Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/LwYN3CEBko7fOmrp19-25NyUqK0.roa
File: LwYN3CEBko7fOmrp19-25NyUqK0.roa (raw, json)
Hash identifier: a5yN930yMTmhmYeqZXL8CVCElmgPsUL0VS0TkY7PA/M=
Subject key identifier: 2F:06:0D:DC:21:01:92:8E:DF:3A:6A:E9:D7:DF:B6:E4:DC:94:A8:AD
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258EFD5BC66DF93938CB98936321433A
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/LwYN3CEBko7fOmrp19-25NyUqK0.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49387
IP address blocks: 85.187.200.0/24 maxlen: 24
85.187.201.0/24 maxlen: 24
85.187.202.0/24 maxlen: 24
85.187.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fd:5b:c6:6d:f9:39:38:cb:98:93:63:21:43:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f060ddc2101928edf3a6ae9d7dfb6e4dc94a8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:78:fc:d7:cb:a2:da:01:c8:c0:d9:13:8e:
0c:11:24:39:44:e8:fc:ef:f7:3b:61:85:ab:ad:61:
d6:64:83:e3:16:92:08:9e:18:79:78:2e:df:1f:c0:
15:2f:03:e9:13:fa:8a:5a:eb:04:5d:fe:9f:4d:c6:
7f:af:78:6f:9a:a3:05:4f:8c:57:25:27:b2:ed:e6:
2e:7f:a7:12:5a:8e:6d:b3:24:03:ab:23:71:cc:6e:
c6:f1:50:2a:aa:0b:2f:2e:94:e1:cc:62:82:9b:32:
69:89:59:7b:7a:e6:44:5c:ce:00:fd:5f:46:16:5d:
12:9f:62:1c:c8:9a:2e:45:e5:54:df:1e:79:ae:99:
d9:ef:62:4a:e2:71:39:8b:cf:b2:b5:5f:3c:3a:58:
8d:00:c8:92:3b:de:f9:6a:1b:5a:78:21:52:7e:e1:
4d:7d:ee:9f:76:67:8c:4d:d5:40:b4:05:65:56:6f:
10:78:2e:f0:15:8b:4c:0d:3d:39:8a:83:98:25:cd:
53:fc:80:12:c8:b8:36:fa:47:ba:8e:26:fb:30:a0:
85:81:e2:cb:88:da:9a:6b:8f:87:b1:92:5f:4d:86:
3d:e2:0c:d6:6e:8c:2f:60:d8:10:ea:52:e3:3d:59:
d2:83:d3:e6:a7:c2:3a:4c:c8:69:a5:e5:4d:29:80:
7f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:06:0D:DC:21:01:92:8E:DF:3A:6A:E9:D7:DF:B6:E4:DC:94:A8:AD
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/LwYN3CEBko7fOmrp19-25NyUqK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.200.0/22
Signature Algorithm: sha256WithRSAEncryption
18:de:b8:56:5d:9f:bc:ff:c4:c3:e2:58:a8:e7:8b:f4:f1:78:
29:fa:33:3e:e8:f6:69:b9:64:40:0a:66:b2:43:cd:67:fe:8f:
31:b3:45:ac:d7:32:af:ac:69:e8:ac:13:eb:eb:93:6d:71:bb:
11:71:33:8b:63:1f:c9:37:6a:6f:4a:a8:56:07:b5:1d:81:0c:
47:f3:63:12:d5:bc:8a:45:71:15:ce:3e:06:01:e3:47:43:a3:
3b:8f:ab:0f:be:48:48:89:db:fa:dd:74:55:17:c8:bd:6c:62:
70:b3:a3:22:85:e3:27:f7:bd:bc:3f:bc:8a:f5:4c:0a:cd:29:
31:1f:90:12:d0:55:83:3d:02:8a:bc:e8:68:71:c3:86:c7:4b:
76:92:2c:40:de:ca:e6:31:83:06:a7:f0:80:14:33:7e:3c:26:
92:6b:9a:07:a1:4f:70:48:39:48:93:27:e0:e4:79:fe:95:cd:
41:db:97:19:93:3e:5c:51:be:8a:97:45:fd:bf:23:99:e6:7a:
32:b1:f9:cb:3e:08:67:51:61:53:c8:fe:74:a8:c1:0d:3d:b1:
9d:25:0c:ab:af:36:19:67:5e:8a:5c:7b:73:fd:ea:77:d0:aa:
72:10:16:53:cf:10:3d:34:b1:3e:38:5b:cc:fa:26:87:b4:7f:
63:d3:dc:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljv1bxm35OTjLmJNjIUM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjUwMTAyMDU0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjA2MGRkYzIxMDE5MjhlZGYzYTZhZTlkN2RmYjZlNGRjOTRhOGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbt4/NfLotoByMDZE44MESQ5ROj8
7/c7YYWrrWHWZIPjFpIInhh5eC7fH8AVLwPpE/qKWusEXf6fTcZ/r3hvmqMFT4xX
JSey7eYuf6cSWo5tsyQDqyNxzG7G8VAqqgsvLpThzGKCmzJpiVl7euZEXM4A/V9G
Fl0Sn2IcyJouReVU3x55rpnZ72JK4nE5i8+ytV88OliNAMiSO975ahtaeCFSfuFN
fe6fdmeMTdVAtAVlVm8QeC7wFYtMDT05ioOYJc1T/IASyLg2+ke6jib7MKCFgeLL
iNqaa4+HsZJfTYY94gzWbowvYNgQ6lLjPVnSg9Pmp8I6TMhppeVNKYB/LQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC8GDdwhAZKO3zpq6dfftuTclKitMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvTHdZTjNDRUJrbzdmT21ycDE5LTI1TnlVcUswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVbvIMA0G
CSqGSIb3DQEBCwUAA4IBAQAY3rhWXZ+8/8TD4lio54v08Xgp+jM+6PZpuWRACmay
Q81n/o8xs0Ws1zKvrGnorBPr65NtcbsRcTOLYx/JN2pvSqhWB7UdgQxH82MS1byK
RXEVzj4GAeNHQ6M7j6sPvkhIidv63XRVF8i9bGJws6MiheMn9728P7yK9UwKzSkx
H5AS0FWDPQKKvOhoccOGx0t2kixA3srmMYMGp/CAFDN+PCaSa5oHoU9wSDlIkyfg
5Hn+lc1B25cZkz5cUb6Kl0X9vyOZ5noysfnLPghnUWFTyP50qMENPbGdJQyrrzYZ
Z16KXHtz/ep30KpyEBZTzxA9NLE+OFvM+iaHtH9j09zr
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:26:54 2025 by rpki-client