Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/lwjpFv3HgemxBJqe9gi4ArggD88.roa
File: lwjpFv3HgemxBJqe9gi4ArggD88.roa (raw, json)
Hash identifier: 7p7Zr7Ya8mUheMjW/Ww4B8S5/Cc2CZ+iZfLnhmKVtRo=
Subject key identifier: 97:08:E9:16:FD:C7:81:E9:B1:04:9A:9E:F6:08:B8:02:B8:20:0F:CF
Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial: 01942067CD4AD05EF0945CEACA9E67A0D278
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/lwjpFv3HgemxBJqe9gi4ArggD88.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12360
IP address blocks: 194.55.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cd:4a:d0:5e:f0:94:5c:ea:ca:9e:67:a0:d2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9708e916fdc781e9b1049a9ef608b802b8200fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:3a:03:d4:af:da:29:92:f1:e4:ef:49:2a:
f0:51:c2:08:d9:8f:f3:07:cd:d7:5c:e1:3d:fb:5c:
a9:72:8f:e4:9a:67:96:a0:a1:00:97:3a:a3:97:90:
7c:53:03:d4:af:33:0e:10:57:3b:12:89:7e:c7:6c:
b9:06:1b:82:64:7b:80:b6:31:b4:e6:d6:b1:ae:a1:
2f:60:ba:37:f4:0d:98:7a:43:b3:00:7b:9b:d3:da:
3d:5b:14:f0:62:31:33:b2:a3:c2:e7:80:68:32:85:
1d:d5:3e:8e:57:1c:f0:8e:c0:53:0e:7b:c6:f2:81:
bf:bc:24:b5:6f:43:d2:59:38:7a:e8:9c:33:7c:19:
14:98:54:43:4e:46:b1:c6:fd:f2:0f:5b:ce:48:a1:
90:7f:71:a4:1a:8f:76:7e:d5:2d:ba:1a:c2:bf:6f:
b0:96:fd:f2:1e:34:ac:f9:c4:5d:a5:aa:70:2d:e8:
91:97:32:b9:fd:57:d3:90:f4:2b:92:c1:17:b5:3b:
d3:00:0f:42:6c:3f:d3:03:7b:f5:54:fb:36:4c:2c:
72:70:84:f8:6d:ae:04:f9:4e:9b:61:fa:31:18:4f:
b2:b5:c3:a1:26:bd:0a:b3:77:b8:31:3a:d8:80:ec:
a2:9c:62:93:60:ef:f7:c1:93:53:98:f3:43:45:1f:
b4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:08:E9:16:FD:C7:81:E9:B1:04:9A:9E:F6:08:B8:02:B8:20:0F:CF
X509v3 Authority Key Identifier:
keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/lwjpFv3HgemxBJqe9gi4ArggD88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.138.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:9e:c6:0b:7f:94:27:ea:0e:a4:28:1f:01:03:1d:34:44:32:
a7:bf:db:8f:da:4f:b3:7c:22:21:66:97:ef:3b:ff:73:bd:c2:
e1:33:81:58:29:cb:37:5e:39:18:d6:51:df:b1:d7:73:e3:9c:
a9:0a:66:04:a1:24:7e:3b:e4:e8:e6:fe:a5:27:fd:96:78:8a:
08:4f:95:ab:5e:70:c1:91:9a:2a:38:79:46:10:01:2d:6a:b0:
83:4b:f6:c1:af:ed:ae:e7:cd:11:f2:34:fc:11:af:87:f2:32:
99:e2:5b:ac:b1:fd:4d:ee:95:e4:d4:95:95:7f:ba:8d:43:9a:
0d:30:eb:6a:ef:16:79:97:40:26:f2:77:35:d3:3e:af:23:74:
40:de:25:7b:2c:d7:f9:59:17:be:d4:3a:a0:b8:da:f8:1f:5e:
ed:6a:25:6d:1f:a3:df:d4:51:fc:0a:63:89:3d:82:fe:bb:1e:
8c:41:8d:e1:9a:ec:86:a9:cf:9e:b8:65:4e:f9:16:a1:08:f4:
7e:46:a4:71:dc:fd:7a:0f:6b:84:b5:f4:52:7d:5a:72:e8:b9:
53:4d:4c:ed:2a:71:97:d9:8c:13:9c:63:1a:e2:b5:f6:57:b0:
b4:42:13:80:fc:63:a4:25:d8:87:d7:01:fe:b8:25:39:14:1b:
3d:89:82:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ81K0F7wlFzqyp5noNJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4N2Q5YjU2MmJhNDcyNjE4ZjkzOThlMjY1Y2EwZTcxMDhm
Njg3YTMwHhcNMjUwMTAxMDU0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzA4ZTkxNmZkYzc4MWU5YjEwNDlhOWVmNjA4YjgwMmI4MjAwZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW06A9Sv2imS8eTvSSrwUcII2Y/z
B83XXOE9+1ypco/kmmeWoKEAlzqjl5B8UwPUrzMOEFc7Eol+x2y5BhuCZHuAtjG0
5taxrqEvYLo39A2YekOzAHub09o9WxTwYjEzsqPC54BoMoUd1T6OVxzwjsBTDnvG
8oG/vCS1b0PSWTh66JwzfBkUmFRDTkaxxv3yD1vOSKGQf3GkGo92ftUtuhrCv2+w
lv3yHjSs+cRdpapwLeiRlzK5/VfTkPQrksEXtTvTAA9CbD/TA3v1VPs2TCxycIT4
ba4E+U6bYfoxGE+ytcOhJr0Ks3e4MTrYgOyinGKTYO/3wZNTmPNDRR+0jQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJcI6Rb9x4HpsQSanvYIuAK4IA/PMB8GA1UdIwQY
MBaAFGh9m1YrpHJhj5OY4mXKDnEI9oejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iODljMWYtOGRjYi00MzhiLThhZmQt
NjA1ZDEzNTEzNmY3LzEvbHdqcEZ2M0hnZW14QkpxZTlnaTRBcmdnRDg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9iODljMWYtOGRjYi00MzhiLThhZmQtNjA1ZDEzNTEzNmY3
LzEvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjeKMA0G
CSqGSIb3DQEBCwUAA4IBAQCdnsYLf5Qn6g6kKB8BAx00RDKnv9uP2k+zfCIhZpfv
O/9zvcLhM4FYKcs3XjkY1lHfsddz45ypCmYEoSR+O+To5v6lJ/2WeIoIT5WrXnDB
kZoqOHlGEAEtarCDS/bBr+2u580R8jT8Ea+H8jKZ4lussf1N7pXk1JWVf7qNQ5oN
MOtq7xZ5l0Am8nc10z6vI3RA3iV7LNf5WRe+1DqguNr4H17taiVtH6Pf1FH8CmOJ
PYL+ux6MQY3hmuyGqc+euGVO+RahCPR+RqRx3P16D2uEtfRSfVpy6LlTTUztKnGX
2YwTnGMa4rX2V7C0QhOA/GOkJdiH1wH+uCU5FBs9iYL4
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:41 2025 by rpki-client on console.sobornost.net