Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/lv2J4qEjHND-GHWe9hPK4i1YEg8.roa
File: lv2J4qEjHND-GHWe9hPK4i1YEg8.roa (raw, json)
Hash identifier: u7HCTU1wvFGDK2oUkN0uXhuYWCTXHOuFg5CznKAR2rw=
Subject key identifier: 96:FD:89:E2:A1:23:1C:D0:FE:18:75:9E:F6:13:CA:E2:2D:58:12:0F
Certificate issuer: /CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Certificate serial: 06A3815E
Authority key identifier: CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/lv2J4qEjHND-GHWe9hPK4i1YEg8.roa
Signing time: Wed 04 May 2022 09:25:11 +0000
ROA not before: Wed 04 May 2022 09:25:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29084
IP address blocks: 94.190.252.0/24 maxlen: 24
94.190.252.0/22 maxlen: 22
94.190.253.0/24 maxlen: 24
94.190.254.0/24 maxlen: 24
94.190.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111378782 (0x6a3815e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Validity
Not Before: May 4 09:25:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96fd89e2a1231cd0fe18759ef613cae22d58120f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:59:b1:88:62:1a:f9:44:0b:58:ae:d6:18:03:
75:c3:e7:13:6d:11:68:33:b4:fa:e4:59:e2:25:a1:
86:2a:00:b1:6a:d8:14:cb:ab:b8:fb:3d:21:be:d0:
69:1b:93:81:f4:95:6f:2b:09:fa:f4:1a:3b:a2:07:
4b:db:46:2c:e2:30:72:c6:0c:b4:cb:12:74:0b:39:
45:54:02:c2:d1:41:c8:c1:dd:e2:82:b0:79:0e:0a:
4c:fc:d3:54:4d:bc:a7:40:10:bd:58:d9:cf:91:82:
cc:5a:8f:cd:0c:5a:cf:da:9f:e7:16:d2:6c:f3:a7:
9d:97:98:32:34:e0:95:6a:df:ae:55:df:e8:03:83:
6b:d1:b4:f2:81:f3:bd:c3:97:45:84:45:0a:9a:8d:
65:3b:55:14:b0:ff:93:1c:03:33:6c:ba:c6:cc:d4:
12:c8:52:3f:ba:a1:37:19:66:57:c5:d3:26:5a:47:
08:f0:4f:39:a6:4a:22:2d:a2:05:8a:a5:4e:89:e7:
6a:27:7f:61:af:c4:58:e4:79:d2:08:17:4b:00:1e:
0b:5c:cc:e9:6b:6d:a8:e1:7b:c3:a3:24:4d:04:9a:
02:4c:f5:7f:20:bb:cc:38:bd:ac:72:5c:d5:30:09:
83:6f:5e:bf:99:33:ca:21:8d:9d:b5:af:4b:eb:ad:
63:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FD:89:E2:A1:23:1C:D0:FE:18:75:9E:F6:13:CA:E2:2D:58:12:0F
X509v3 Authority Key Identifier:
keyid:CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/lv2J4qEjHND-GHWe9hPK4i1YEg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.190.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:c2:1a:e1:cb:9b:45:7d:29:d2:45:f6:7a:5d:22:f6:6d:20:
4e:ad:97:b5:bf:7a:08:10:12:ed:15:78:18:c3:95:72:0d:8d:
15:b6:96:9b:37:c8:38:ad:f6:24:1f:1d:16:08:41:7a:83:5c:
e5:8e:a3:a0:96:9f:2f:e1:6a:35:f2:da:75:3d:bc:8b:4a:5a:
de:4f:2e:e5:50:ef:ca:9b:c2:fb:f8:70:cd:4d:4d:9d:63:ff:
48:8c:27:a2:45:e0:15:c0:f5:37:ce:46:3b:1c:23:e0:ba:2e:
90:3b:48:26:64:fb:b8:c4:34:dd:1d:89:f1:2f:c0:ed:df:56:
10:06:8a:5c:66:62:7b:35:9a:20:ed:71:f7:a7:57:54:0f:66:
fd:d6:fc:ac:ae:db:11:0a:58:ac:4a:43:7f:d8:59:da:5d:80:
64:4f:0b:34:75:ff:3e:8d:14:83:92:ee:38:bc:f3:66:59:2f:
75:8d:7d:0c:db:15:7e:53:43:b8:3f:39:ea:1a:bf:a5:d1:48:
56:76:32:12:61:f5:ec:8f:a1:cf:6a:4e:9c:35:89:26:e5:66:
f8:65:79:d4:cb:a3:38:55:cb:80:c4:a3:98:70:19:e8:0e:00:
ca:91:dd:d6:74:b2:9b:46:24:62:58:29:6f:de:53:f0:e5:de:
f1:fb:7d:25
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBqOBXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZDZiOWQ1OTNhYzU0YWE2Y2JiODM4ODkyNzdiYTI0ZjU0MDY3ODg5MB4XDTIyMDUw
NDA5MjUxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTZmZDg5ZTJhMTIz
MWNkMGZlMTg3NTllZjYxM2NhZTIyZDU4MTIwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI9ZsYhiGvlEC1iu1hgDdcPnE20RaDO0+uRZ4iWhhioAsWrY
FMuruPs9Ib7QaRuTgfSVbysJ+vQaO6IHS9tGLOIwcsYMtMsSdAs5RVQCwtFByMHd
4oKweQ4KTPzTVE28p0AQvVjZz5GCzFqPzQxaz9qf5xbSbPOnnZeYMjTglWrfrlXf
6AODa9G08oHzvcOXRYRFCpqNZTtVFLD/kxwDM2y6xszUEshSP7qhNxlmV8XTJlpH
CPBPOaZKIi2iBYqlTonnaid/Ya/EWOR50ggXSwAeC1zM6WttqOF7w6MkTQSaAkz1
fyC7zDi9rHJc1TAJg29ev5kzyiGNnbWvS+utY4cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSW/YnioSMc0P4YdZ72E8riLVgSDzAfBgNVHSMEGDAWgBTNa51ZOsVKpsu4
OIkne6JPVAZ4iTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pXdWRXVHJGU3FiTHVEaUpKM3VpVDFRR2VJay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvZTY4ZTFiLTM1NmMtNDg2OC05MDlmLTQyNjA2ZjVhYTViOS8x
L2x2Mko0cUVqSE5ELUdIV2U5aFBLNGkxWUVnOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUv
ZTY4ZTFiLTM1NmMtNDg2OC05MDlmLTQyNjA2ZjVhYTViOS8xL3pXdWRXVHJGU3Fi
THVEaUpKM3VpVDFRR2VJay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAl6+/DANBgkqhkiG9w0BAQsFAAOC
AQEAmsIa4cubRX0p0kX2el0i9m0gTq2Xtb96CBAS7RV4GMOVcg2NFbaWmzfIOK32
JB8dFghBeoNc5Y6joJafL+FqNfLadT28i0pa3k8u5VDvypvC+/hwzU1NnWP/SIwn
okXgFcD1N85GOxwj4LoukDtIJmT7uMQ03R2J8S/A7d9WEAaKXGZiezWaIO1x96dX
VA9m/db8rK7bEQpYrEpDf9hZ2l2AZE8LNHX/Po0Ug5LuOLzzZlkvdY19DNsVflND
uD856hq/pdFIVnYyEmH17I+hz2pOnDWJJuVm+GV51MujOFXLgMSjmHAZ6A4AypHd
1nSym0YkYlgpb95T8OXe8ft9JQ==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:22 2025 by rpki-client