Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/LUeFE-e9M56hGD7W3dr7iEaRzQc.roa
File: LUeFE-e9M56hGD7W3dr7iEaRzQc.roa (raw, json)
Hash identifier: +d9SvNclOTnQ6lkDZgYeQTKUTYMS6VbA7XWWCAaY2o8=
Subject key identifier: 2D:47:85:13:E7:BD:33:9E:A1:18:3E:D6:DD:DA:FB:88:46:91:CD:07
Certificate issuer: /CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Certificate serial: 0194221F7F33EB577A9721A5EBB93CCF26D0
Authority key identifier: BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/LUeFE-e9M56hGD7W3dr7iEaRzQc.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28847
IP address blocks: 80.245.224.0/20 maxlen: 20
81.94.64.0/19 maxlen: 19
185.145.92.0/22 maxlen: 22
2001:1630::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7f:33:eb:57:7a:97:21:a5:eb:b9:3c:cf:26:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d478513e7bd339ea1183ed6dddafb884691cd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:62:2c:d6:ff:c0:64:c4:c7:d6:67:8d:22:4b:
bb:6f:78:16:bb:fb:00:df:40:52:79:a2:d0:4a:fa:
61:8f:ac:d6:ed:69:2e:6e:40:4e:e1:18:d7:4b:0f:
3e:1d:aa:2d:bf:ec:e8:9f:9d:b6:13:b8:6b:50:e3:
ae:83:83:0e:13:10:0e:45:06:01:21:06:79:f2:9e:
e1:33:d7:91:32:2f:57:75:f5:5e:f4:ec:7a:3d:75:
56:c8:73:63:0f:81:10:42:94:8f:81:35:2f:32:d6:
e4:92:a5:1d:ce:b3:96:c2:da:2d:b0:b6:2f:17:8f:
fb:59:f9:ba:c1:25:ae:6e:44:b0:11:d9:b1:dc:bb:
0a:3c:eb:c9:f8:9e:92:80:89:60:93:7a:fc:32:16:
41:77:e8:12:91:11:55:7a:88:07:01:f7:ca:8d:05:
cd:17:e9:89:78:19:5a:21:c5:52:82:63:b3:14:fc:
53:22:c7:87:a5:b8:fd:03:21:17:a7:f8:9a:66:ff:
2a:92:8a:6f:be:b1:af:aa:dd:60:53:8f:ba:66:15:
eb:66:9f:8b:90:92:28:3e:3e:68:54:1a:b4:46:98:
d1:a0:cf:5d:25:74:4b:a3:4e:0e:bb:b3:c9:3c:a0:
73:f3:d3:40:50:cf:d9:d9:07:3f:6f:d2:f6:6a:74:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:47:85:13:E7:BD:33:9E:A1:18:3E:D6:DD:DA:FB:88:46:91:CD:07
X509v3 Authority Key Identifier:
keyid:BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/LUeFE-e9M56hGD7W3dr7iEaRzQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.224.0/20
81.94.64.0/19
185.145.92.0/22
IPv6:
2001:1630::/29
Signature Algorithm: sha256WithRSAEncryption
04:1f:e7:bf:6e:3b:23:b6:5d:90:b9:c4:23:f4:3b:a4:3d:fe:
9f:37:04:71:7f:a0:42:73:35:01:a4:20:de:36:02:a5:2e:d1:
2c:64:7b:67:e8:14:d6:26:7e:f1:6b:80:1c:78:a9:07:d7:b2:
a6:23:0b:e4:c4:4c:3a:5d:05:1b:d4:43:c9:e1:f6:04:f4:fb:
f4:a8:63:95:f6:0b:5f:4c:18:ef:bd:f9:bc:cf:25:a2:b6:8a:
ea:17:8a:86:07:3b:cd:30:6c:e2:32:93:b0:09:9e:d0:43:e0:
cc:94:24:88:32:54:56:4c:f7:a9:56:7e:96:5f:cc:65:45:6a:
4f:ee:17:02:b5:b7:b1:2e:6f:53:0a:7c:a7:9a:3d:89:25:1d:
ae:77:75:0a:25:8d:7f:e1:92:0a:a8:51:7a:27:b1:d6:7a:5c:
cc:99:d5:b5:d2:97:90:5e:0d:b6:05:01:ac:19:b3:22:01:4a:
b8:75:e4:16:b5:95:2f:9d:70:ef:53:01:8b:e3:a7:01:d5:9f:
8f:5b:5f:b2:30:54:0f:09:d5:1c:55:af:c3:a1:3e:df:10:0f:
2e:5c:d0:69:9f:1e:a8:6d:8d:06:f9:c8:43:9f:d5:b1:6d:11:
a2:25:6f:4e:b9:68:54:d3:c3:e4:c0:62:3b:f1:fb:3a:70:46:
4d:e5:fb:33
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQiH38z61d6lyGl67k8zybQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMzAxNTU3NjRjYjJlZTBmNWVlZWZjZGY1MmE3YjEyZDM3
MmVkZGQwHhcNMjUwMTAxMTM0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDQ3ODUxM2U3YmQzMzllYTExODNlZDZkZGRhZmI4ODQ2OTFjZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWIs1v/AZMTH1meNIku7b3gWu/sA
30BSeaLQSvphj6zW7WkubkBO4RjXSw8+Haotv+zon522E7hrUOOug4MOExAORQYB
IQZ58p7hM9eRMi9XdfVe9Ox6PXVWyHNjD4EQQpSPgTUvMtbkkqUdzrOWwtotsLYv
F4/7Wfm6wSWubkSwEdmx3LsKPOvJ+J6SgIlgk3r8MhZBd+gSkRFVeogHAffKjQXN
F+mJeBlaIcVSgmOzFPxTIseHpbj9AyEXp/iaZv8qkopvvrGvqt1gU4+6ZhXrZp+L
kJIoPj5oVBq0RpjRoM9dJXRLo04Ou7PJPKBz89NAUM/Z2Qc/b9L2anRNtQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFC1HhRPnvTOeoRg+1t3a+4hGkc0HMB8GA1UdIwQY
MBaAFLswFVdkyy7g9e7vzfUqexLTcu3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTct
ZGUwMjVlNmY4NTg5LzEvTFVlRkUtZTlNNTZoR0Q3VzNkcjdpRWFSelFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTctZGUwMjVlNmY4NTg5
LzEvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEUPXgAwQF
UV5AAwQCuZFcMA0EAgACMAcDBQMgARYwMA0GCSqGSIb3DQEBCwUAA4IBAQAEH+e/
bjsjtl2QucQj9DukPf6fNwRxf6BCczUBpCDeNgKlLtEsZHtn6BTWJn7xa4AceKkH
17KmIwvkxEw6XQUb1EPJ4fYE9Pv0qGOV9gtfTBjvvfm8zyWitorqF4qGBzvNMGzi
MpOwCZ7QQ+DMlCSIMlRWTPepVn6WX8xlRWpP7hcCtbexLm9TCnynmj2JJR2ud3UK
JY1/4ZIKqFF6J7HWelzMmdW10peQXg22BQGsGbMiAUq4deQWtZUvnXDvUwGL46cB
1Z+PW1+yMFQPCdUcVa/DoT7fEA8uXNBpnx6obY0G+chDn9WxbRGiJW9OuWhU08Pk
wGI78fs6cEZN5fsz
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net