Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lXzPRXj5AXoTXva8FVy6afYI0oA.roa
File: lXzPRXj5AXoTXva8FVy6afYI0oA.roa (raw, json)
Hash identifier: 8LnhQtxNooiaVnGsoWse9vWU1Q7NqB/GYspC2MKE8A0=
Subject key identifier: 95:7C:CF:45:78:F9:01:7A:13:5E:F6:BC:15:5C:BA:69:F6:08:D2:80
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1882CF71
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lXzPRXj5AXoTXva8FVy6afYI0oA.roa
Signing time: Thu 21 Apr 2022 13:56:26 +0000
ROA not before: Thu 21 Apr 2022 13:56:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 185.121.168.0/24 maxlen: 24
185.99.132.0/24 maxlen: 24
185.195.239.0/24 maxlen: 24
185.99.133.0/24 maxlen: 24
2a06:a006::/32 maxlen: 48
2a06:a004::/32 maxlen: 48
2a06:1280::/32 maxlen: 48
2a06:a003::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411225969 (0x1882cf71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 21 13:56:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=957ccf4578f9017a135ef6bc155cba69f608d280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:93:c1:b1:f3:6d:42:70:b3:7f:b2:66:9c:d3:
b5:36:8e:3f:55:f7:77:66:71:88:b4:32:5b:64:95:
2a:f5:21:71:f1:75:90:77:74:53:48:06:16:9a:48:
22:40:d3:27:34:2f:c9:14:82:d6:0a:a3:b1:64:ff:
8a:c6:f0:91:ab:0f:6e:79:b3:27:58:24:f8:1e:9c:
7a:e2:5b:07:6c:6f:96:42:6d:8f:d7:d6:b9:82:4a:
2c:1a:4d:c2:29:b8:7c:38:8b:14:a2:92:e5:8f:2e:
1f:2c:42:f0:c7:66:38:fc:4a:00:31:f6:0b:c2:84:
d6:6e:7c:96:e1:37:71:b0:02:72:6c:ae:64:58:39:
19:49:c8:bc:66:ed:e2:5e:c6:dd:7c:41:d9:e8:02:
94:5f:dd:d4:d5:47:a6:7f:a5:05:a5:6b:19:39:67:
dc:ef:e4:53:d6:24:04:a4:c0:b7:c3:d1:a7:bf:69:
e0:d0:5a:53:1d:69:06:72:99:55:71:c8:3a:6a:37:
28:6c:47:20:e9:cf:64:05:17:86:2c:22:9d:38:5d:
57:c8:a9:17:dd:7a:9c:f9:28:0d:d5:ee:03:5a:c2:
68:fd:9e:74:92:b7:cf:36:ad:1d:b5:77:ae:26:e7:
78:17:e1:a3:c8:cf:c5:04:e9:1d:e6:17:72:f1:d2:
f0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7C:CF:45:78:F9:01:7A:13:5E:F6:BC:15:5C:BA:69:F6:08:D2:80
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lXzPRXj5AXoTXva8FVy6afYI0oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.132.0/23
185.121.168.0/24
185.195.239.0/24
IPv6:
2a06:1280::/32
2a06:a003::-2a06:a004:ffff:ffff:ffff:ffff:ffff:ffff
2a06:a006::/32
Signature Algorithm: sha256WithRSAEncryption
2e:4a:0e:f8:1e:90:e6:86:fe:be:34:6f:9d:b4:84:99:a4:10:
43:52:19:6e:17:b5:10:bd:6d:e2:26:9e:f9:4b:75:6f:24:da:
59:5e:b4:fc:e9:1a:8d:4c:3b:8a:4c:19:43:72:aa:66:3f:98:
d3:d6:71:ed:14:92:89:c6:d2:a0:61:ad:fe:e6:71:76:ed:e5:
70:4f:f8:c8:92:65:a1:75:12:a8:90:00:93:41:c7:2a:bb:d3:
38:95:42:f2:3f:0f:4d:88:ee:a3:21:23:5e:c1:13:d1:1e:24:
08:08:20:27:4a:dd:e4:01:d5:3a:98:ce:99:3d:62:3f:e0:e8:
81:a4:fa:77:75:9c:fc:b2:b0:e1:27:19:1f:e4:57:33:87:de:
98:2c:9a:e3:0e:61:86:9b:20:8f:f4:1a:46:86:70:8e:8b:65:
d1:d0:51:64:2a:1a:3e:66:ca:0c:c4:c1:21:70:b3:15:e6:57:
c0:e2:22:ae:04:26:9d:aa:a4:48:92:42:9d:62:14:fa:49:d0:
fe:82:71:13:19:74:61:61:8e:8c:5c:4e:f1:46:26:61:af:a5:
ed:af:d2:1c:50:c4:1f:5a:07:fe:54:b0:b8:c3:6f:1f:4c:07:
59:13:74:39:fa:a0:2b:8e:ad:a2:6f:83:d4:fb:7d:e0:2f:66:
77:75:37:46
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIEGILPcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDQy
MTEzNTYyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTU3Y2NmNDU3OGY5
MDE3YTEzNWVmNmJjMTU1Y2JhNjlmNjA4ZDI4MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANGTwbHzbUJws3+yZpzTtTaOP1X3d2ZxiLQyW2SVKvUhcfF1
kHd0U0gGFppIIkDTJzQvyRSC1gqjsWT/isbwkasPbnmzJ1gk+B6ceuJbB2xvlkJt
j9fWuYJKLBpNwim4fDiLFKKS5Y8uHyxC8MdmOPxKADH2C8KE1m58luE3cbACcmyu
ZFg5GUnIvGbt4l7G3XxB2egClF/d1NVHpn+lBaVrGTln3O/kU9YkBKTAt8PRp79p
4NBaUx1pBnKZVXHIOmo3KGxHIOnPZAUXhiwinThdV8ipF916nPkoDdXuA1rCaP2e
dJK3zzatHbV3ribneBfho8jPxQTpHeYXcvHS8KcCAwEAAaOCAjswggI3MB0GA1Ud
DgQWBBSVfM9FePkBehNe9rwVXLpp9gjSgDAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L2xYelBSWGo1QVhvVFh2YThGVnk2YWZZSTBvQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBR
BggrBgEFBQcBBwEB/wRCMEAwGAQCAAEwEgMEAbljhAMEALl5qAMEALnD7zAkBAIA
AjAeAwUAKgYSgDAOAwUAKgagAwMFACoGoAQDBQAqBqAGMA0GCSqGSIb3DQEBCwUA
A4IBAQAuSg74HpDmhv6+NG+dtISZpBBDUhluF7UQvW3iJp75S3VvJNpZXrT86RqN
TDuKTBlDcqpmP5jT1nHtFJKJxtKgYa3+5nF27eVwT/jIkmWhdRKokACTQccqu9M4
lULyPw9NiO6jISNewRPRHiQICCAnSt3kAdU6mM6ZPWI/4OiBpPp3dZz8srDhJxkf
5Fczh96YLJrjDmGGmyCP9BpGhnCOi2XR0FFkKho+ZsoMxMEhcLMV5lfA4iKuBCad
qqRIkkKdYhT6SdD+gnETGXRhYY6MXE7xRiZhr6Xtr9IcUMQfWgf+VLC4w28fTAdZ
E3Q5+qArjq2ib4PU+33gL2Z3dTdG
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:39 2025 by rpki-client