Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/LE1nNW800iACEFi3eog_TjDfZew.roa
File: LE1nNW800iACEFi3eog_TjDfZew.roa (raw, json)
Hash identifier: kEu5JhZgpT0x/z4hTDlvLGC4JbN6UB8sSgYo/d9WvXg=
Subject key identifier: 2C:4D:67:35:6F:34:D2:20:02:10:58:B7:7A:88:3F:4E:30:DF:65:EC
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185053F6FE44A523948BE87F672863A8B59
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/LE1nNW800iACEFi3eog_TjDfZew.roa
Signing time: Mon 12 Dec 2022 07:32:01 +0000
ROA not before: Mon 12 Dec 2022 07:32:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20663
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:3f:6f:e4:4a:52:39:48:be:87:f6:72:86:3a:8b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 07:32:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c4d67356f34d220021058b77a883f4e30df65ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ea:34:87:d7:0f:de:8f:a5:c5:21:13:36:55:
41:f9:89:1c:f4:28:e6:15:19:77:31:4c:fe:0e:36:
67:6f:46:58:f2:7c:bf:af:77:b6:8d:91:e6:72:06:
e8:9c:b9:0a:2f:00:b5:3c:b7:72:46:e2:cc:4b:5d:
8a:9d:33:e1:3c:05:01:e6:4e:06:0d:37:b3:86:25:
93:ad:db:c6:c2:53:f2:5f:5f:94:dd:d6:24:dc:bb:
1e:fe:48:5b:35:3c:40:28:02:43:16:85:d8:f7:e6:
06:e0:36:36:b7:1d:9b:82:39:0f:66:8a:aa:18:60:
4d:ca:4e:89:ed:28:8b:49:61:d4:ec:63:80:84:4d:
11:a9:4f:c8:73:25:9b:12:84:13:4d:44:43:cd:06:
f3:29:c3:09:38:b0:75:62:ad:ec:65:c0:d6:be:a6:
58:bd:19:ff:39:ad:cd:e0:6c:95:54:2e:46:6c:50:
4e:6f:ed:8f:51:49:04:73:9a:94:3a:1e:60:55:ed:
ed:cb:79:e2:aa:6f:1b:17:a5:86:68:46:e9:19:2c:
60:46:e4:8c:cd:10:a8:9a:1c:f7:e1:a7:8c:fd:ca:
09:15:0a:59:a5:b1:f3:cc:f3:5f:0f:9f:b8:4e:4e:
7d:3b:fc:62:6e:00:1f:22:3d:a5:9b:04:45:43:b0:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4D:67:35:6F:34:D2:20:02:10:58:B7:7A:88:3F:4E:30:DF:65:EC
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/LE1nNW800iACEFi3eog_TjDfZew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
Signature Algorithm: sha256WithRSAEncryption
67:31:ed:dd:80:7e:98:a7:77:38:01:5d:f9:6d:0b:03:84:a9:
29:f0:ba:8f:21:bc:a2:ae:7f:2a:c6:35:8c:cb:5e:92:2d:5b:
1b:40:56:ae:a2:85:11:cc:3a:05:ae:98:39:bd:91:c0:74:b1:
43:28:0c:bb:dc:12:46:6d:3e:11:5a:83:a2:97:eb:99:40:3d:
02:03:81:87:00:f8:2b:c9:da:96:fb:b8:44:d6:cd:34:c0:0d:
e6:2f:d9:c7:41:ef:ba:b8:41:1f:4f:69:dd:39:1b:6b:11:58:
02:4f:cf:66:69:ce:00:77:f1:bf:46:ac:5a:31:93:f2:c0:f4:
e4:6b:23:1f:53:01:c8:24:18:eb:dc:59:76:03:67:58:82:c2:
04:0d:f4:54:16:10:f6:db:b0:3c:b1:f8:c3:92:7e:96:1a:ce:
cf:08:b2:31:51:9b:dd:dc:68:a8:f1:f7:14:53:05:22:d0:37:
20:2f:39:41:7e:06:71:bd:45:1d:3d:e0:cc:de:fd:3d:82:75:
9d:c8:81:ab:fd:7f:b0:f7:ff:21:9d:fd:78:83:93:06:2a:52:
93:7c:12:60:50:4d:57:04:20:e3:90:e5:0a:f8:43:f9:f9:44:
64:f3:6b:33:83:f1:5b:f1:f2:1e:7c:68:1a:99:91:e6:5a:a5:
15:34:ca:03
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAYUFP2/kSlI5SL6H9nKGOotZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjEyMDczMjAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzRkNjczNTZmMzRkMjIwMDIxMDU4Yjc3YTg4M2Y0ZTMwZGY2NWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleo0h9cP3o+lxSETNlVB+Ykc9Cjm
FRl3MUz+DjZnb0ZY8ny/r3e2jZHmcgbonLkKLwC1PLdyRuLMS12KnTPhPAUB5k4G
DTezhiWTrdvGwlPyX1+U3dYk3Lse/khbNTxAKAJDFoXY9+YG4DY2tx2bgjkPZoqq
GGBNyk6J7SiLSWHU7GOAhE0RqU/IcyWbEoQTTURDzQbzKcMJOLB1Yq3sZcDWvqZY
vRn/Oa3N4GyVVC5GbFBOb+2PUUkEc5qUOh5gVe3ty3niqm8bF6WGaEbpGSxgRuSM
zRComhz34aeM/coJFQpZpbHzzPNfD5+4Tk59O/xibgAfIj2lmwRFQ7ABDwIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFCxNZzVvNNIgAhBYt3qIP04w32XsMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvTEUxbk5XODAwaUFDRUZpM2VvZ19UakRmWmV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBTBAIAATBNAwMAvKIDBALB
yeQDBAXDBYADBAXDEGADBAHDTnQDBADDlW8DBAXD5kADBAXUDqADBAXULEADBAXU
RWADBAXUd6ADBAXVmqADBAXVqCAwDQYJKoZIhvcNAQELBQADggEBAGcx7d2Afpin
dzgBXfltCwOEqSnwuo8hvKKufyrGNYzLXpItWxtAVq6ihRHMOgWumDm9kcB0sUMo
DLvcEkZtPhFag6KX65lAPQIDgYcA+CvJ2pb7uETWzTTADeYv2cdB77q4QR9Pad05
G2sRWAJPz2ZpzgB38b9GrFoxk/LA9ORrIx9TAcgkGOvcWXYDZ1iCwgQN9FQWEPbb
sDyx+MOSfpYazs8IsjFRm93caKjx9xRTBSLQNyAvOUF+BnG9RR094Mze/T2CdZ3I
gav9f7D3/yGd/XiDkwYqUpN8EmBQTVcEIOOQ5Qr4Q/n5RGTzazOD8Vvx8h58aBqZ
keZapRU0ygM=
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:23:38 2025 by rpki-client