Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/LPzeUoKKbtBniuOIqj8nJU_M67E.roa
File: LPzeUoKKbtBniuOIqj8nJU_M67E.roa (raw, json)
Hash identifier: BXGvnjHmSyIsPAZUo8glr5Sei8gWA74Tz3aN6uo9z9U=
Subject key identifier: 2C:FC:DE:52:82:8A:6E:D0:67:8A:E3:88:AA:3F:27:25:4F:CC:EB:B1
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01946EBFBB3649EA32E844E4AACCFAF766B6
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/LPzeUoKKbtBniuOIqj8nJU_M67E.roa
Signing time: Thu 16 Jan 2025 10:54:06 +0000
ROA not before: Thu 16 Jan 2025 10:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 92.53.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:bf:bb:36:49:ea:32:e8:44:e4:aa:cc:fa:f7:66:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 16 10:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cfcde52828a6ed0678ae388aa3f27254fccebb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:59:0f:fa:f4:08:0b:b7:1a:ca:39:12:12:a0:
14:68:3a:63:48:33:aa:18:e6:3b:43:6b:a6:6e:40:
19:43:df:6d:2b:4f:b7:a9:38:15:0b:f5:0e:ca:f0:
ac:c8:33:b8:5f:d6:5c:b0:a7:6d:c6:8c:9b:83:ab:
bd:73:c7:b7:82:8e:87:7e:72:fb:39:a0:f9:ad:58:
6c:9e:1a:c2:ae:62:a5:62:51:0e:93:5e:4d:6b:69:
7c:f8:5a:64:e5:ea:a6:4f:d6:62:3a:65:1b:0f:f7:
01:ce:fd:60:64:97:ad:e1:aa:41:c3:31:06:f0:29:
a9:30:50:ee:ad:fe:44:94:c0:bc:5d:5e:8c:15:bd:
e5:da:8e:d6:93:fe:59:a2:a7:27:2f:f7:7d:d3:a6:
e3:92:e4:04:59:e9:80:67:ed:3a:e1:c1:74:9a:c5:
fe:19:b2:a6:79:d4:6b:ce:03:24:f0:4b:68:21:1b:
33:56:4b:1a:b7:72:83:4f:b3:55:a7:dd:d5:84:fb:
2d:01:06:87:02:30:06:dd:e3:39:3a:d8:ba:38:61:
a4:d9:7d:97:ec:50:8e:1d:d2:b3:33:78:70:fc:7d:
c0:8d:61:d2:da:09:67:35:ea:0f:2e:c8:db:c4:d0:
70:5e:9f:b9:22:26:07:d0:23:08:3e:cd:59:b4:42:
18:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FC:DE:52:82:8A:6E:D0:67:8A:E3:88:AA:3F:27:25:4F:CC:EB:B1
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/LPzeUoKKbtBniuOIqj8nJU_M67E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.188.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:11:b3:df:10:0d:e2:f8:b2:29:6d:e4:25:a3:70:4c:8c:4e:
82:85:be:2a:6d:66:68:04:11:ce:6e:64:e9:6d:5c:c4:d8:34:
f9:a7:de:de:f0:00:f1:39:f7:bb:66:f3:1b:34:6f:0c:9c:cf:
87:7f:8c:f2:c5:63:89:5b:94:f1:53:36:e5:be:26:d2:61:9f:
6b:64:63:5a:e4:d4:12:7d:8a:1d:d8:6d:04:b2:f2:79:db:41:
65:bd:50:74:c5:85:0f:41:cc:ec:3d:2a:14:98:ea:0a:3c:f5:
03:21:f5:6f:9e:62:a9:af:15:7f:e4:c5:21:65:2a:ac:16:3e:
cd:53:71:83:cc:08:22:80:14:6d:cc:87:15:cb:ae:fd:b4:ad:
8e:3c:0d:dd:5e:45:c9:ef:ae:3c:fe:7c:b8:1d:9f:da:20:14:
26:93:e4:e4:a3:e2:ac:1d:ce:80:14:84:c9:ff:4e:47:2d:0c:
a9:83:d2:9d:d2:7b:4b:d8:3a:12:e4:13:fc:db:9b:fb:31:38:
f8:f3:9b:d7:53:46:72:47:6a:17:42:43:9a:f4:80:3f:ec:63:
8b:3e:02:21:02:58:00:32:55:49:7b:e7:da:f7:29:3a:1a:ac:
79:9b:20:dc:63:d2:7c:0d:f7:d9:3b:b1:6e:8b:df:3d:90:45:
aa:5a:0a:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRuv7s2Seoy6ETkqsz692a2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjUwMTE2MTA1NDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2ZjZGU1MjgyOGE2ZWQwNjc4YWUzODhhYTNmMjcyNTRmY2NlYmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFkP+vQIC7cayjkSEqAUaDpjSDOq
GOY7Q2umbkAZQ99tK0+3qTgVC/UOyvCsyDO4X9ZcsKdtxoybg6u9c8e3go6HfnL7
OaD5rVhsnhrCrmKlYlEOk15Na2l8+Fpk5eqmT9ZiOmUbD/cBzv1gZJet4apBwzEG
8CmpMFDurf5ElMC8XV6MFb3l2o7Wk/5ZoqcnL/d906bjkuQEWemAZ+064cF0msX+
GbKmedRrzgMk8EtoIRszVksat3KDT7NVp93VhPstAQaHAjAG3eM5Oti6OGGk2X2X
7FCOHdKzM3hw/H3AjWHS2glnNeoPLsjbxNBwXp+5IiYH0CMIPs1ZtEIY7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCz83lKCim7QZ4rjiKo/JyVPzOuxMB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEvTFB6ZVVvS0tidEJuaXVPSXFqOG5KVV9NNjdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXDW8MA0G
CSqGSIb3DQEBCwUAA4IBAQAvEbPfEA3i+LIpbeQlo3BMjE6Chb4qbWZoBBHObmTp
bVzE2DT5p97e8ADxOfe7ZvMbNG8MnM+Hf4zyxWOJW5TxUzblvibSYZ9rZGNa5NQS
fYod2G0EsvJ520FlvVB0xYUPQczsPSoUmOoKPPUDIfVvnmKprxV/5MUhZSqsFj7N
U3GDzAgigBRtzIcVy679tK2OPA3dXkXJ7648/ny4HZ/aIBQmk+Tko+KsHc6AFITJ
/05HLQypg9Kd0ntL2DoS5BP825v7MTj485vXU0ZyR2oXQkOa9IA/7GOLPgIhAlgA
MlVJe+fa9yk6Gqx5myDcY9J8DffZO7Fui989kEWqWgp1
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:28:23 2025 by rpki-client