Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/LYviAp3PxmjO3NYT62eUwATXCDA.roa
File: LYviAp3PxmjO3NYT62eUwATXCDA.roa (raw, json)
Hash identifier: cNgFyZaC7ifnpFT8pGCK7760nWd6v3gVDQo7PYoFJbc=
Subject key identifier: 2D:8B:E2:02:9D:CF:C6:68:CE:DC:D6:13:EB:67:94:C0:04:D7:08:30
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 0194266C17D344D5B02974AE9767DA03B84B
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/LYviAp3PxmjO3NYT62eUwATXCDA.roa
Signing time: Thu 02 Jan 2025 09:50:05 +0000
ROA not before: Thu 02 Jan 2025 09:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5394
IP address blocks: 194.20.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:17:d3:44:d5:b0:29:74:ae:97:67:da:03:b8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jan 2 09:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d8be2029dcfc668cedcd613eb6794c004d70830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8d:82:88:2a:55:e8:8f:eb:ce:78:ae:68:d7:
39:92:47:44:aa:d5:f2:5d:5a:a6:18:1e:14:c7:97:
36:c6:55:1d:a5:e3:b2:07:ee:b7:28:0d:1e:6a:49:
e1:24:a9:5b:d2:5d:f6:a9:e9:59:99:04:3f:11:13:
af:65:40:13:df:70:9e:02:7d:ca:b3:fb:ac:74:41:
76:33:6e:42:04:b4:2c:da:8b:90:ad:df:ee:53:23:
6d:2e:1d:cc:fb:7b:86:0b:8c:d6:10:07:8c:f2:af:
0d:9e:92:96:e0:64:c0:6e:6d:97:fa:26:ce:9a:c7:
f6:a4:d1:e3:b0:f7:3d:05:8b:aa:58:f1:fe:2e:f9:
ec:11:92:21:25:65:c0:da:f1:e8:7c:0f:5a:d1:95:
b7:2c:2f:7c:51:cf:73:9f:e1:b0:29:9a:2c:5e:bd:
e3:7e:4f:cb:ca:f4:72:e4:4c:e5:7a:e1:ce:41:5b:
bf:6d:b1:19:b8:bc:71:92:db:ce:e9:a8:90:4d:e8:
ec:53:33:1d:ce:3c:dc:82:d4:14:8c:15:6a:c2:b4:
ee:d0:d9:1d:b1:8a:f2:cc:2f:14:82:25:0a:69:0a:
e7:21:86:01:e7:3e:a3:f6:d1:23:d3:44:bf:fe:0e:
14:79:97:4a:df:db:28:5d:f8:8c:e6:d4:29:7c:ea:
53:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8B:E2:02:9D:CF:C6:68:CE:DC:D6:13:EB:67:94:C0:04:D7:08:30
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/LYviAp3PxmjO3NYT62eUwATXCDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.96.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:28:a9:52:c8:dc:25:40:65:58:cf:3f:71:99:72:04:1b:ec:
b8:df:5c:58:3d:80:c5:7a:a9:14:a1:21:48:e9:43:dd:f5:7a:
ee:2e:e8:ac:18:32:0f:2b:04:44:f7:91:cc:21:39:8f:76:b7:
d0:12:08:e6:8a:17:a5:22:79:85:64:66:23:00:7b:01:33:56:
af:e6:a3:1e:fb:e4:ae:50:b3:48:26:d6:b1:f6:b8:64:60:23:
4f:8a:0d:66:88:92:dd:e4:6a:a0:10:33:b7:07:d9:d6:63:b7:
0c:01:a9:c0:62:0c:d0:08:95:80:18:93:df:a1:5a:21:ba:6e:
4a:05:91:df:31:35:7f:c1:49:1f:34:db:bc:15:c4:9d:96:d8:
b1:40:98:97:4d:10:4e:f4:73:b6:b5:fc:2d:d8:f6:63:14:f1:
c0:bf:4f:18:e8:67:93:be:d4:9e:48:6a:7d:2c:c1:cd:a1:9c:
af:65:0f:22:4e:37:59:8d:88:81:07:9f:45:a4:b1:2e:96:59:
1d:8c:69:1c:56:e8:21:08:ff:ae:26:e6:8b:a1:7b:6b:d9:3f:
1b:c2:ce:9b:1f:fb:16:e8:fb:75:cd:be:83:ab:4f:3f:dc:9e:
f4:59:52:9c:ed:6b:21:5d:25:c3:05:40:d2:21:ae:55:0f:e4:
82:59:05:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbBfTRNWwKXSul2faA7hLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi
MGNhMDkwHhcNMjUwMTAyMDk1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDhiZTIwMjlkY2ZjNjY4Y2VkY2Q2MTNlYjY3OTRjMDA0ZDcwODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y2CiCpV6I/rzniuaNc5kkdEqtXy
XVqmGB4Ux5c2xlUdpeOyB+63KA0eaknhJKlb0l32qelZmQQ/EROvZUAT33CeAn3K
s/usdEF2M25CBLQs2ouQrd/uUyNtLh3M+3uGC4zWEAeM8q8NnpKW4GTAbm2X+ibO
msf2pNHjsPc9BYuqWPH+LvnsEZIhJWXA2vHofA9a0ZW3LC98Uc9zn+GwKZosXr3j
fk/LyvRy5EzleuHOQVu/bbEZuLxxktvO6aiQTejsUzMdzjzcgtQUjBVqwrTu0Nkd
sYryzC8UgiUKaQrnIYYB5z6j9tEj00S//g4UeZdK39soXfiM5tQpfOpTlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC2L4gKdz8ZoztzWE+tnlMAE1wgwMB8GA1UdIwQY
MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct
NWI1ZTMzY2U3MGFkLzEvTFl2aUFwM1B4bWpPM05ZVDYyZVV3QVRYQ0RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk
LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwhRgMA0G
CSqGSIb3DQEBCwUAA4IBAQCtKKlSyNwlQGVYzz9xmXIEG+y431xYPYDFeqkUoSFI
6UPd9XruLuisGDIPKwRE95HMITmPdrfQEgjmihelInmFZGYjAHsBM1av5qMe++Su
ULNIJtax9rhkYCNPig1miJLd5GqgEDO3B9nWY7cMAanAYgzQCJWAGJPfoVohum5K
BZHfMTV/wUkfNNu8FcSdltixQJiXTRBO9HO2tfwt2PZjFPHAv08Y6GeTvtSeSGp9
LMHNoZyvZQ8iTjdZjYiBB59FpLEullkdjGkcVughCP+uJuaLoXtr2T8bws6bH/sW
6Pt1zb6Dq08/3J70WVKc7WshXSXDBUDSIa5VD+SCWQUg
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net