Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Ltva2LML4LPDm405JKcItuvLpss.roa
File: Ltva2LML4LPDm405JKcItuvLpss.roa (raw, json)
Hash identifier: qUrlEbzfVE/xbtdiJE1hO3oNUNFDVTI1Uhl+QeR4Rm0=
Subject key identifier: 2E:DB:DA:D8:B3:0B:E0:B3:C3:9B:8D:39:24:A7:08:B6:EB:CB:A6:CB
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D59C4E717C008BE083ED6AB10941D6
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Ltva2LML4LPDm405JKcItuvLpss.roa
Signing time: Wed 01 Jan 2025 07:47:37 +0000
ROA not before: Wed 01 Jan 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2300
IP address blocks: 81.52.185.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9c:4e:71:7c:00:8b:e0:83:ed:6a:b1:09:41:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2edbdad8b30be0b3c39b8d3924a708b6ebcba6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:88:9f:67:24:c4:d5:c6:26:f5:b9:77:6f:
b7:c9:44:00:3e:ee:91:61:12:5b:b4:0e:a1:c4:ee:
76:3c:53:b9:81:47:96:62:b1:37:93:7c:1d:8b:69:
b5:28:5d:33:a0:b3:76:b1:d7:b2:3b:7f:c2:cf:52:
fc:cd:8e:cd:91:cf:92:de:ac:07:1f:f9:d3:ac:ff:
bb:19:47:80:60:9e:b9:c1:97:4f:0b:30:77:5e:9c:
21:a8:ce:b5:c5:03:df:91:3b:02:c7:50:67:c2:ca:
64:b6:56:53:b8:89:76:e3:77:d8:e5:21:bd:51:bd:
f7:9b:72:cd:90:fc:40:ae:a7:be:9c:87:34:f1:b3:
10:56:d5:85:71:e6:8e:93:4b:79:6a:b6:83:1b:a7:
92:8e:e2:e7:b0:99:9d:45:69:d0:00:ed:e7:72:c4:
d9:b5:6b:9e:56:0f:82:e7:cb:f4:b3:24:93:1e:de:
e2:af:93:3a:b1:8e:09:e1:9b:f7:7e:af:89:59:40:
bd:05:99:1d:cc:17:28:ed:14:3e:ec:97:fb:df:5e:
b8:4c:9f:4a:44:c1:2c:88:b0:cf:53:22:34:42:24:
36:e0:2a:e9:51:f7:95:60:69:72:ba:45:9e:0c:6e:
0e:00:1b:53:02:0b:e9:df:5c:a7:8f:51:bc:38:f1:
3d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DB:DA:D8:B3:0B:E0:B3:C3:9B:8D:39:24:A7:08:B6:EB:CB:A6:CB
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Ltva2LML4LPDm405JKcItuvLpss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.52.185.0/24
Signature Algorithm: sha256WithRSAEncryption
95:4a:80:29:1d:cd:45:c1:a2:dc:87:23:78:cb:87:a2:6c:3b:
5e:c7:2c:22:a8:b1:cf:be:6d:ef:58:c9:f6:67:1f:fd:36:5d:
32:15:ac:5b:d3:c4:74:51:83:76:61:d5:58:23:eb:49:f7:de:
ae:4b:2d:15:80:9d:8f:e6:22:fa:f8:aa:8a:c2:e9:c8:8a:b2:
b3:66:12:1e:25:cd:d1:58:b0:15:e7:23:69:71:18:f3:34:86:
a6:cf:29:f7:e9:69:b0:80:39:fb:72:39:0b:79:d2:04:6a:2d:
4c:53:13:f3:0f:f9:2d:f0:bf:4a:3e:09:6c:5e:dd:ea:03:61:
70:ff:1c:65:70:19:a9:52:42:c3:a5:51:3a:2a:78:02:28:ef:
de:4e:5b:69:5b:b9:a9:6c:54:dd:23:38:e1:e4:cc:49:81:88:
16:23:1c:98:8b:0f:c4:6f:41:69:1f:5d:ad:d0:86:d6:f0:4e:
46:46:a0:a2:5c:f2:2c:71:cf:de:8e:7c:cd:65:36:74:34:e7:
ee:c1:b8:ed:70:fc:3b:0b:cc:45:bc:6f:79:ff:90:aa:3f:f8:
e2:95:0c:14:52:f4:d5:5a:b3:3a:f6:60:f0:f2:fa:74:3b:de:
d4:20:70:c0:ec:99:4e:49:d0:cb:09:65:a4:e0:f7:fe:9f:a8:
fc:6c:15:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1ZxOcXwAi+CD7WqxCUHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjUwMTAxMDc0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWRiZGFkOGIzMGJlMGIzYzM5YjhkMzkyNGE3MDhiNmViY2JhNmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzeIn2ckxNXGJvW5d2+3yUQAPu6R
YRJbtA6hxO52PFO5gUeWYrE3k3wdi2m1KF0zoLN2sdeyO3/Cz1L8zY7Nkc+S3qwH
H/nTrP+7GUeAYJ65wZdPCzB3XpwhqM61xQPfkTsCx1BnwspktlZTuIl243fY5SG9
Ub33m3LNkPxArqe+nIc08bMQVtWFceaOk0t5araDG6eSjuLnsJmdRWnQAO3ncsTZ
tWueVg+C58v0sySTHt7ir5M6sY4J4Zv3fq+JWUC9BZkdzBco7RQ+7Jf73164TJ9K
RMEsiLDPUyI0QiQ24CrpUfeVYGlyukWeDG4OABtTAgvp31ynj1G8OPE9JQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC7b2tizC+Czw5uNOSSnCLbry6bLMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvTHR2YTJMTUw0TFBEbTQwNUpLY0l0dXZMcHNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUTS5MA0G
CSqGSIb3DQEBCwUAA4IBAQCVSoApHc1FwaLchyN4y4eibDtexywiqLHPvm3vWMn2
Zx/9Nl0yFaxb08R0UYN2YdVYI+tJ996uSy0VgJ2P5iL6+KqKwunIirKzZhIeJc3R
WLAV5yNpcRjzNIamzyn36WmwgDn7cjkLedIEai1MUxPzD/kt8L9KPglsXt3qA2Fw
/xxlcBmpUkLDpVE6KngCKO/eTltpW7mpbFTdIzjh5MxJgYgWIxyYiw/Eb0FpH12t
0IbW8E5GRqCiXPIscc/ejnzNZTZ0NOfuwbjtcPw7C8xFvG95/5CqP/jilQwUUvTV
WrM69mDw8vp0O97UIHDA7JlOSdDLCWWk4Pf+n6j8bBVT
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:15:24 2025 by rpki-client