Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b34bb9-adbb-41e4-a041-5230b4002c27/1/lLRCpIDuistW19H0CK6c0zjCz-0.roa
File: lLRCpIDuistW19H0CK6c0zjCz-0.roa (raw, json)
Hash identifier: ZNBDXYPBn64tC3SqXTDkf5ub1N1AwgdSfWsfVM/Ce4Q=
Subject key identifier: 94:B4:42:A4:80:EE:8A:CB:56:D7:D1:F4:08:AE:9C:D3:38:C2:CF:ED
Certificate issuer: /CN=dc62c84850750e2aa68930f164b0c522073aead8
Certificate serial: FB9898
Authority key identifier: DC:62:C8:48:50:75:0E:2A:A6:89:30:F1:64:B0:C5:22:07:3A:EA:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GLISFB1DiqmiTDxZLDFIgc66tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/b34bb9-adbb-41e4-a041-5230b4002c27/1/lLRCpIDuistW19H0CK6c0zjCz-0.roa
Signing time: Sat 01 Jan 2022 09:54:57 +0000
ROA not before: Sat 01 Jan 2022 09:54:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210453
IP address blocks: 194.69.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16488600 (0xfb9898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc62c84850750e2aa68930f164b0c522073aead8
Validity
Not Before: Jan 1 09:54:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94b442a480ee8acb56d7d1f408ae9cd338c2cfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:4a:20:28:06:c6:fe:07:08:44:30:d7:f8:
ef:38:6d:b8:c1:1e:2f:57:7e:12:f0:2c:c2:0f:31:
bb:ba:b9:81:b0:2c:f7:4f:90:a5:73:c9:98:54:ca:
85:5f:64:d0:58:19:de:ec:5d:56:de:cf:64:ee:c9:
f1:d6:35:49:08:77:21:16:54:36:1b:fe:ad:be:5c:
e7:d7:20:77:e8:8d:f6:ac:72:9b:39:fb:92:ed:e6:
30:57:9d:d7:bf:03:86:e9:54:0c:36:9a:65:67:7f:
bc:84:24:bc:11:f6:f7:65:c5:1a:4f:8a:10:2d:8f:
77:77:e0:a1:2e:15:09:7c:be:73:e5:4f:17:49:e3:
a1:a8:25:51:00:dd:bf:cc:53:58:9f:38:81:8a:4b:
39:7b:5b:05:b1:00:18:ce:76:dd:2a:3b:c0:ec:75:
ff:06:0e:93:8d:68:bf:43:8b:c7:ac:c5:88:40:b0:
b7:5c:67:49:c4:d9:18:f4:65:5d:ea:21:8d:89:e2:
00:af:6f:bf:83:70:a7:e3:06:2f:06:c8:1b:13:a1:
71:0d:3d:24:be:ac:2a:d6:13:c3:df:c5:20:12:71:
77:e9:20:49:f0:01:03:4c:87:55:69:a7:26:75:e8:
4e:ea:6a:61:08:53:02:db:8f:1d:71:6f:3f:0b:ce:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B4:42:A4:80:EE:8A:CB:56:D7:D1:F4:08:AE:9C:D3:38:C2:CF:ED
X509v3 Authority Key Identifier:
keyid:DC:62:C8:48:50:75:0E:2A:A6:89:30:F1:64:B0:C5:22:07:3A:EA:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GLISFB1DiqmiTDxZLDFIgc66tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b34bb9-adbb-41e4-a041-5230b4002c27/1/lLRCpIDuistW19H0CK6c0zjCz-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b34bb9-adbb-41e4-a041-5230b4002c27/1/3GLISFB1DiqmiTDxZLDFIgc66tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.165.0/24
Signature Algorithm: sha256WithRSAEncryption
49:88:de:44:0f:c3:05:42:9a:c7:d5:c3:0c:28:18:42:eb:af:
80:cd:6f:d4:71:2c:06:0c:2a:41:d4:f9:78:96:b5:3c:31:7a:
53:b8:5d:14:b4:4a:18:99:40:1d:44:c4:ed:a0:1b:c3:cd:00:
fa:dc:9d:6a:25:08:40:9b:3c:c1:ee:76:48:40:aa:f1:c6:f1:
08:3d:3a:6c:0e:94:9d:e7:b6:2f:a2:4d:58:a1:c3:58:22:7c:
d5:d8:04:45:f0:ab:80:ad:a1:f0:f5:33:ab:e3:09:0b:35:95:
ba:15:9b:10:7c:8a:68:39:5f:ec:64:94:4c:cf:33:f6:b6:2f:
6d:3f:52:5d:88:14:61:a4:c4:a0:7c:da:1f:cb:e0:23:99:76:
c9:42:d8:59:45:fd:d4:b4:f7:a5:c8:39:de:16:5b:79:39:92:
60:18:4d:ef:50:04:5c:1d:43:ad:4f:95:90:c7:d8:77:fb:e6:
ed:1e:b7:b0:21:e6:d5:68:1e:94:0c:05:3a:69:4e:11:76:80:
dc:cf:6e:4d:25:94:bb:7c:7a:0f:75:a6:ae:b4:dd:31:a8:85:
7b:35:23:ff:bb:26:e5:88:0f:af:8e:5a:3b:5b:9a:01:41:90:
0e:b5:e2:22:29:0e:3a:26:8f:01:6b:ca:7d:27:a5:5a:4d:8a:
c3:28:92:25
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAPuYmDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YzYyYzg0ODUwNzUwZTJhYTY4OTMwZjE2NGIwYzUyMjA3M2FlYWQ4MB4XDTIyMDEw
MTA5NTQ1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTRiNDQyYTQ4MGVl
OGFjYjU2ZDdkMWY0MDhhZTljZDMzOGMyY2ZlZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALk/SiAoBsb+BwhEMNf47zhtuMEeL1d+EvAswg8xu7q5gbAs
90+QpXPJmFTKhV9k0FgZ3uxdVt7PZO7J8dY1SQh3IRZUNhv+rb5c59cgd+iN9qxy
mzn7ku3mMFed178DhulUDDaaZWd/vIQkvBH292XFGk+KEC2Pd3fgoS4VCXy+c+VP
F0njoaglUQDdv8xTWJ84gYpLOXtbBbEAGM523So7wOx1/wYOk41ov0OLx6zFiECw
t1xnScTZGPRlXeohjYniAK9vv4Nwp+MGLwbIGxOhcQ09JL6sKtYTw9/FIBJxd+kg
SfABA0yHVWmnJnXoTupqYQhTAtuPHXFvPwvOe5sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSUtEKkgO6Ky1bX0fQIrpzTOMLP7TAfBgNVHSMEGDAWgBTcYshIUHUOKqaJ
MPFksMUiBzrq2DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNHTElTRkIxRGlxbWlURHhaTERGSWdjNjZ0Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvYjM0YmI5LWFkYmItNDFlNC1hMDQxLTUyMzBiNDAwMmMyNy8x
L2xMUkNwSUR1aXN0VzE5SDBDSzZjMHpqQ3otMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
YjM0YmI5LWFkYmItNDFlNC1hMDQxLTUyMzBiNDAwMmMyNy8xLzNHTElTRkIxRGlx
bWlURHhaTERGSWdjNjZ0Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJFpTANBgkqhkiG9w0BAQsFAAOC
AQEASYjeRA/DBUKax9XDDCgYQuuvgM1v1HEsBgwqQdT5eJa1PDF6U7hdFLRKGJlA
HUTE7aAbw80A+tydaiUIQJs8we52SECq8cbxCD06bA6Unee2L6JNWKHDWCJ81dgE
RfCrgK2h8PUzq+MJCzWVuhWbEHyKaDlf7GSUTM8z9rYvbT9SXYgUYaTEoHzaH8vg
I5l2yULYWUX91LT3pcg53hZbeTmSYBhN71AEXB1DrU+VkMfYd/vm7R63sCHm1Wge
lAwFOmlOEXaA3M9uTSWUu3x6D3WmrrTdMaiFezUj/7sm5YgPr45aO1uaAUGQDrXi
IikOOiaPAWvKfSelWk2KwyiSJQ==
-----END CERTIFICATE-----
Generated at Mon May 12 10:49:01 2025 by rpki-client