Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/lm7IZdKzQN9HWR_PsswYeCOtF5M.roa
File: lm7IZdKzQN9HWR_PsswYeCOtF5M.roa (raw, json)
Hash identifier: 5sq7YcfdUaCv/EmU/8A/pT+rCvWYKdY4Un1awV9JFRM=
Subject key identifier: 96:6E:C8:65:D2:B3:40:DF:47:59:1F:CF:B2:CC:18:78:23:AD:17:93
Certificate issuer: /CN=3b11583aca1e8059fd31e267e8302d0c2fe008d6
Certificate serial: 010B4FDA
Authority key identifier: 3B:11:58:3A:CA:1E:80:59:FD:31:E2:67:E8:30:2D:0C:2F:E0:08:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxFYOsoegFn9MeJn6DAtDC_gCNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/lm7IZdKzQN9HWR_PsswYeCOtF5M.roa
Signing time: Mon 07 Feb 2022 07:49:18 +0000
ROA not before: Mon 07 Feb 2022 07:49:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 185.10.112.0/22 maxlen: 24
178.20.144.0/21 maxlen: 24
88.85.224.0/19 maxlen: 24
46.235.88.0/21 maxlen: 24
212.12.160.0/19 maxlen: 24
212.12.160.0/24 maxlen: 24
176.241.184.0/21 maxlen: 24
212.12.178.0/24 maxlen: 24
212.12.182.0/24 maxlen: 24
88.85.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17518554 (0x10b4fda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b11583aca1e8059fd31e267e8302d0c2fe008d6
Validity
Not Before: Feb 7 07:49:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=966ec865d2b340df47591fcfb2cc187823ad1793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:ad:a8:19:81:da:d4:98:36:1b:27:47:1c:
a7:5b:c5:dd:7a:2f:a8:ff:16:b4:db:9d:3b:20:9f:
50:ab:7b:3e:74:85:3c:0f:42:3d:db:2c:6d:ba:59:
ff:25:fd:4a:80:f2:e6:33:c8:48:ae:3d:81:b9:92:
f5:92:f5:1c:21:aa:0f:e2:b6:94:51:53:0a:58:d0:
40:c5:2d:81:db:4f:69:cf:81:33:2c:cf:be:eb:39:
02:3a:c8:7a:cf:5f:69:3b:45:ec:5a:df:64:2a:b5:
86:cf:0e:8e:da:b5:c5:df:eb:a5:d9:3b:5e:fe:6a:
ab:0f:25:f2:36:10:ae:99:a6:d6:73:80:3e:30:b3:
e0:ab:a9:86:b9:2f:04:a2:6c:d3:7b:32:8d:6f:c1:
29:eb:c5:55:73:92:65:2f:c0:55:6d:7d:31:31:2e:
ea:19:b9:bd:52:d2:5e:92:8e:6a:ef:0a:d5:d5:1b:
e3:f5:c0:e8:b7:ac:2a:87:25:aa:5d:48:53:86:23:
74:a8:b3:7f:90:1c:95:02:c4:ed:1c:03:a4:5c:cc:
a7:2b:f3:15:78:7a:f6:a0:28:36:b7:0a:40:0e:fa:
7a:a9:db:67:c9:a4:cc:5b:3e:29:c9:2e:ec:7e:99:
a9:c6:50:dd:ac:87:ed:61:cb:44:ea:64:01:c2:5d:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6E:C8:65:D2:B3:40:DF:47:59:1F:CF:B2:CC:18:78:23:AD:17:93
X509v3 Authority Key Identifier:
keyid:3B:11:58:3A:CA:1E:80:59:FD:31:E2:67:E8:30:2D:0C:2F:E0:08:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxFYOsoegFn9MeJn6DAtDC_gCNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/lm7IZdKzQN9HWR_PsswYeCOtF5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/OxFYOsoegFn9MeJn6DAtDC_gCNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.88.0/21
88.85.224.0/19
176.241.184.0/21
178.20.144.0/21
185.10.112.0/22
212.12.160.0/19
Signature Algorithm: sha256WithRSAEncryption
49:70:89:67:2b:42:ea:c3:12:4f:22:b6:d8:29:09:59:58:7a:
1a:14:7c:56:87:61:83:c1:b5:45:03:43:1b:84:52:d1:20:df:
14:af:ee:b4:2a:18:33:3d:4e:b9:7f:ae:f7:d9:3d:9c:6c:78:
7f:7e:b7:e3:12:05:32:b7:8f:37:cc:b1:b2:51:e1:37:d4:0e:
5a:1a:b1:0f:92:f8:88:5e:68:78:01:1d:30:51:80:09:77:93:
bc:b1:a2:8c:3a:ab:f4:dc:08:bd:f0:75:ac:6a:f7:78:aa:3b:
ad:25:cd:52:92:e0:0b:6e:31:df:0e:5c:ac:24:6f:0c:5d:33:
f5:94:c1:24:a0:10:14:5b:f9:59:0f:3a:b9:ff:48:43:a2:2d:
b3:4c:54:67:fd:2b:c8:94:1d:a6:09:e1:bd:22:9d:e5:e9:89:
d6:0b:41:b1:1a:59:38:58:08:08:1a:49:bb:41:59:eb:87:d7:
e0:1d:bf:49:5e:05:58:b3:eb:fc:21:de:d2:34:94:7f:3d:62:
5c:af:0e:17:07:93:f6:22:8a:ba:76:80:0f:d4:3f:24:08:9e:
4a:71:34:df:60:11:53:ca:ea:40:e2:a3:69:22:1c:54:82:25:
73:88:f0:3f:1c:f5:0a:72:dd:b0:c1:88:e9:de:83:48:7e:f6:
6b:57:93:b9
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEAQtP2jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjExNTgzYWNhMWU4MDU5ZmQzMWUyNjdlODMwMmQwYzJmZTAwOGQ2MB4XDTIyMDIw
NzA3NDkxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTY2ZWM4NjVkMmIz
NDBkZjQ3NTkxZmNmYjJjYzE4NzgyM2FkMTc5MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMH2ragZgdrUmDYbJ0ccp1vF3XovqP8WtNudOyCfUKt7PnSF
PA9CPdssbbpZ/yX9SoDy5jPISK49gbmS9ZL1HCGqD+K2lFFTCljQQMUtgdtPac+B
MyzPvus5AjrIes9faTtF7FrfZCq1hs8Ojtq1xd/rpdk7Xv5qqw8l8jYQrpmm1nOA
PjCz4KuphrkvBKJs03syjW/BKevFVXOSZS/AVW19MTEu6hm5vVLSXpKOau8K1dUb
4/XA6LesKoclql1IU4YjdKizf5AclQLE7RwDpFzMpyvzFXh69qAoNrcKQA76eqnb
Z8mkzFs+Kcku7H6ZqcZQ3ayH7WHLROpkAcJdKvsCAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBSWbshl0rNA30dZH8+yzBh4I60XkzAfBgNVHSMEGDAWgBQ7EVg6yh6AWf0x
4mfoMC0ML+AI1jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L094RllPc29lZ0ZuOU1lSm42REF0RENfZ0NOWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2MvZjNlYmNlLTk2MDgtNDE4MC1hODkxLWRjZTBkMGFlNjcwMy8x
L2xtN0laZEt6UU45SFdSX1Bzc3dZZUNPdEY1TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Mv
ZjNlYmNlLTk2MDgtNDE4MC1hODkxLWRjZTBkMGFlNjcwMy8xL094RllPc29lZ0Zu
OU1lSm42REF0RENfZ0NOWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAy7rWAMEBVhV4AMEA7DxuAMEA7IU
kAMEArkKcAMEBdQMoDANBgkqhkiG9w0BAQsFAAOCAQEASXCJZytC6sMSTyK22CkJ
WVh6GhR8Vodhg8G1RQNDG4RS0SDfFK/utCoYMz1OuX+u99k9nGx4f3634xIFMreP
N8yxslHhN9QOWhqxD5L4iF5oeAEdMFGACXeTvLGijDqr9NwIvfB1rGr3eKo7rSXN
UpLgC24x3w5crCRvDF0z9ZTBJKAQFFv5WQ86uf9IQ6Its0xUZ/0ryJQdpgnhvSKd
5emJ1gtBsRpZOFgICBpJu0FZ64fX4B2/SV4FWLPr/CHe0jSUfz1iXK8OFweT9iKK
unaAD9Q/JAieSnE032ARU8rqQOKjaSIcVIIlc4jwPxz1CnLdsMGI6d6DSH72a1eT
uQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:06 2025 by rpki-client