Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/lPFksRdLJVDV0BeRSYCopl0nK1A.roa
File: lPFksRdLJVDV0BeRSYCopl0nK1A.roa (raw, json)
Hash identifier: Z/l2sT/TM2PqTeCwRcYw3ZHE/PJvSKLQBMiM2PLHoBk=
Subject key identifier: 94:F1:64:B1:17:4B:25:50:D5:D0:17:91:49:80:A8:A6:5D:27:2B:50
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 01942067D9EC6E702C29B1E980DED6DF6E02
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/lPFksRdLJVDV0BeRSYCopl0nK1A.roa
Signing time: Wed 01 Jan 2025 05:47:44 +0000
ROA not before: Wed 01 Jan 2025 05:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60122
IP address blocks: 185.157.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d9:ec:6e:70:2c:29:b1:e9:80:de:d6:df:6e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Jan 1 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94f164b1174b2550d5d017914980a8a65d272b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:13:13:37:ad:94:90:31:43:c5:bd:11:95:
55:c8:fa:2b:0b:02:37:f4:4b:c8:64:10:6d:0f:72:
b4:0b:ec:da:b5:f6:71:dc:4b:9c:5a:d4:c2:15:12:
19:32:10:98:f2:c7:6d:b2:04:70:34:ff:fd:56:a4:
b5:15:69:f3:b3:65:13:51:15:66:f5:1f:6b:11:db:
74:ff:9a:a5:8b:13:7c:47:1a:1f:a3:05:8c:6f:35:
a7:a4:26:b4:6e:34:ed:70:96:ca:45:dc:a8:07:2f:
97:a3:fb:3d:36:06:b4:b9:99:15:28:aa:11:90:b5:
36:da:66:35:1c:ab:b8:1e:8a:dd:2f:b0:b2:9f:a6:
82:b4:c6:0f:44:3a:e6:f7:43:0d:d5:ef:4f:ee:80:
a3:94:01:51:a9:6a:78:2e:63:e5:45:a0:d4:b3:5e:
d7:85:90:fd:60:2f:0b:a8:1b:96:4f:50:7e:47:b4:
58:9c:96:d3:bb:81:99:9e:d2:83:27:f1:35:c3:17:
fb:b3:7b:91:47:c1:93:ad:ea:7f:44:c3:b6:ad:46:
74:c4:18:f6:0f:4b:32:7a:2a:af:3a:f2:e6:ed:78:
53:9a:3b:b4:5b:ae:86:fd:27:9f:b3:27:99:3a:82:
4f:ea:0b:c5:f7:7a:cb:43:ae:ae:37:7e:e1:00:94:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F1:64:B1:17:4B:25:50:D5:D0:17:91:49:80:A8:A6:5D:27:2B:50
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/lPFksRdLJVDV0BeRSYCopl0nK1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.98.0/24
Signature Algorithm: sha256WithRSAEncryption
37:cb:f7:a3:23:7f:a7:3c:e1:63:8e:d1:34:f7:e4:29:3a:83:
fb:50:36:05:31:cb:30:2f:d1:18:5e:64:74:92:f1:31:0b:db:
f3:7b:8d:2c:b3:d9:ec:f0:d4:36:09:2d:d0:9e:4b:07:46:aa:
39:9b:15:15:51:f7:72:44:a7:52:20:80:0a:70:09:20:9d:1b:
a5:ea:b6:f9:8d:90:37:23:3f:a6:f3:7e:f2:16:f6:a0:df:16:
2a:9f:31:24:e5:b3:27:05:43:47:9b:76:c0:94:6e:64:bd:1d:
89:fb:25:95:c2:59:ed:b5:d4:d9:36:66:90:c4:74:b7:25:d6:
42:2c:05:f2:b3:15:d4:04:b8:84:70:8e:cc:97:e2:a9:c4:21:
29:3d:ad:64:d7:81:fa:be:6c:38:a4:2e:39:17:35:a8:cf:e8:
9f:be:1f:82:15:a9:8c:2b:8f:0f:60:7b:2c:07:c3:a2:06:d2:
d1:d7:6d:a9:d9:74:76:f8:5e:a6:b9:ee:2c:2e:d9:94:cf:ec:
da:a9:ed:e2:56:aa:1d:c9:ee:be:9c:8c:1b:a7:af:cf:a0:05:
21:43:4e:9e:46:30:6d:30:0c:0a:aa:22:42:8a:39:ee:e9:3f:
3e:9a:ee:f5:c2:06:10:6b:90:3e:bb:a7:e4:cd:14:04:3b:0c:
73:d7:f6:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ9nsbnAsKbHpgN7W324CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNTI2YTczY2U4ZjlmNjJjMTRhMTFhMmVhOTEzZWMyNzNk
NThjNDYwHhcNMjUwMTAxMDU0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGYxNjRiMTE3NGIyNTUwZDVkMDE3OTE0OTgwYThhNjVkMjcyYjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0cTEzetlJAxQ8W9EZVVyPorCwI3
9EvIZBBtD3K0C+zatfZx3EucWtTCFRIZMhCY8sdtsgRwNP/9VqS1FWnzs2UTURVm
9R9rEdt0/5qlixN8RxofowWMbzWnpCa0bjTtcJbKRdyoBy+Xo/s9Nga0uZkVKKoR
kLU22mY1HKu4HordL7Cyn6aCtMYPRDrm90MN1e9P7oCjlAFRqWp4LmPlRaDUs17X
hZD9YC8LqBuWT1B+R7RYnJbTu4GZntKDJ/E1wxf7s3uRR8GTrep/RMO2rUZ0xBj2
D0syeiqvOvLm7XhTmju0W66G/SefsyeZOoJP6gvF93rLQ66uN37hAJSlSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJTxZLEXSyVQ1dAXkUmAqKZdJytQMB8GA1UdIwQY
MBaAFJpSanPOj59iwUoRouqRPsJz1YxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMt
N2QxNmI5MGRiZTcyLzEvbFBGa3NSZExKVkRWMEJlUlNZQ29wbDBuSzFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMtN2QxNmI5MGRiZTcy
LzEvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ1iMA0G
CSqGSIb3DQEBCwUAA4IBAQA3y/ejI3+nPOFjjtE09+QpOoP7UDYFMcswL9EYXmR0
kvExC9vze40ss9ns8NQ2CS3QnksHRqo5mxUVUfdyRKdSIIAKcAkgnRul6rb5jZA3
Iz+m837yFvag3xYqnzEk5bMnBUNHm3bAlG5kvR2J+yWVwlnttdTZNmaQxHS3JdZC
LAXysxXUBLiEcI7Ml+KpxCEpPa1k14H6vmw4pC45FzWoz+ifvh+CFamMK48PYHss
B8OiBtLR122p2XR2+F6mue4sLtmUz+zaqe3iVqodye6+nIwbp6/PoAUhQ06eRjBt
MAwKqiJCijnu6T8+mu71wgYQa5A+u6fkzRQEOwxz1/ZM
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:54 2025 by rpki-client