Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/LHS-1GPmf3JlxOhkC8EvvEXsIio.roa
File: LHS-1GPmf3JlxOhkC8EvvEXsIio.roa (raw, json)
Hash identifier: qJmDzf2hiWRAwgR4H4d0P3HUtRpMHlkEr8kbVnNHB5s=
Subject key identifier: 2C:74:BE:D4:63:E6:7F:72:65:C4:E8:64:0B:C1:2F:BC:45:EC:22:2A
Certificate issuer: /CN=16a4e10723351270cd8c9cc64b096488e64e230e
Certificate serial: 0194244575C58727268FF3F765E7A2EF4E10
Authority key identifier: 16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/LHS-1GPmf3JlxOhkC8EvvEXsIio.roa
Signing time: Wed 01 Jan 2025 23:48:39 +0000
ROA not before: Wed 01 Jan 2025 23:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12843
IP address blocks: 194.45.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:75:c5:87:27:26:8f:f3:f7:65:e7:a2:ef:4e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a4e10723351270cd8c9cc64b096488e64e230e
Validity
Not Before: Jan 1 23:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c74bed463e67f7265c4e8640bc12fbc45ec222a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:61:b8:28:6b:4a:dd:04:d8:bc:0f:20:64:20:
62:ca:ed:ef:42:a1:41:98:ac:93:d1:a1:a1:62:5b:
dd:0c:22:f8:a7:1c:c9:f3:06:3c:b1:0f:9a:71:13:
91:72:c3:19:ae:14:d6:1c:6a:f3:b1:b6:76:87:6a:
40:ec:6a:a6:72:0c:f1:e5:f8:e5:a9:8e:d3:f3:64:
58:cb:86:19:22:09:28:72:5f:78:62:3f:1e:ee:d5:
bb:88:da:e8:ff:b5:39:ff:b2:98:20:2f:f4:03:25:
db:1b:71:94:4b:df:00:e2:d2:68:f6:90:65:9e:62:
66:c3:ec:f3:b9:1c:e8:86:02:9f:39:0f:a1:3c:fe:
0e:04:41:b4:0b:7c:80:ca:91:4c:f6:64:11:b0:c0:
0d:55:93:88:b8:07:26:e4:bc:e2:8f:e4:1b:c2:56:
90:d0:34:f6:b1:75:c0:c6:2a:a6:80:4b:a3:51:e3:
2d:35:1d:21:0b:07:f6:84:34:9b:c5:7a:a4:60:1b:
2a:1a:1e:92:73:14:d9:7d:96:97:27:b2:f6:0c:0d:
b9:37:af:a4:2e:57:07:48:84:d7:6a:cf:a5:2c:35:
91:56:43:46:c8:95:a4:54:82:44:81:cd:12:a5:4d:
ba:c3:c6:88:04:8a:bc:4c:c4:72:6c:94:8b:e9:b4:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:74:BE:D4:63:E6:7F:72:65:C4:E8:64:0B:C1:2F:BC:45:EC:22:2A
X509v3 Authority Key Identifier:
keyid:16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/LHS-1GPmf3JlxOhkC8EvvEXsIio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.103.0/24
Signature Algorithm: sha256WithRSAEncryption
47:fe:19:dc:58:b1:6d:65:93:fd:18:f4:0f:5a:31:d1:a6:c6:
8c:81:58:f2:e9:ca:12:65:a1:8e:f5:2a:88:ee:28:15:7f:37:
b5:96:67:94:22:32:40:8a:2f:cf:7b:b5:8b:a6:bd:c3:7f:82:
62:9b:83:42:83:1d:95:4c:96:c9:ca:08:f8:0d:58:4a:67:04:
17:b5:28:42:be:a4:6a:46:02:57:e0:57:51:d5:bf:2b:1f:5a:
50:dd:9f:13:69:39:ff:11:3b:76:57:68:d1:1b:46:ef:8b:02:
73:33:ce:74:5b:c5:9d:6b:da:9e:17:32:d5:16:2c:a0:fc:fa:
76:18:20:78:39:ef:41:16:a7:9e:10:0f:19:5c:4f:23:03:03:
51:c9:bb:bb:5f:26:2a:a7:2d:6e:7e:18:c5:35:93:67:48:03:
ee:0f:2a:57:f1:c1:b4:f1:c0:f6:80:83:2f:f8:9e:c2:7c:02:
de:46:4d:fd:ea:d9:6a:e6:38:b7:03:99:4c:da:91:4b:b4:3f:
f0:ca:65:ce:46:81:e1:b4:65:a0:fb:1b:6c:02:85:cd:7b:4e:
4d:24:45:6f:2c:19:f9:e0:f2:9d:60:17:d6:ee:12:56:e5:ab:
48:fc:b2:65:8f:06:97:31:16:08:1a:2d:e3:1f:c4:37:d8:85:
13:9f:e3:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRXXFhycmj/P3Zeei704QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YTRlMTA3MjMzNTEyNzBjZDhjOWNjNjRiMDk2NDg4ZTY0
ZTIzMGUwHhcNMjUwMTAxMjM0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzc0YmVkNDYzZTY3ZjcyNjVjNGU4NjQwYmMxMmZiYzQ1ZWMyMjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GG4KGtK3QTYvA8gZCBiyu3vQqFB
mKyT0aGhYlvdDCL4pxzJ8wY8sQ+acRORcsMZrhTWHGrzsbZ2h2pA7Gqmcgzx5fjl
qY7T82RYy4YZIgkocl94Yj8e7tW7iNro/7U5/7KYIC/0AyXbG3GUS98A4tJo9pBl
nmJmw+zzuRzohgKfOQ+hPP4OBEG0C3yAypFM9mQRsMANVZOIuAcm5Lzij+QbwlaQ
0DT2sXXAxiqmgEujUeMtNR0hCwf2hDSbxXqkYBsqGh6ScxTZfZaXJ7L2DA25N6+k
LlcHSITXas+lLDWRVkNGyJWkVIJEgc0SpU26w8aIBIq8TMRybJSL6bSMZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCx0vtRj5n9yZcToZAvBL7xF7CIqMB8GA1UdIwQY
MBaAFBak4QcjNRJwzYycxksJZIjmTiMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnFUaEJ5TTFFbkROakp6R1N3bGtpT1pPSXc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yNzVkYzUtNmYxNS00NWZlLTk0MWYt
OWI2NDQ0NGZmNjg4LzEvTEhTLTFHUG1mM0pseE9oa0M4RXZ2RVhzSWlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8yNzVkYzUtNmYxNS00NWZlLTk0MWYtOWI2NDQ0NGZmNjg4
LzEvRnFUaEJ5TTFFbkROakp6R1N3bGtpT1pPSXc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwi1nMA0G
CSqGSIb3DQEBCwUAA4IBAQBH/hncWLFtZZP9GPQPWjHRpsaMgVjy6coSZaGO9SqI
7igVfze1lmeUIjJAii/Pe7WLpr3Df4Jim4NCgx2VTJbJygj4DVhKZwQXtShCvqRq
RgJX4FdR1b8rH1pQ3Z8TaTn/ETt2V2jRG0bviwJzM850W8Wda9qeFzLVFiyg/Pp2
GCB4Oe9BFqeeEA8ZXE8jAwNRybu7XyYqpy1ufhjFNZNnSAPuDypX8cG08cD2gIMv
+J7CfALeRk396tlq5ji3A5lM2pFLtD/wymXORoHhtGWg+xtsAoXNe05NJEVvLBn5
4PKdYBfW7hJW5atI/LJljwaXMRYIGi3jH8Q32IUTn+Me
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:26:53 2025 by rpki-client