Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/LiuxHz_qwpk-iOHwW8MXhcg7Zxs.roa
File: LiuxHz_qwpk-iOHwW8MXhcg7Zxs.roa (raw, json)
Hash identifier: km0H/D+1YbtUTShJ1MHECGv/2hfCq/4z2L9SQ0FPtCw=
Subject key identifier: 2E:2B:B1:1F:3F:EA:C2:99:3E:88:E1:F0:5B:C3:17:85:C8:3B:67:1B
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 018388758C77CC349319C0DDC62468448977
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/LiuxHz_qwpk-iOHwW8MXhcg7Zxs.roa
Signing time: Thu 29 Sep 2022 08:55:48 +0000
ROA not before: Thu 29 Sep 2022 08:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12859
IP address blocks: 195.8.208.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:88:75:8c:77:cc:34:93:19:c0:dd:c6:24:68:44:89:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Sep 29 08:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e2bb11f3feac2993e88e1f05bc31785c83b671b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:97:74:13:3d:c2:54:f6:4c:ae:15:6c:9c:d8:
41:27:f0:74:6c:e4:06:de:74:1d:4f:51:7c:42:09:
6d:3c:bb:cd:5e:96:f3:75:78:13:08:61:66:32:88:
c6:7b:36:78:36:46:f5:fa:ba:9d:cf:4d:cb:35:f7:
ff:74:b0:98:d3:b9:cc:86:33:8d:ad:63:d6:1e:b3:
2d:8c:45:97:c5:d3:df:80:4b:33:3c:d5:16:4a:a1:
37:69:30:a8:e0:3a:02:88:e6:60:74:4d:99:e0:32:
95:1a:63:d7:53:12:89:1b:5f:76:f9:68:df:17:d0:
14:e6:33:7e:1a:2f:35:12:5b:08:0b:f8:cf:5c:77:
29:20:62:9c:7a:2c:f2:03:75:e9:d5:7b:dc:f8:2a:
85:dc:af:97:f2:1f:f7:fe:2f:d2:2d:e8:d9:3e:3c:
5a:26:e0:45:fc:1a:96:a3:5a:f4:d5:f6:d5:7b:76:
24:6a:e9:b8:2b:7b:5f:15:b3:59:3d:7a:a7:a5:79:
ec:20:f1:7b:e1:74:cf:72:ab:44:1c:b4:12:66:b9:
4f:fe:3c:f9:19:45:6b:8e:91:1a:e4:ff:ec:68:f3:
f8:84:0d:51:a6:e8:d4:60:a4:55:b8:71:71:16:2c:
9c:d5:fc:26:af:5d:08:8f:76:0f:e5:bf:e2:66:7c:
91:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2B:B1:1F:3F:EA:C2:99:3E:88:E1:F0:5B:C3:17:85:C8:3B:67:1B
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/LiuxHz_qwpk-iOHwW8MXhcg7Zxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.208.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:99:74:01:df:b6:da:6c:87:31:1b:89:41:0e:9c:96:81:fa:
21:f4:0f:aa:21:f1:4d:27:ca:7b:2e:f8:39:b8:af:dc:2e:e4:
ca:c1:a3:ae:ca:bf:16:cf:71:7c:07:17:8b:07:b0:b5:f0:94:
08:b1:35:dc:3f:a3:28:5b:43:f8:37:03:53:02:f6:a7:bc:ed:
59:39:bc:dd:b4:69:76:c3:4c:5f:15:22:92:29:77:6a:7b:db:
ec:a0:b2:a8:86:ac:ad:b6:12:3e:a0:44:ce:a5:e0:3b:18:80:
89:d7:53:99:a6:1c:86:f1:da:1c:09:15:a6:5f:0f:04:e1:21:
86:00:10:3a:b2:63:b6:56:8f:fc:f5:de:e6:e0:86:fe:b3:dc:
ed:36:b3:ee:8f:dd:bb:b0:8f:e3:f0:54:bc:5c:b3:a7:19:8f:
d5:87:30:13:08:cf:7c:c9:04:5a:72:5e:88:d0:bd:7b:fd:ef:
5f:88:c0:08:2c:23:8e:c5:0e:16:64:16:5c:2b:1f:39:92:18:
56:b7:db:2b:3b:75:0b:d6:1a:c5:80:ca:31:19:3b:70:3c:d0:
b0:c6:59:e7:ae:c0:81:8c:8a:d9:db:83:0d:21:31:c5:4d:5e:
cc:ea:96:e3:0d:5a:8c:94:5c:e5:d3:b3:15:b2:62:2f:3a:67:
e2:c0:48:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOIdYx3zDSTGcDdxiRoRIl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4
NGU4YzYwHhcNMjIwOTI5MDg1NTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTJiYjExZjNmZWFjMjk5M2U4OGUxZjA1YmMzMTc4NWM4M2I2NzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZd0Ez3CVPZMrhVsnNhBJ/B0bOQG
3nQdT1F8QgltPLvNXpbzdXgTCGFmMojGezZ4Nkb1+rqdz03LNff/dLCY07nMhjON
rWPWHrMtjEWXxdPfgEszPNUWSqE3aTCo4DoCiOZgdE2Z4DKVGmPXUxKJG192+Wjf
F9AU5jN+Gi81ElsIC/jPXHcpIGKceizyA3Xp1Xvc+CqF3K+X8h/3/i/SLejZPjxa
JuBF/BqWo1r01fbVe3Ykaum4K3tfFbNZPXqnpXnsIPF74XTPcqtEHLQSZrlP/jz5
GUVrjpEa5P/saPP4hA1RpujUYKRVuHFxFiyc1fwmr10Ij3YP5b/iZnyRIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC4rsR8/6sKZPojh8FvDF4XIO2cbMB8GA1UdIwQY
MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt
YjBkNzJlOTEwZWZlLzEvTGl1eEh6X3F3cGstaU9Id1c4TVhoY2c3WnhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl
LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwwjQMA0G
CSqGSIb3DQEBCwUAA4IBAQCMmXQB37babIcxG4lBDpyWgfoh9A+qIfFNJ8p7Lvg5
uK/cLuTKwaOuyr8Wz3F8BxeLB7C18JQIsTXcP6MoW0P4NwNTAvanvO1ZObzdtGl2
w0xfFSKSKXdqe9vsoLKohqytthI+oETOpeA7GICJ11OZphyG8docCRWmXw8E4SGG
ABA6smO2Vo/89d7m4Ib+s9ztNrPuj927sI/j8FS8XLOnGY/VhzATCM98yQRacl6I
0L17/e9fiMAILCOOxQ4WZBZcKx85khhWt9srO3UL1hrFgMoxGTtwPNCwxlnnrsCB
jIrZ24MNITHFTV7M6pbjDVqMlFzl07MVsmIvOmfiwEiW
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:03 2025 by rpki-client