Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lvLKZT0Xcj7-wQR2zFOktboysI8.roa
File: lvLKZT0Xcj7-wQR2zFOktboysI8.roa (raw, json)
Hash identifier: u/kDgrQOVs7oRUcxjC5D6bHEPIdYe6a1UI6XtrKP+SY=
Subject key identifier: 96:F2:CA:65:3D:17:72:3E:FE:C1:04:76:CC:53:A4:B5:BA:32:B0:8F
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274862D5659A6A0DA2C8B08A8EE11F13
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lvLKZT0Xcj7-wQR2zFOktboysI8.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57602
IP address blocks: 193.180.238.0/24 maxlen: 24
193.180.239.0/24 maxlen: 24
194.71.212.0/24 maxlen: 24
194.71.213.0/24 maxlen: 24
194.71.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:62:d5:65:9a:6a:0d:a2:c8:b0:8a:8e:e1:1f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96f2ca653d17723efec10476cc53a4b5ba32b08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:ce:ea:59:1b:08:07:80:b8:69:53:6f:b0:
c4:0a:db:e7:bb:f9:5c:c5:11:37:26:34:7f:f1:4b:
ea:4e:75:5b:29:fd:72:26:a3:ef:98:e2:77:8f:4f:
b1:ac:a9:cd:81:da:87:d3:1a:45:78:3d:e7:45:76:
ea:87:15:81:2e:da:3e:6e:eb:4a:38:50:9a:d2:4b:
ef:1a:c4:85:66:f5:50:83:3b:b0:d5:44:c7:82:bb:
24:5f:cd:a1:2b:f3:ed:c3:c9:7e:f7:b2:b4:66:e3:
43:a5:c2:34:1c:fd:ae:d6:73:86:2e:b3:f1:72:07:
43:06:00:35:f9:89:89:0b:8c:e4:d9:a2:e6:a7:97:
7f:e6:4b:b5:83:8e:ca:2a:84:c5:2a:3e:71:39:db:
d3:57:bf:e3:86:a9:10:bf:89:19:ad:9f:57:c3:7a:
66:6b:ee:4d:99:b0:da:0e:df:03:22:84:51:9e:12:
6e:99:27:36:48:15:93:5c:1f:c4:ab:ad:c7:a8:ba:
cb:34:94:53:b4:2c:a0:25:55:59:63:bb:f6:e2:f6:
ac:d4:e1:81:cf:43:03:9a:80:88:d2:89:03:43:52:
8c:15:59:37:53:30:45:ef:c0:d0:20:00:25:df:f9:
82:c4:e3:1c:0c:77:25:cd:db:18:59:78:f4:ea:14:
60:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F2:CA:65:3D:17:72:3E:FE:C1:04:76:CC:53:A4:B5:BA:32:B0:8F
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lvLKZT0Xcj7-wQR2zFOktboysI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.238.0/23
194.71.212.0-194.71.214.255
Signature Algorithm: sha256WithRSAEncryption
4e:94:8a:29:30:c5:08:a0:3b:64:c1:ac:a1:1e:68:03:41:b4:
62:9d:fe:7c:99:41:9f:d0:9e:f5:59:8a:1d:b4:9a:9a:c4:2e:
06:2f:1b:23:b6:bc:78:1b:1b:ba:69:d3:50:7e:96:99:d2:e9:
35:39:d4:e0:64:02:fe:23:47:2a:fe:ae:48:20:f2:e3:0a:f1:
ec:18:9a:0b:28:1f:16:13:f4:0c:33:a8:51:6c:4d:48:28:06:
49:f5:92:c6:f1:45:15:3d:c2:9e:76:28:f6:4c:a6:7d:7d:69:
24:1c:d3:c1:d0:d4:e8:dd:11:a8:65:2c:dc:a7:7f:93:f8:c4:
74:2b:ac:52:84:8e:58:60:8a:eb:1d:80:c3:c2:80:39:0f:28:
b5:c8:db:73:db:3d:44:7a:94:1b:f6:8d:06:fb:19:1f:9c:98:
bf:e7:73:7a:28:77:9c:2d:3b:9d:6a:87:91:62:1f:58:09:f2:
9d:d5:cd:41:39:54:d7:2c:aa:b4:04:d4:94:c7:5b:c4:27:a2:
fa:13:77:c7:31:0a:57:2d:7f:da:15:c4:e7:6e:ab:37:38:18:
ee:98:3a:f2:85:16:e7:51:89:7a:0c:e7:a3:dd:cf:dc:a4:15:
71:03:d1:13:5d:8c:06:c0:21:8c:cf:17:71:16:e6:3b:77:bf:
65:a1:24:1c
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQnSGLVZZpqDaLIsIqO4R8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmYyY2E2NTNkMTc3MjNlZmVjMTA0NzZjYzUzYTRiNWJhMzJiMDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqHO6lkbCAeAuGlTb7DECtvnu/lc
xRE3JjR/8UvqTnVbKf1yJqPvmOJ3j0+xrKnNgdqH0xpFeD3nRXbqhxWBLto+butK
OFCa0kvvGsSFZvVQgzuw1UTHgrskX82hK/Ptw8l+97K0ZuNDpcI0HP2u1nOGLrPx
cgdDBgA1+YmJC4zk2aLmp5d/5ku1g47KKoTFKj5xOdvTV7/jhqkQv4kZrZ9Xw3pm
a+5NmbDaDt8DIoRRnhJumSc2SBWTXB/Eq63HqLrLNJRTtCygJVVZY7v24vas1OGB
z0MDmoCI0okDQ1KMFVk3UzBF78DQIAAl3/mCxOMcDHclzdsYWXj06hRguwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJbyymU9F3I+/sEEdsxTpLW6MrCPMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvbHZMS1pUMFhjajctd1FSMnpGT2t0Ym95c0k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBwbTuMAwD
BALCR9QDBADCR9YwDQYJKoZIhvcNAQELBQADggEBAE6UiikwxQigO2TBrKEeaANB
tGKd/nyZQZ/QnvVZih20mprELgYvGyO2vHgbG7pp01B+lpnS6TU51OBkAv4jRyr+
rkgg8uMK8ewYmgsoHxYT9AwzqFFsTUgoBkn1ksbxRRU9wp52KPZMpn19aSQc08HQ
1OjdEahlLNynf5P4xHQrrFKEjlhgiusdgMPCgDkPKLXI23PbPUR6lBv2jQb7GR+c
mL/nc3ood5wtO51qh5FiH1gJ8p3VzUE5VNcsqrQE1JTHW8QnovoTd8cxClctf9oV
xOduqzc4GO6YOvKFFudRiXoM56Pdz9ykFXED0RNdjAbAIYzPF3EW5jt3v2WhJBw=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:31 2025 by rpki-client