Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/LpdzxPO8o26ddWo3QqWza8jQCvE.roa
File: LpdzxPO8o26ddWo3QqWza8jQCvE.roa (raw, json)
Hash identifier: Gw4MUygWGgdiuLlpQDjS2lhKKOlwLpXT+P3LZ+Lst/4=
Subject key identifier: 2E:97:73:C4:F3:BC:A3:6E:9D:75:6A:37:42:A5:B3:6B:C8:D0:0A:F1
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182D8FEC4F1190C4C17602AA195C365C176
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/LpdzxPO8o26ddWo3QqWza8jQCvE.roa
Signing time: Fri 26 Aug 2022 07:12:31 +0000
ROA not before: Fri 26 Aug 2022 07:12:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 86.38.151.0/24 maxlen: 24
84.46.171.0/24 maxlen: 24
89.117.118.0/24 maxlen: 24
89.117.15.0/24 maxlen: 24
89.117.124.0/24 maxlen: 24
89.116.168.0/24 maxlen: 24
89.117.136.0/24 maxlen: 24
82.140.182.0/24 maxlen: 24
89.117.38.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d8:fe:c4:f1:19:0c:4c:17:60:2a:a1:95:c3:65:c1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 26 07:12:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e9773c4f3bca36e9d756a3742a5b36bc8d00af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:08:79:23:63:0e:f5:d7:8f:48:f5:29:95:
29:16:0c:72:fe:c7:d4:dd:70:52:74:69:5d:5c:76:
9b:02:17:28:49:c8:0c:36:18:e6:48:ca:eb:d0:c6:
a3:48:dc:3a:1e:1a:07:ed:00:69:35:ef:30:0e:3d:
33:b1:29:3f:e7:c1:06:ec:6f:09:b9:a9:bb:59:8d:
e0:d7:76:f1:3a:85:19:1e:9b:15:78:44:a2:70:01:
3b:a6:d4:1c:2e:1b:8c:ff:93:70:d3:48:39:92:8d:
f6:49:20:43:d0:3f:1c:01:c6:df:a6:4c:d1:ac:7e:
bd:c8:da:19:be:90:77:65:80:1c:5e:71:fa:d4:c0:
89:5c:6c:54:b8:f9:56:52:b0:81:52:c3:6c:4e:f0:
50:4f:77:42:48:a5:21:0b:34:11:86:53:ba:f1:77:
49:f7:92:c1:1a:1d:ae:0c:bd:aa:ae:a2:3f:8b:e6:
d4:83:62:31:c4:94:6e:7d:14:36:93:dd:14:5c:5e:
7b:21:e9:1d:12:d9:1c:1a:9e:39:7a:e2:25:92:a6:
b8:da:4b:04:29:97:02:dd:5e:c5:45:e0:fc:ee:32:
51:ba:c1:e8:5f:a0:2f:6a:28:56:44:c1:f2:8a:a6:
67:dd:f2:5b:d1:22:24:cb:13:07:1d:be:55:2a:2c:
c1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:97:73:C4:F3:BC:A3:6E:9D:75:6A:37:42:A5:B3:6B:C8:D0:0A:F1
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/LpdzxPO8o26ddWo3QqWza8jQCvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.182.0/24
84.46.171.0/24
86.38.7.0/24
86.38.151.0/24
89.116.96.0/24
89.116.168.0/24
89.116.193.0/24
89.117.15.0/24
89.117.38.0/24
89.117.118.0/24
89.117.124.0/24
89.117.136.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f8:87:96:89:96:55:4d:52:47:44:cc:31:1c:6f:3e:c6:34:
b3:6b:cb:5d:5b:36:99:60:2d:ed:d1:56:fe:a3:d9:2c:e4:1b:
df:6c:01:df:72:9d:63:23:ff:ac:04:56:8f:01:61:19:55:c7:
fc:91:c4:1a:3c:18:db:d6:39:d8:36:ec:97:dc:3f:1e:0a:df:
44:3b:fe:93:d3:95:f5:1c:8c:8c:68:69:8f:96:08:4c:cc:d0:
f0:3a:c4:91:e1:3d:dd:5b:18:83:8c:35:7e:9d:5a:04:64:2c:
d5:f5:08:ad:3f:4e:6b:34:23:b8:20:c1:b7:ed:97:d0:28:37:
69:89:9b:d6:9e:f2:5e:7e:f3:8c:1e:53:87:d1:82:87:9e:b5:
dc:99:65:0c:31:39:b7:f1:bf:25:69:be:8c:94:3a:34:3e:9b:
df:1c:4e:a4:8a:45:3b:c7:a4:cf:5b:af:4d:31:2f:0e:05:ad:
41:7e:43:90:09:6f:7a:15:5b:df:4d:d5:c5:a6:d6:d1:36:6e:
ba:8f:3d:ed:ea:1e:0e:07:1e:35:6a:4f:87:3a:be:c3:3f:ca:
29:16:78:39:17:58:3f:77:f2:ee:f9:f2:71:13:a3:cc:68:84:
47:79:d9:62:9a:63:94:b0:fe:00:5c:3c:d9:f0:c1:e7:64:ec:
8f:5e:8a:3f
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAYLY/sTxGQxMF2AqoZXDZcF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwODI2MDcxMjMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTk3NzNjNGYzYmNhMzZlOWQ3NTZhMzc0MmE1YjM2YmM4ZDAwYWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA090IeSNjDvXXj0j1KZUpFgxy/sfU
3XBSdGldXHabAhcoScgMNhjmSMrr0MajSNw6HhoH7QBpNe8wDj0zsSk/58EG7G8J
uam7WY3g13bxOoUZHpsVeESicAE7ptQcLhuM/5Nw00g5ko32SSBD0D8cAcbfpkzR
rH69yNoZvpB3ZYAcXnH61MCJXGxUuPlWUrCBUsNsTvBQT3dCSKUhCzQRhlO68XdJ
95LBGh2uDL2qrqI/i+bUg2IxxJRufRQ2k90UXF57IekdEtkcGp45euIlkqa42ksE
KZcC3V7FReD87jJRusHoX6AvaihWRMHyiqZn3fJb0SIkyxMHHb5VKizB1wIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFC6Xc8TzvKNunXVqN0Kls2vI0ArxMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvTHBkenhQTzhvMjZkZFdvM1FxV3phOGpRQ3ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAUoy2AwQA
VC6rAwQAViYHAwQAViaXAwQAWXRgAwQAWXSoAwQAWXTBAwQAWXUPAwQAWXUmAwQA
WXV2AwQAWXV8AwQAWXWIMA0GCSqGSIb3DQEBCwUAA4IBAQAB+IeWiZZVTVJHRMwx
HG8+xjSza8tdWzaZYC3t0Vb+o9ks5BvfbAHfcp1jI/+sBFaPAWEZVcf8kcQaPBjb
1jnYNuyX3D8eCt9EO/6T05X1HIyMaGmPlghMzNDwOsSR4T3dWxiDjDV+nVoEZCzV
9QitP05rNCO4IMG37ZfQKDdpiZvWnvJefvOMHlOH0YKHnrXcmWUMMTm38b8lab6M
lDo0PpvfHE6kikU7x6TPW69NMS8OBa1BfkOQCW96FVvfTdXFptbRNm66jz3t6h4O
Bx41ak+HOr7DP8opFng5F1g/d/Lu+fJxE6PMaIRHedlimmOUsP4AXDzZ8MHnZOyP
Xoo/
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:24 2025 by rpki-client