Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/THOrvPF_LX_WczT6iLskfPD5ge8.roa
File: THOrvPF_LX_WczT6iLskfPD5ge8.roa (raw, json)
Hash identifier: 1AK/3rBMlL6zveApvuWxyn0MXiAPAwcr2u63ERKUI9Y=
Subject key identifier: 4C:73:AB:BC:F1:7F:2D:7F:D6:73:34:FA:88:BB:24:7C:F0:F9:81:EF
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747D6E3E67A6ED8F3F4C27C68AE6DB1
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/THOrvPF_LX_WczT6iLskfPD5ge8.roa
Signing time: Thu 02 Jan 2025 13:50:06 +0000
ROA not before: Thu 02 Jan 2025 13:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213780
IP address blocks: 95.182.102.0/24 maxlen: 24
95.182.103.0/24 maxlen: 24
109.248.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d6:e3:e6:7a:6e:d8:f3:f4:c2:7c:68:ae:6d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c73abbcf17f2d7fd67334fa88bb247cf0f981ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:23:a9:6c:c7:54:17:62:57:13:28:5c:33:
39:b5:fd:48:f4:43:ab:72:33:9d:0b:b5:ca:5a:ea:
86:40:c5:e1:7d:6c:d0:d3:02:10:64:81:1d:fc:42:
67:fc:ad:c0:b8:f9:9b:c3:38:e5:d8:a7:31:f9:8a:
7a:4b:0b:7f:e8:69:a1:17:e3:8a:b1:f7:0f:3a:34:
37:83:4a:e5:c4:21:40:6d:02:b8:f4:15:96:2b:3a:
6d:fd:87:03:50:ec:58:e0:32:9a:a9:47:60:51:cf:
a8:bc:af:78:16:eb:5a:13:06:ab:b9:74:57:90:6a:
ee:40:2c:37:60:4b:38:e8:d6:91:d0:82:4b:d5:2a:
5c:9e:9f:32:e3:23:e9:18:c2:c5:cc:5b:8b:2f:29:
22:11:6f:57:87:9f:b8:fb:2f:13:16:79:e6:c0:4a:
7f:5b:52:84:10:40:0e:96:71:d0:ae:27:c7:ef:84:
ee:fa:b0:1e:eb:2b:83:78:7d:7e:c9:f5:25:35:1b:
b6:dd:a7:72:92:86:79:cf:c6:85:75:ab:53:74:8c:
f9:fb:0b:21:f0:45:3b:01:90:00:aa:9a:fc:29:6c:
00:53:21:42:c6:de:6c:d4:9c:6d:8e:9c:1d:5d:15:
65:cc:b2:b7:0c:a6:2f:62:4f:06:65:a5:b2:24:d0:
c5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:73:AB:BC:F1:7F:2D:7F:D6:73:34:FA:88:BB:24:7C:F0:F9:81:EF
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/THOrvPF_LX_WczT6iLskfPD5ge8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.182.102.0/23
109.248.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:d7:9f:a4:c0:e7:76:a8:e8:60:46:ab:10:c0:34:e3:19:af:
5a:09:0a:15:15:6e:1c:5f:71:66:2a:8f:dd:12:01:66:70:ff:
0c:5b:7c:40:92:d4:a3:ba:47:d8:fe:d6:00:d1:58:c7:27:a7:
a7:79:de:36:76:ac:b1:4b:3d:e8:9d:41:00:88:d7:e7:b8:20:
45:05:e7:6f:97:e8:03:60:c1:3e:4e:da:6d:da:5e:fa:7c:b4:
cb:35:9c:c3:f3:c6:0c:6e:98:0d:82:1c:f4:93:99:0b:e2:e9:
73:3b:ed:7e:f3:47:22:c2:a8:66:bf:6c:dd:2b:86:89:02:27:
ea:22:7f:51:5b:01:02:d9:a0:69:d0:05:21:ad:76:1e:5a:02:
bc:63:80:04:5e:c2:44:46:e4:04:b8:c5:23:bc:9e:26:3c:82:
b3:17:cf:a4:ac:24:c8:ea:1c:35:5c:80:e8:69:2c:78:80:4c:
d8:10:26:19:c4:67:c9:8d:ec:63:0c:74:55:e6:a0:dd:c3:76:
c5:47:21:70:94:36:aa:0c:5e:1c:38:01:c0:a9:23:b5:ee:73:
dd:ba:11:82:3b:64:25:59:92:e5:71:77:7f:ec:6b:96:7d:18:
c4:77:f6:cb:0f:f4:e0:08:16:45:61:9a:c1:82:26:7a:0e:a4:
22:e1:da:bb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnR9bj5npu2PP0wnxorm2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjUwMTAyMTM1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzczYWJiY2YxN2YyZDdmZDY3MzM0ZmE4OGJiMjQ3Y2YwZjk4MWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDsjqWzHVBdiVxMoXDM5tf1I9EOr
cjOdC7XKWuqGQMXhfWzQ0wIQZIEd/EJn/K3AuPmbwzjl2Kcx+Yp6Swt/6GmhF+OK
sfcPOjQ3g0rlxCFAbQK49BWWKzpt/YcDUOxY4DKaqUdgUc+ovK94FutaEwaruXRX
kGruQCw3YEs46NaR0IJL1Spcnp8y4yPpGMLFzFuLLykiEW9Xh5+4+y8TFnnmwEp/
W1KEEEAOlnHQrifH74Tu+rAe6yuDeH1+yfUlNRu23adykoZ5z8aFdatTdIz5+wsh
8EU7AZAAqpr8KWwAUyFCxt5s1JxtjpwdXRVlzLK3DKYvYk8GZaWyJNDFJQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFExzq7zxfy1/1nM0+oi7JHzw+YHvMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvVEhPcnZQRl9MWF9XY3pUNmlMc2tmUEQ1Z2U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBX7ZmAwQA
bfgEMA0GCSqGSIb3DQEBCwUAA4IBAQCj15+kwOd2qOhgRqsQwDTjGa9aCQoVFW4c
X3FmKo/dEgFmcP8MW3xAktSjukfY/tYA0VjHJ6ened42dqyxSz3onUEAiNfnuCBF
Bedvl+gDYME+Ttpt2l76fLTLNZzD88YMbpgNghz0k5kL4ulzO+1+80ciwqhmv2zd
K4aJAifqIn9RWwEC2aBp0AUhrXYeWgK8Y4AEXsJERuQEuMUjvJ4mPIKzF8+krCTI
6hw1XIDoaSx4gEzYECYZxGfJjexjDHRV5qDdw3bFRyFwlDaqDF4cOAHAqSO17nPd
uhGCO2QlWZLlcXd/7GuWfRjEd/bLD/TgCBZFYZrBgiZ6DqQi4dq7
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:15:44 2025 by rpki-client