Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/lkc-0MlfE6wjagT9foeguXGZhBk.roa
File: lkc-0MlfE6wjagT9foeguXGZhBk.roa (raw, json)
Hash identifier: Dk9iF0id/HpCNZDFa+BXpH9AMMGx3UOmasYJ8e7rqkM=
Subject key identifier: 96:47:3E:D0:C9:5F:13:AC:23:6A:04:FD:7E:87:A0:B9:71:99:84:19
Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial: 019427B61A902BB45D8696126986B57CD58E
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/lkc-0MlfE6wjagT9foeguXGZhBk.roa
Signing time: Thu 02 Jan 2025 15:50:33 +0000
ROA not before: Thu 02 Jan 2025 15:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41705
IP address blocks: 193.32.240.0/22 maxlen: 24
193.32.240.0/24 maxlen: 24
193.32.241.0/24 maxlen: 24
193.32.242.0/24 maxlen: 24
193.32.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:1a:90:2b:b4:5d:86:96:12:69:86:b5:7c:d5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Validity
Not Before: Jan 2 15:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96473ed0c95f13ac236a04fd7e87a0b971998419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:3c:62:84:51:2e:7d:39:e2:de:2e:ee:35:
a8:b6:9f:ef:b2:c8:c5:65:20:aa:e6:4f:21:14:6c:
ed:24:bc:86:e7:01:26:57:14:71:01:c5:d7:81:f9:
81:5f:ba:60:2d:00:52:47:57:1e:5e:e0:db:dc:92:
ff:1b:23:35:e2:87:48:0c:0b:98:09:f4:71:7d:f8:
1d:51:88:7e:ad:ab:ca:f2:45:0f:59:76:4d:7b:72:
ef:e1:07:14:e4:db:22:c8:13:bf:fe:a0:0f:a9:d7:
39:81:d0:4b:66:cb:0f:6f:69:4c:10:5a:7d:04:84:
28:08:a4:b7:fb:d6:49:5d:8c:9f:d4:d6:c8:f0:cc:
59:bb:ea:06:76:ad:c6:86:b0:f9:01:39:b4:8e:67:
8e:90:59:c5:bb:04:51:3a:6e:53:f7:a1:ee:b1:35:
7e:d4:10:2f:9b:6d:0e:53:93:f1:df:97:ed:18:71:
d9:e1:0f:ef:c8:e6:9e:46:15:49:44:54:b0:32:56:
fd:fd:b2:4a:26:de:87:c7:1c:87:37:9e:7e:83:5e:
54:54:9a:9f:d7:4e:c6:29:fc:ca:8f:b3:76:6c:b1:
7a:c3:0d:4a:1e:26:1d:f8:18:be:41:38:48:15:30:
5e:fa:3e:df:aa:0f:dd:62:c6:36:dd:57:77:fa:e1:
16:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:47:3E:D0:C9:5F:13:AC:23:6A:04:FD:7E:87:A0:B9:71:99:84:19
X509v3 Authority Key Identifier:
keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/lkc-0MlfE6wjagT9foeguXGZhBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.240.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:9b:fc:b4:7f:15:07:6b:96:59:55:ce:9f:ca:64:0f:e1:ff:
be:f2:54:c1:00:59:6c:15:b1:8b:18:72:11:96:f4:ea:b2:e7:
88:03:23:08:d4:1c:12:b7:7f:01:9d:62:f1:30:43:dc:c6:e6:
26:28:0f:c0:0d:68:59:99:df:f1:d1:e5:67:5f:37:5d:2b:4d:
60:12:b6:84:af:99:d2:31:a0:ff:e4:57:63:c0:92:5b:41:c7:
a4:91:37:49:1f:a1:27:d8:71:5a:b5:cb:31:30:31:c2:54:e3:
f2:80:af:3b:f7:6e:fe:ed:64:0c:8d:79:53:91:e4:4d:64:2d:
46:c0:a5:27:d0:06:f2:63:3a:e0:63:e3:41:6b:14:e2:9a:bd:
88:e3:6d:62:db:2e:e1:b6:b5:87:a4:e1:5b:0d:da:22:41:27:
ca:8a:55:b2:c7:02:04:60:00:ee:da:c5:1f:64:de:d8:5b:76:
b4:78:3a:dc:89:29:1b:1c:2b:75:20:57:36:6f:c8:f5:93:2b:
46:26:97:ef:a0:87:5a:d4:59:ea:77:17:01:b1:f7:08:36:5a:
75:78:76:76:cb:7c:6f:2f:ec:43:81:c8:a3:1a:e8:8a:15:19:
02:13:85:78:7e:09:22:b7:40:47:03:64:19:c1:00:6b:14:18:
d4:6b:a6:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnthqQK7RdhpYSaYa1fNWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljY2UzYjExOTdkMGNmOTUxMTU0MDU3MmE1OGZkMzcyZGNj
MDc0ODkwHhcNMjUwMTAyMTU1MDMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjQ3M2VkMGM5NWYxM2FjMjM2YTA0ZmQ3ZTg3YTBiOTcxOTk4NDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8k8YoRRLn054t4u7jWotp/vssjF
ZSCq5k8hFGztJLyG5wEmVxRxAcXXgfmBX7pgLQBSR1ceXuDb3JL/GyM14odIDAuY
CfRxffgdUYh+ravK8kUPWXZNe3Lv4QcU5NsiyBO//qAPqdc5gdBLZssPb2lMEFp9
BIQoCKS3+9ZJXYyf1NbI8MxZu+oGdq3GhrD5ATm0jmeOkFnFuwRROm5T96HusTV+
1BAvm20OU5Px35ftGHHZ4Q/vyOaeRhVJRFSwMlb9/bJKJt6HxxyHN55+g15UVJqf
107GKfzKj7N2bLF6ww1KHiYd+Bi+QThIFTBe+j7fqg/dYsY23Vd3+uEWcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJZHPtDJXxOsI2oE/X6HoLlxmYQZMB8GA1UdIwQY
MBaAFJzOOxGX0M+VEVQFcqWP03LcwHSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgt
YTA0NWZmOGUyYWMwLzEvbGtjLTBNbGZFNndqYWdUOWZvZWd1WEdaaEJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgtYTA0NWZmOGUyYWMw
LzEvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSDwMA0G
CSqGSIb3DQEBCwUAA4IBAQDBm/y0fxUHa5ZZVc6fymQP4f++8lTBAFlsFbGLGHIR
lvTqsueIAyMI1BwSt38BnWLxMEPcxuYmKA/ADWhZmd/x0eVnXzddK01gEraEr5nS
MaD/5FdjwJJbQcekkTdJH6En2HFatcsxMDHCVOPygK87927+7WQMjXlTkeRNZC1G
wKUn0AbyYzrgY+NBaxTimr2I421i2y7htrWHpOFbDdoiQSfKilWyxwIEYADu2sUf
ZN7YW3a0eDrciSkbHCt1IFc2b8j1kytGJpfvoIda1FnqdxcBsfcINlp1eHZ2y3xv
L+xDgcijGuiKFRkCE4V4fgkit0BHA2QZwQBrFBjUa6a7
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:40 2025 by rpki-client