Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/s_LwzLZPp9ORyCUddUg-S_10-4I.roa
File: s_LwzLZPp9ORyCUddUg-S_10-4I.roa (raw, json)
Hash identifier: BVjFufYciX2m8CUZJZXmbAMr6Jv8LUvHUX1WKiH2vac=
Subject key identifier: B3:F2:F0:CC:B6:4F:A7:D3:91:C8:25:1D:75:48:3E:4B:FD:74:FB:82
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01961E7A9534E4FC4BC3A5B9CE89F07D2682
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/s_LwzLZPp9ORyCUddUg-S_10-4I.roa
Signing time: Thu 10 Apr 2025 06:54:32 +0000
ROA not before: Thu 10 Apr 2025 06:54:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 141.226.245.0/24 maxlen: 24
141.226.246.0/24 maxlen: 24
213.137.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:7a:95:34:e4:fc:4b:c3:a5:b9:ce:89:f0:7d:26:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Apr 10 06:54:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3f2f0ccb64fa7d391c8251d75483e4bfd74fb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:da:d1:af:fb:c5:76:a1:b8:84:04:d0:aa:
ed:29:50:1b:8f:07:bc:0f:e4:8b:fa:6b:53:7a:58:
87:2a:b7:3d:33:37:91:dd:dd:05:fd:a4:83:fa:c5:
e8:00:a6:be:13:ee:84:b4:09:5a:00:ae:47:b2:79:
60:3f:1b:3f:65:35:c3:8b:94:aa:fc:06:a5:a0:3d:
de:88:1b:a1:8d:ca:5b:1e:62:db:28:bc:f0:2e:f4:
2f:00:28:e1:d0:84:2f:99:c9:87:61:2b:6f:9e:45:
4a:74:20:a0:9a:19:5b:07:aa:c9:00:e2:cd:19:1c:
e8:f7:2e:40:b5:63:c8:bb:d5:39:c6:32:76:e5:cb:
62:59:a6:56:ce:7c:be:bf:f2:25:e1:67:dd:bc:8c:
59:77:1f:ed:24:60:94:b0:bb:16:10:1e:a3:40:60:
32:ad:19:d7:9d:a5:b3:d3:ef:2d:51:6b:7e:c8:71:
8a:98:fd:e3:0d:d0:cb:de:09:89:79:b1:d0:ec:77:
4a:d2:9a:bd:c0:dc:70:ad:74:3a:b8:34:0d:eb:7f:
f7:94:0a:e5:ed:75:35:51:1c:ec:87:1e:d6:99:28:
59:5b:d9:ab:86:d5:83:94:a8:79:3c:90:53:15:3d:
bb:f0:c6:52:0d:4d:5c:80:ae:db:37:ba:ab:c5:eb:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F2:F0:CC:B6:4F:A7:D3:91:C8:25:1D:75:48:3E:4B:FD:74:FB:82
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/s_LwzLZPp9ORyCUddUg-S_10-4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.245.0-141.226.246.255
213.137.92.0/24
Signature Algorithm: sha256WithRSAEncryption
59:97:98:51:9c:b2:6c:99:3d:36:aa:77:e2:80:b8:26:c4:3b:
4c:e2:23:75:f4:49:33:48:a4:27:19:53:53:5b:42:62:ef:0e:
d4:d2:4e:8a:38:06:20:96:6d:5a:74:39:5a:d7:25:1f:c9:f8:
30:2f:1f:dc:b2:32:8a:e9:34:d7:e3:d2:ca:42:25:99:8e:5c:
40:4b:21:83:78:69:07:99:1f:8c:02:86:e7:39:98:f0:04:9c:
b6:0c:61:c2:0c:64:53:a9:a9:8c:a9:83:19:91:e2:35:0f:1d:
cc:22:f8:9c:88:5d:f1:31:17:e6:a9:89:9c:e7:b5:b5:e5:0a:
7b:e8:31:7d:8c:bd:14:e6:90:92:78:cf:fc:55:11:9c:7e:41:
34:8d:27:98:f2:89:1c:23:03:e0:54:4e:f8:5d:cd:03:a6:9c:
6d:b7:93:db:4b:78:97:a0:e5:7b:b8:23:03:17:7a:36:a9:2c:
98:44:f3:0f:c8:64:50:a4:bc:c9:5d:2d:48:53:23:be:2e:98:
32:47:ba:7d:7a:bb:55:b8:3d:03:52:54:1c:94:96:0d:f0:f1:
05:f3:cb:7f:d6:aa:35:5c:ba:71:19:b2:8f:64:cd:72:f8:22:
e1:e6:74:4b:f5:59:b1:02:c8:6e:2c:43:5d:3f:ea:59:c5:cd:
50:cc:66:1d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZYeepU05PxLw6W5zonwfSaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjUwNDEwMDY1NDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2YyZjBjY2I2NGZhN2QzOTFjODI1MWQ3NTQ4M2U0YmZkNzRmYjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQfa0a/7xXahuIQE0KrtKVAbjwe8
D+SL+mtTeliHKrc9MzeR3d0F/aSD+sXoAKa+E+6EtAlaAK5HsnlgPxs/ZTXDi5Sq
/AaloD3eiBuhjcpbHmLbKLzwLvQvACjh0IQvmcmHYStvnkVKdCCgmhlbB6rJAOLN
GRzo9y5AtWPIu9U5xjJ25ctiWaZWzny+v/Il4WfdvIxZdx/tJGCUsLsWEB6jQGAy
rRnXnaWz0+8tUWt+yHGKmP3jDdDL3gmJebHQ7HdK0pq9wNxwrXQ6uDQN63/3lArl
7XU1URzshx7WmShZW9mrhtWDlKh5PJBTFT278MZSDU1cgK7bN7qrxesnlwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFLPy8My2T6fTkcglHXVIPkv9dPuCMB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvc19Md3pMWlBwOU9SeUNVZGRVZy1TXzEwLTRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACN4vUD
BACN4vYDBADViVwwDQYJKoZIhvcNAQELBQADggEBAFmXmFGcsmyZPTaqd+KAuCbE
O0ziI3X0STNIpCcZU1NbQmLvDtTSToo4BiCWbVp0OVrXJR/J+DAvH9yyMorpNNfj
0spCJZmOXEBLIYN4aQeZH4wChuc5mPAEnLYMYcIMZFOpqYypgxmR4jUPHcwi+JyI
XfExF+apiZzntbXlCnvoMX2MvRTmkJJ4z/xVEZx+QTSNJ5jyiRwjA+BUTvhdzQOm
nG23k9tLeJeg5Xu4IwMXejapLJhE8w/IZFCkvMldLUhTI74umDJHun16u1W4PQNS
VByUlg3w8QXzy3/WqjVcunEZso9kzXL4IuHmdEv1WbECyG4sQ10/6lnFzVDMZh0=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net