6:07:23:f8:d4:0e:82:19:38:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Jan 2 17:52:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2eeeb9ed2a0644ee62e356a4a5da95ca4c260cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:aa:71:fe:00:80:a7:53:36:7d:60:dd:d2:
70:11:b4:fe:63:a3:17:e4:d6:ed:2e:89:fc:1c:a9:
54:29:35:f1:38:1c:4d:81:83:3a:7e:e6:6c:d8:f7:
9c:7a:01:48:8a:c8:23:51:b0:ca:7f:aa:d7:30:c7:
35:6f:1e:85:5d:be:02:49:d9:2e:d7:e6:1c:85:da:
ce:8c:5c:b5:30:b3:b5:2e:10:6c:05:f5:d1:45:f6:
63:21:6a:71:3e:ea:70:f8:f7:2a:af:14:c2:93:72:
86:8c:7a:98:cf:a3:5c:68:90:1a:7e:85:50:b9:6a:
e4:f3:e4:8c:e9:97:3e:d0:5e:95:43:b0:8c:d0:b9:
06:26:12:b4:4c:1e:3b:d4:dd:7e:93:e1:27:a2:c3:
8f:0c:69:30:d3:14:89:89:66:05:a8:41:fe:22:f2:
e6:33:d9:b2:69:14:e4:b2:55:13:6c:cb:d0:12:ea:
10:6c:eb:64:be:4e:91:ef:00:f4:0a:89:de:0e:24:
da:1b:e6:e6:a5:a8:37:fa:9e:53:2b:97:82:d6:26:
e7:d5:2d:d9:87:23:ff:71:75:2e:25:99:29:90:ef:
a5:a6:a8:5d:30:30:b1:75:95:1d:06:a4:97:cc:6e:
15:34:c4:7b:e0:e8:7f:0d:c6:e0:8b:49:25:e1:70:
b7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EE:B9:ED:2A:06:44:EE:62:E3:56:A4:A5:DA:95:CA:4C:26:0C:FA
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/Lu657SoGRO5i41akpdqVykwmDPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.3.0-46.253.5.255
95.169.203.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e1:df:cc:5f:8d:9e:52:f7:dd:40:f4:0c:85:a6:68:b0:fd:
b3:22:2c:3d:8d:66:6e:73:4a:48:f2:eb:04:fd:8b:c9:e7:4b:
3f:d6:4b:bb:af:e4:d4:dc:57:07:01:2b:16:57:3a:5f:56:9d:
40:28:8a:88:5d:16:c1:2e:8f:60:63:82:d7:f3:15:f4:c2:7d:
6f:0e:a4:f6:44:17:62:3a:8f:ee:9d:28:e7:8d:3e:d8:77:fe:
bc:78:b2:b0:79:46:b6:18:c7:75:1a:88:92:27:a4:8e:a6:9e:
33:d6:47:38:e4:f5:18:c6:e5:9a:c7:d3:1a:93:3e:a0:23:82:
da:ff:a0:df:ae:e3:64:a7:08:53:49:f3:0d:8c:83:4b:91:72:
32:63:61:36:f0:fd:e8:99:be:b5:6d:62:67:59:c7:c6:b6:6b:
60:b7:b1:e3:9a:5a:10:05:17:e6:d1:87:ac:c3:09:2a:c1:0f:
41:0f:c5:08:67:7e:be:06:64:06:62:61:8f:b1:ff:ad:50:ae:
87:d6:31:5f:bb:b5:2f:fa:18:9b:fa:d4:51:16:bb:57:ab:de:
71:aa:ae:22:0d:ee:80:00:fc:72:d3:5f:f4:50:73:0d:b0:87:
1b:e0:20:3b:03:fd:c9:76:f0:d6:45:96:f9:6b:6c:af:d5:f7:
e3:9c:1f:4b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQoJfoZfh+2ByP41A6CGTiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmQ0Y2VjNzgzMzA1OTIzZTM0OTdlZDg4NGYxYzQ0NWI0
ZTc4ZmIwHhcNMjUwMTAyMTc1MjQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWVlYjllZDJhMDY0NGVlNjJlMzU2YTRhNWRhOTVjYTRjMjYwY2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHOqcf4AgKdTNn1g3dJwEbT+Y6MX
5NbtLon8HKlUKTXxOBxNgYM6fuZs2PecegFIisgjUbDKf6rXMMc1bx6FXb4CSdku
1+YchdrOjFy1MLO1LhBsBfXRRfZjIWpxPupw+PcqrxTCk3KGjHqYz6NcaJAafoVQ
uWrk8+SM6Zc+0F6VQ7CM0LkGJhK0TB471N1+k+EnosOPDGkw0xSJiWYFqEH+IvLm
M9myaRTkslUTbMvQEuoQbOtkvk6R7wD0ConeDiTaG+bmpag3+p5TK5eC1ibn1S3Z
hyP/cXUuJZkpkO+lpqhdMDCxdZUdBqSXzG4VNMR74Oh/Dcbgi0kl4XC3PwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFC7uue0qBkTuYuNWpKXalcpMJgz6MB8GA1UdIwQY
MBaAFLYtTOx4MwWSPjSX7YhPHERbTnj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTIt
ZDMyZTI3ZmI3ZTU5LzEvTHU2NTdTb0dSTzVpNDFha3BkcVZ5a3dtRFBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTItZDMyZTI3ZmI3ZTU5
LzEvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAu/QMD
BAEu/QQDBABfqcswDQYJKoZIhvcNAQELBQADggEBABHh38xfjZ5S991A9AyFpmiw
/bMiLD2NZm5zSkjy6wT9i8nnSz/WS7uv5NTcVwcBKxZXOl9WnUAoiohdFsEuj2Bj
gtfzFfTCfW8OpPZEF2I6j+6dKOeNPth3/rx4srB5RrYYx3UaiJInpI6mnjPWRzjk
9RjG5ZrH0xqTPqAjgtr/oN+u42SnCFNJ8w2Mg0uRcjJjYTbw/eiZvrVtYmdZx8a2
a2C3seOaWhAFF+bRh6zDCSrBD0EPxQhnfr4GZAZiYY+x/61QrofWMV+7tS/6GJv6
1FEWu1er3nGqriIN7oAA/HLTX/RQcw2whxvgIDsD/cl28NZFlvlrbK/V9+OcH0s=
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:07:02 2025 by rpki-client