Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/LKhlG3TMTYsgOdNspAeUKjE3FDY.roa
File: LKhlG3TMTYsgOdNspAeUKjE3FDY.roa (raw, json)
Hash identifier: ktutiAHlvXrlvrW8ZLJWK+gJEGiryttMuOJwRo+ROtA=
Subject key identifier: 2C:A8:65:1B:74:CC:4D:8B:20:39:D3:6C:A4:07:94:2A:31:37:14:36
Certificate issuer: /CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Certificate serial: 01942067CF004E8595C6234245593CD2D90C
Authority key identifier: 1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/LKhlG3TMTYsgOdNspAeUKjE3FDY.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205850
IP address blocks: 185.204.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cf:00:4e:85:95:c6:23:42:45:59:3c:d2:d9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ca8651b74cc4d8b2039d36ca407942a31371436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:be:7e:19:ce:d7:67:56:47:a4:d2:a7:2d:
03:13:c6:2b:ce:2d:aa:89:75:18:65:41:b1:10:98:
ba:a3:2e:cc:5b:94:e0:11:9d:e5:70:99:28:a7:d0:
06:5d:f9:20:4e:5d:fa:73:63:55:26:eb:fb:83:a9:
23:e9:d4:3a:27:02:fd:c2:6a:18:b1:7d:d5:f1:ba:
14:35:3d:92:98:06:0e:29:a0:83:ad:d9:5a:4a:6e:
36:5b:37:f1:53:a1:54:bd:3b:81:99:c1:0f:38:c4:
bf:07:8f:b6:e8:d5:ca:ef:f6:a2:01:1f:4f:0b:fe:
9b:73:78:b2:f9:a4:f4:a8:e2:42:a3:30:27:19:41:
23:c2:7f:33:07:32:ce:5c:26:2c:0d:31:90:15:d7:
96:fb:12:94:fe:78:48:0f:02:16:53:4e:08:d1:49:
c3:c5:7c:a2:e6:16:21:65:d2:38:5b:57:45:c6:cf:
27:0f:54:5a:47:a4:e2:87:11:bc:39:53:eb:50:dc:
63:69:4f:6b:a3:34:82:e6:3a:9d:14:84:9a:ec:80:
8b:7f:2d:6e:1a:37:f8:18:96:33:45:8e:cf:fd:fb:
55:52:64:e9:1c:54:23:b2:94:53:e8:8d:5c:ad:85:
d0:96:cd:5c:e6:0c:31:00:d5:bb:6c:7f:00:4c:6d:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A8:65:1B:74:CC:4D:8B:20:39:D3:6C:A4:07:94:2A:31:37:14:36
X509v3 Authority Key Identifier:
keyid:1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/LKhlG3TMTYsgOdNspAeUKjE3FDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.84.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:0a:8a:91:3d:8b:f3:30:fe:eb:5b:67:03:21:09:38:61:93:
8d:f5:36:45:c8:3d:5b:17:4a:b5:76:1c:dd:07:9a:4e:67:1c:
67:a5:a1:51:bd:fb:80:1f:eb:63:74:83:bc:7c:15:98:63:49:
fc:60:f3:98:0c:fc:06:04:8a:a5:a8:09:bf:df:8a:cb:6a:d7:
56:8f:60:1b:6f:06:be:71:98:6e:11:82:1d:17:af:62:e4:cc:
d0:12:90:eb:d5:4f:fb:04:2e:e6:ad:ae:d2:5b:91:83:2b:1f:
eb:d7:b8:31:1f:49:6e:84:42:3e:19:28:ff:dd:40:e3:1e:34:
96:51:50:d2:97:c0:ea:a1:52:06:0c:fd:49:cf:31:6a:ac:e0:
e0:d3:35:86:0d:12:0f:0e:1e:c4:e8:1f:f3:2a:1b:06:c1:9f:
dc:db:c6:6e:c7:e5:07:4b:43:85:d0:f1:4f:92:e5:95:7a:4a:
69:e4:41:45:fd:8e:a4:17:17:5a:3a:24:5d:8c:74:bd:fa:ab:
6d:38:81:01:7c:c4:ca:a3:ee:71:7a:bd:8e:e5:e0:4e:ca:d0:
3e:a2:f1:6d:a5:12:57:be:4f:55:15:16:59:d6:e5:c7:c0:05:
7b:b8:18:b5:5d:b1:16:af:4c:f2:08:d7:44:e1:28:6d:77:44:
97:95:95:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ88AToWVxiNCRVk80tkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOTRkMTM1NGU3MjMwNmE5ZjdmOTUxZjkzZjUyZThkMTNh
NDBhYmYwHhcNMjUwMTAxMDU0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2E4NjUxYjc0Y2M0ZDhiMjAzOWQzNmNhNDA3OTQyYTMxMzcxNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG6+fhnO12dWR6TSpy0DE8Yrzi2q
iXUYZUGxEJi6oy7MW5TgEZ3lcJkop9AGXfkgTl36c2NVJuv7g6kj6dQ6JwL9wmoY
sX3V8boUNT2SmAYOKaCDrdlaSm42WzfxU6FUvTuBmcEPOMS/B4+26NXK7/aiAR9P
C/6bc3iy+aT0qOJCozAnGUEjwn8zBzLOXCYsDTGQFdeW+xKU/nhIDwIWU04I0UnD
xXyi5hYhZdI4W1dFxs8nD1RaR6TihxG8OVPrUNxjaU9rozSC5jqdFISa7ICLfy1u
Gjf4GJYzRY7P/ftVUmTpHFQjspRT6I1crYXQls1c5gwxANW7bH8ATG1OhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCyoZRt0zE2LIDnTbKQHlCoxNxQ2MB8GA1UdIwQY
MBaAFB+U0TVOcjBqn3+VH5P1Lo0TpAq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kZjk2YTUtMzE1Ny00ODgzLTgwODMt
MjEyZjg5M2ZjODM1LzEvTEtobEczVE1UWXNnT2ROc3BBZVVLakUzRkRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kZjk2YTUtMzE1Ny00ODgzLTgwODMtMjEyZjg5M2ZjODM1
LzEvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucxUMA0G
CSqGSIb3DQEBCwUAA4IBAQBNCoqRPYvzMP7rW2cDIQk4YZON9TZFyD1bF0q1dhzd
B5pOZxxnpaFRvfuAH+tjdIO8fBWYY0n8YPOYDPwGBIqlqAm/34rLatdWj2Abbwa+
cZhuEYIdF69i5MzQEpDr1U/7BC7mra7SW5GDKx/r17gxH0luhEI+GSj/3UDjHjSW
UVDSl8DqoVIGDP1JzzFqrODg0zWGDRIPDh7E6B/zKhsGwZ/c28Zux+UHS0OF0PFP
kuWVekpp5EFF/Y6kFxdaOiRdjHS9+qttOIEBfMTKo+5xer2O5eBOytA+ovFtpRJX
vk9VFRZZ1uXHwAV7uBi1XbEWr0zyCNdE4Shtd0SXlZUr
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:34 2025 by rpki-client on console.sobornost.net