Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/lBSn07R1wQtVo-45PRUDcdQx1dQ.roa
File: lBSn07R1wQtVo-45PRUDcdQx1dQ.roa (raw, json)
Hash identifier: xXfz0J7h2H66EDS9KP9rEAF9g5apcq19krnRxcFyuQE=
Subject key identifier: 94:14:A7:D3:B4:75:C1:0B:55:A3:EE:39:3D:15:03:71:D4:31:D5:D4
Certificate issuer: /CN=46dd25d9f15c227ca35f8a2e2b0d1a89a92d8d62
Certificate serial: 010C0DEF
Authority key identifier: 46:DD:25:D9:F1:5C:22:7C:A3:5F:8A:2E:2B:0D:1A:89:A9:2D:8D:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rt0l2fFcInyjX4ouKw0aiaktjWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/lBSn07R1wQtVo-45PRUDcdQx1dQ.roa
Signing time: Thu 13 Jan 2022 12:46:54 +0000
ROA not before: Thu 13 Jan 2022 12:46:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 94.124.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17567215 (0x10c0def)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46dd25d9f15c227ca35f8a2e2b0d1a89a92d8d62
Validity
Not Before: Jan 13 12:46:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9414a7d3b475c10b55a3ee393d150371d431d5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:c0:42:e7:a9:2c:b5:5e:cc:45:4f:2a:f2:
9e:59:a9:9f:f6:fd:97:28:59:8d:e3:6b:15:9e:82:
e4:88:84:f6:a2:0b:43:a9:e4:1b:77:b1:c8:89:0c:
f7:52:5a:fe:08:07:a2:5a:e1:21:bd:62:ff:3e:8d:
1d:4b:da:7c:19:88:37:e1:7e:80:e1:be:32:10:f3:
04:13:5f:36:bf:50:5d:46:b5:33:fa:b6:6b:14:7c:
9f:ab:d4:0d:02:c3:cc:a8:8e:8d:c6:36:9e:59:59:
11:f7:fb:13:f5:d6:bf:36:47:9c:19:dd:93:64:ef:
54:b9:db:61:f8:3c:f0:7f:83:48:e1:33:63:35:3b:
25:4c:60:3e:aa:02:70:0f:34:37:6b:9a:bf:2a:cd:
86:ed:3e:3b:73:df:54:ac:53:6c:cc:9e:99:11:e0:
ab:39:93:8b:b9:46:b1:4a:38:06:03:13:e6:fd:bb:
01:ed:c7:bb:43:b8:25:9b:d2:8b:1e:9a:07:06:cd:
2d:9f:5e:de:cd:8f:ff:63:37:dd:f7:db:fa:71:e6:
24:0f:e9:44:5b:37:ed:33:a6:1c:ac:e4:5b:4a:71:
09:34:e6:99:bf:38:3d:a4:90:d3:86:0b:22:af:de:
7a:30:3e:46:1c:d3:85:1a:6c:1f:75:5c:4b:a9:db:
67:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:14:A7:D3:B4:75:C1:0B:55:A3:EE:39:3D:15:03:71:D4:31:D5:D4
X509v3 Authority Key Identifier:
keyid:46:DD:25:D9:F1:5C:22:7C:A3:5F:8A:2E:2B:0D:1A:89:A9:2D:8D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rt0l2fFcInyjX4ouKw0aiaktjWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/lBSn07R1wQtVo-45PRUDcdQx1dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/Rt0l2fFcInyjX4ouKw0aiaktjWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.72.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ca:5d:58:22:2a:8d:7c:4a:a0:d4:49:33:12:46:c6:05:f3:
37:a6:72:be:c2:a4:b6:48:f0:46:cd:8b:28:f1:b7:a6:96:eb:
4f:a8:a0:54:ce:45:0d:cc:11:66:2f:55:4c:39:80:40:de:95:
14:64:2e:3e:65:27:74:46:fc:94:33:fe:aa:6b:87:5e:b4:9f:
20:20:67:e0:00:a9:3f:54:01:88:e5:6e:9c:9f:7b:11:c9:16:
ae:3f:4e:67:ed:e8:69:89:71:69:4b:63:17:0a:8f:30:71:cc:
00:7a:56:d0:ea:b6:c0:71:4e:b7:c9:71:c7:91:04:74:4f:a9:
c6:a3:89:14:4f:bc:3d:79:48:96:13:f8:92:81:64:0a:2c:f9:
19:c4:14:67:9c:7e:77:0c:75:8b:6d:3c:93:06:ea:ac:4c:5d:
c9:88:29:b9:75:06:a8:18:4d:55:12:45:7a:4b:c7:3f:21:16:
24:5f:d5:f0:53:c2:c7:7c:85:21:43:bf:85:b9:de:ce:58:f1:
23:82:ac:66:f8:e7:67:e5:c2:ed:e8:5d:6d:80:ab:7f:49:49:
a1:51:26:88:33:ba:e4:be:ad:81:c2:1c:a8:b0:29:77:a5:3b:
4c:7d:c0:ca:f7:d9:3d:68:ef:0d:56:cd:c7:6a:17:ef:9f:5e:
9f:27:f6:6c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAQwN7zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NmRkMjVkOWYxNWMyMjdjYTM1ZjhhMmUyYjBkMWE4OWE5MmQ4ZDYyMB4XDTIyMDEx
MzEyNDY1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTQxNGE3ZDNiNDc1
YzEwYjU1YTNlZTM5M2QxNTAzNzFkNDMxZDVkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALvvwELnqSy1XsxFTyrynlmpn/b9lyhZjeNrFZ6C5IiE9qIL
Q6nkG3exyIkM91Ja/ggHolrhIb1i/z6NHUvafBmIN+F+gOG+MhDzBBNfNr9QXUa1
M/q2axR8n6vUDQLDzKiOjcY2nllZEff7E/XWvzZHnBndk2TvVLnbYfg88H+DSOEz
YzU7JUxgPqoCcA80N2uavyrNhu0+O3PfVKxTbMyemRHgqzmTi7lGsUo4BgMT5v27
Ae3Hu0O4JZvSix6aBwbNLZ9e3s2P/2M33ffb+nHmJA/pRFs37TOmHKzkW0pxCTTm
mb84PaSQ04YLIq/eejA+RhzThRpsH3VcS6nbZ98CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSUFKfTtHXBC1Wj7jk9FQNx1DHV1DAfBgNVHSMEGDAWgBRG3SXZ8VwifKNf
ii4rDRqJqS2NYjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1J0MGwyZkZjSW55alg0b3VLdzBhaWFrdGpXSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvMzdkMDFmLTRhOWQtNDU2Yy1hY2E5LWQ4NTI0MzMzNjRiMy8x
L2xCU24wN1Ixd1F0Vm8tNDVQUlVEY2RReDFkUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
MzdkMDFmLTRhOWQtNDU2Yy1hY2E5LWQ4NTI0MzMzNjRiMy8xL1J0MGwyZkZjSW55
alg0b3VLdzBhaWFrdGpXSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF58SDANBgkqhkiG9w0BAQsFAAOC
AQEASspdWCIqjXxKoNRJMxJGxgXzN6ZyvsKktkjwRs2LKPG3ppbrT6igVM5FDcwR
Zi9VTDmAQN6VFGQuPmUndEb8lDP+qmuHXrSfICBn4ACpP1QBiOVunJ97EckWrj9O
Z+3oaYlxaUtjFwqPMHHMAHpW0Oq2wHFOt8lxx5EEdE+pxqOJFE+8PXlIlhP4koFk
Ciz5GcQUZ5x+dwx1i208kwbqrExdyYgpuXUGqBhNVRJFekvHPyEWJF/V8FPCx3yF
IUO/hbnezljxI4KsZvjnZ+XC7ehdbYCrf0lJoVEmiDO65L6tgcIcqLApd6U7TH3A
yvfZPWjvDVbNx2oX759enyf2bA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:23:28 2025 by rpki-client