Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/lkhGtmHtTBEdKgsUVjONXoB0iQc.roa
File: lkhGtmHtTBEdKgsUVjONXoB0iQc.roa (raw, json)
Hash identifier: 9yZ07+0QCixTukFaKD5cKhr7FU+NHBM/0FUydctI6gg=
Subject key identifier: 96:48:46:B6:61:ED:4C:11:1D:2A:0B:14:56:33:8D:5E:80:74:89:07
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 019421B1C233C7819DF30274D00ECE96CD96
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/lkhGtmHtTBEdKgsUVjONXoB0iQc.roa
Signing time: Wed 01 Jan 2025 11:48:05 +0000
ROA not before: Wed 01 Jan 2025 11:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35805
IP address blocks: 92.241.64.0/19 maxlen: 24
109.238.224.0/20 maxlen: 24
185.51.16.0/22 maxlen: 24
213.131.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c2:33:c7:81:9d:f3:02:74:d0:0e:ce:96:cd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Jan 1 11:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=964846b661ed4c111d2a0b1456338d5e80748907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2f:c5:1f:9a:25:ff:d1:7c:c7:8c:a7:35:ef:
f9:fb:43:80:e0:cf:31:dc:12:85:af:12:8d:a0:79:
00:b4:b5:90:81:04:38:47:f0:e1:75:ac:b1:ea:37:
9f:1e:44:a0:98:10:d9:41:ab:0d:f6:7c:c2:d1:26:
c0:68:5b:b0:67:2e:7c:8b:b5:7b:27:0a:d1:10:24:
81:af:9a:12:08:8d:f0:fd:33:92:cd:15:50:9b:a2:
dd:45:f9:d0:ab:1e:54:d6:46:60:55:c6:07:96:dc:
88:51:98:dd:2a:84:5e:28:97:4d:bc:ff:1d:0f:d7:
7d:0a:c6:63:af:b4:68:39:35:db:f9:13:f6:07:eb:
da:db:38:f1:dc:5a:9c:ef:3a:af:5e:75:66:b2:05:
34:c7:aa:5c:4e:26:dd:00:4f:42:75:fd:c6:3e:6f:
60:44:b7:9f:7a:57:67:02:e7:40:10:1e:da:71:26:
ab:95:79:73:ae:ff:d5:56:5e:63:bb:78:00:37:52:
90:00:1b:1f:4d:f7:25:7f:0d:71:30:bb:fa:a8:1a:
66:40:31:a7:6a:ae:b9:31:df:d1:82:8e:b0:f1:de:
c5:61:cb:d5:e3:62:ef:58:d2:28:69:e4:d3:dc:be:
f1:44:2a:dd:9b:7b:93:d7:d7:7d:40:3f:ec:4f:88:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:48:46:B6:61:ED:4C:11:1D:2A:0B:14:56:33:8D:5E:80:74:89:07
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/lkhGtmHtTBEdKgsUVjONXoB0iQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.241.64.0/19
109.238.224.0/20
185.51.16.0/22
213.131.32.0/19
Signature Algorithm: sha256WithRSAEncryption
70:48:38:1a:89:d1:ea:e7:a1:3a:5a:4e:bf:26:03:d0:3f:95:
f2:73:82:70:09:d0:70:76:f5:63:f7:58:89:1d:84:8b:92:8e:
b6:d6:ed:8b:32:db:6e:09:cf:c8:c0:64:a2:0a:e3:87:fd:1d:
b9:8e:f2:20:2c:94:5d:88:50:66:ac:31:6c:bd:e2:d4:0a:85:
ef:ae:8b:48:22:04:37:70:fb:38:1b:16:92:6d:e4:f1:a6:4d:
ef:a1:0e:7b:49:9d:aa:58:0a:be:4e:e3:34:f2:9b:dc:e0:63:
a0:2e:d4:be:d7:48:ef:e8:2a:c6:96:34:c8:4a:fd:40:43:3c:
fd:6c:7b:ea:fe:68:3d:9d:cf:6f:17:be:ab:47:43:f5:93:f7:
55:83:96:a8:61:60:c3:00:fc:74:20:d0:3f:b5:25:f3:c4:1f:
9a:f6:f6:74:64:41:8d:34:1d:bf:7e:78:94:28:70:b5:78:8a:
4c:ad:bb:c4:f3:6a:33:da:8e:33:45:ee:a1:0a:7a:8a:9e:26:
54:6a:9a:c0:85:bc:d1:c3:38:f3:c7:6b:f7:49:fe:ec:70:25:
9e:50:da:c8:69:80:34:fc:a0:e7:f8:d4:a4:0b:60:c8:62:e2:
a6:d2:0e:ab:98:f1:64:55:ff:45:11:54:7d:76:55:5b:d6:e7:
6f:1c:93:07
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQhscIzx4Gd8wJ00A7Ols2WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjU3MTkwODIxZjcwNThhOGVhZmQ0ODE5Njk3NDM2OGJh
ZDhmMTQwHhcNMjUwMTAxMTE0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjQ4NDZiNjYxZWQ0YzExMWQyYTBiMTQ1NjMzOGQ1ZTgwNzQ4OTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi/FH5ol/9F8x4ynNe/5+0OA4M8x
3BKFrxKNoHkAtLWQgQQ4R/Dhdayx6jefHkSgmBDZQasN9nzC0SbAaFuwZy58i7V7
JwrRECSBr5oSCI3w/TOSzRVQm6LdRfnQqx5U1kZgVcYHltyIUZjdKoReKJdNvP8d
D9d9CsZjr7RoOTXb+RP2B+va2zjx3Fqc7zqvXnVmsgU0x6pcTibdAE9Cdf3GPm9g
RLefeldnAudAEB7acSarlXlzrv/VVl5ju3gAN1KQABsfTfclfw1xMLv6qBpmQDGn
aq65Md/Rgo6w8d7FYcvV42LvWNIoaeTT3L7xRCrdm3uT19d9QD/sT4j/AwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJZIRrZh7UwRHSoLFFYzjV6AdIkHMB8GA1UdIwQY
MBaAFJ0lcZCCH3BYqOr9SBlpdDaLrY8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS82NmY4MjktNTEyOS00ODQyLWE1YzAt
Mzc0MGIwOTQxZGI4LzEvbGtoR3RtSHRUQkVkS2dzVVZqT05Yb0IwaVFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS82NmY4MjktNTEyOS00ODQyLWE1YzAtMzc0MGIwOTQxZGI4
LzEvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFXPFAAwQE
be7gAwQCuTMQAwQF1YMgMA0GCSqGSIb3DQEBCwUAA4IBAQBwSDgaidHq56E6Wk6/
JgPQP5Xyc4JwCdBwdvVj91iJHYSLko621u2LMttuCc/IwGSiCuOH/R25jvIgLJRd
iFBmrDFsveLUCoXvrotIIgQ3cPs4GxaSbeTxpk3voQ57SZ2qWAq+TuM08pvc4GOg
LtS+10jv6CrGljTISv1AQzz9bHvq/mg9nc9vF76rR0P1k/dVg5aoYWDDAPx0INA/
tSXzxB+a9vZ0ZEGNNB2/fniUKHC1eIpMrbvE82oz2o4zRe6hCnqKniZUaprAhbzR
wzjzx2v3Sf7scCWeUNrIaYA0/KDn+NSkC2DIYuKm0g6rmPFkVf9FEVR9dlVb1udv
HJMH
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net