Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/LWQOU0lsBJ7AcpfwEXoL-ok6rok.roa
File: LWQOU0lsBJ7AcpfwEXoL-ok6rok.roa (raw, json)
Hash identifier: 0/1RbhG27PyHjDZyoP4IqnfgSwWfnZZl+ijORLw+Ejw=
Subject key identifier: 2D:64:0E:53:49:6C:04:9E:C0:72:97:F0:11:7A:0B:FA:89:3A:AE:89
Certificate issuer: /CN=66d337d330ba44efcfef555355132a6a2c69783c
Certificate serial: 019420682530147E30CC4EBB6A464E9D5958
Authority key identifier: 66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/LWQOU0lsBJ7AcpfwEXoL-ok6rok.roa
Signing time: Wed 01 Jan 2025 05:48:03 +0000
ROA not before: Wed 01 Jan 2025 05:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9147
IP address blocks: 185.176.56.0/22 maxlen: 22
185.176.56.0/24 maxlen: 24
185.176.57.0/24 maxlen: 24
185.176.58.0/24 maxlen: 24
185.176.59.0/24 maxlen: 24
212.86.64.0/19 maxlen: 19
212.86.64.0/20 maxlen: 20
212.86.64.0/24 maxlen: 24
212.86.65.0/24 maxlen: 24
212.86.66.0/24 maxlen: 24
212.86.67.0/24 maxlen: 24
212.86.68.0/24 maxlen: 24
212.86.69.0/24 maxlen: 24
212.86.70.0/24 maxlen: 24
212.86.71.0/24 maxlen: 24
212.86.72.0/24 maxlen: 24
212.86.73.0/24 maxlen: 24
212.86.74.0/24 maxlen: 24
212.86.75.0/24 maxlen: 24
212.86.76.0/24 maxlen: 24
212.86.77.0/24 maxlen: 24
212.86.78.0/24 maxlen: 24
212.86.79.0/24 maxlen: 24
212.86.80.0/20 maxlen: 20
212.86.80.0/24 maxlen: 24
212.86.81.0/24 maxlen: 24
212.86.82.0/24 maxlen: 24
212.86.83.0/24 maxlen: 24
212.86.84.0/24 maxlen: 24
212.86.85.0/24 maxlen: 24
212.86.86.0/24 maxlen: 24
212.86.87.0/24 maxlen: 24
212.86.88.0/24 maxlen: 24
212.86.89.0/24 maxlen: 24
212.86.90.0/24 maxlen: 24
212.86.91.0/24 maxlen: 24
212.86.92.0/24 maxlen: 24
212.86.93.0/24 maxlen: 24
212.86.94.0/24 maxlen: 24
212.86.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:25:30:14:7e:30:cc:4e:bb:6a:46:4e:9d:59:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d337d330ba44efcfef555355132a6a2c69783c
Validity
Not Before: Jan 1 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d640e53496c049ec07297f0117a0bfa893aae89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ff:34:fe:1e:99:1b:9b:3a:28:58:35:03:d3:
74:2d:4c:b2:84:eb:ba:4f:08:8b:fa:44:b4:03:a3:
30:d4:b7:b9:29:0b:de:8d:95:63:d3:44:7b:9c:b8:
25:5d:be:a5:9b:bd:89:53:2c:6c:31:8d:9c:d0:41:
7c:75:66:d7:ed:76:fc:ff:46:43:51:b2:a7:59:ed:
ec:8b:f9:2b:70:00:12:2f:6c:52:4c:bd:81:01:f4:
7e:c0:c0:59:b0:84:2a:73:61:79:ca:1d:6c:71:cd:
51:95:74:97:37:e1:97:0d:f3:ff:cd:e5:53:06:d0:
ec:2d:7d:b3:4f:d8:03:4c:eb:52:33:0e:9c:b5:a9:
80:67:d3:f9:9e:7b:45:c9:a4:c3:40:b7:94:f6:b4:
91:1b:75:01:73:56:3f:ea:fc:89:a7:6d:09:cf:08:
e2:97:ff:65:e8:32:6b:99:68:a2:b3:2f:c4:dd:97:
7b:cd:9a:13:23:2f:09:b1:ea:b8:bf:b5:5e:ca:8f:
4a:c0:70:b6:3b:b8:cb:4d:af:0a:7a:76:d2:c4:d6:
a0:74:de:44:00:d2:a4:86:d7:33:3c:5a:4e:d0:f9:
66:7c:4c:49:6c:38:cc:15:55:1a:1a:42:3b:a1:7a:
c8:e6:78:c7:21:cb:5e:1c:60:be:fb:bf:fa:fc:3c:
50:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:64:0E:53:49:6C:04:9E:C0:72:97:F0:11:7A:0B:FA:89:3A:AE:89
X509v3 Authority Key Identifier:
keyid:66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/LWQOU0lsBJ7AcpfwEXoL-ok6rok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.56.0/22
212.86.64.0/19
Signature Algorithm: sha256WithRSAEncryption
73:f6:60:07:f1:09:c5:ce:0d:8d:97:a6:f6:33:26:99:d0:bf:
26:b9:fc:75:d6:43:69:89:7f:99:0e:99:be:43:fa:dd:58:91:
da:e8:8a:ea:d2:b7:ed:0b:42:20:62:9f:18:71:7d:3a:2e:dc:
05:21:c6:c2:6c:58:b7:34:8f:dc:3b:a2:94:37:d5:2f:5a:b5:
29:72:ee:73:b7:59:7f:9f:7e:ce:73:07:97:ff:d4:1a:fb:01:
ff:d7:f3:39:bc:9b:d6:ee:ac:6b:38:f1:27:93:ea:1d:91:09:
c9:6e:84:27:25:22:39:63:8a:3c:2c:7e:0a:35:d6:45:ec:6f:
ac:4d:c9:26:50:d1:df:c0:09:f7:44:40:b0:51:72:a2:9b:35:
38:0f:f2:ae:4c:a7:49:72:8e:6d:48:86:87:5d:7a:50:3d:0f:
5a:e3:58:d4:27:e2:80:6b:c1:62:ca:60:c1:87:e5:37:ef:1b:
bf:5f:d2:d4:42:e9:37:f4:0b:30:57:6e:f5:64:8b:e4:40:0c:
5c:2f:54:51:42:e0:85:a6:3f:60:7f:0d:19:17:58:10:55:71:
36:bd:f3:ed:0b:9a:43:72:90:1d:18:b6:9b:cc:05:71:60:af:
b5:8d:c4:a5:5b:f4:73:bd:5a:57:94:6f:cb:1c:ab:de:98:f3:
77:fc:4d:c7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQgaCUwFH4wzE67akZOnVlYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDMzN2QzMzBiYTQ0ZWZjZmVmNTU1MzU1MTMyYTZhMmM2
OTc4M2MwHhcNMjUwMTAxMDU0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDY0MGU1MzQ5NmMwNDllYzA3Mjk3ZjAxMTdhMGJmYTg5M2FhZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP80/h6ZG5s6KFg1A9N0LUyyhOu6
TwiL+kS0A6Mw1Le5KQvejZVj00R7nLglXb6lm72JUyxsMY2c0EF8dWbX7Xb8/0ZD
UbKnWe3si/krcAASL2xSTL2BAfR+wMBZsIQqc2F5yh1scc1RlXSXN+GXDfP/zeVT
BtDsLX2zT9gDTOtSMw6ctamAZ9P5nntFyaTDQLeU9rSRG3UBc1Y/6vyJp20Jzwji
l/9l6DJrmWiisy/E3Zd7zZoTIy8Jseq4v7Veyo9KwHC2O7jLTa8KenbSxNagdN5E
ANKkhtczPFpO0PlmfExJbDjMFVUaGkI7oXrI5njHIcteHGC++7/6/DxQ1QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC1kDlNJbASewHKX8BF6C/qJOq6JMB8GA1UdIwQY
MBaAFGbTN9MwukTvz+9VU1UTKmosaXg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRNMzB6QzZST19QNzFWVFZSTXFhaXhwZUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYjVlN2MtNjdiMS00NzdkLTg5NWYt
OGY1ZmM5MjEyNWRiLzEvTFdRT1UwbHNCSjdBY3Bmd0VYb0wtb2s2cm9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yYjVlN2MtNjdiMS00NzdkLTg5NWYtOGY1ZmM5MjEyNWRi
LzEvWnRNMzB6QzZST19QNzFWVFZSTXFhaXhwZUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCubA4AwQF
1FZAMA0GCSqGSIb3DQEBCwUAA4IBAQBz9mAH8QnFzg2Nl6b2MyaZ0L8mufx11kNp
iX+ZDpm+Q/rdWJHa6Irq0rftC0IgYp8YcX06LtwFIcbCbFi3NI/cO6KUN9UvWrUp
cu5zt1l/n37OcweX/9Qa+wH/1/M5vJvW7qxrOPEnk+odkQnJboQnJSI5Y4o8LH4K
NdZF7G+sTckmUNHfwAn3RECwUXKimzU4D/KuTKdJco5tSIaHXXpQPQ9a41jUJ+KA
a8FiymDBh+U37xu/X9LUQuk39AswV271ZIvkQAxcL1RRQuCFpj9gfw0ZF1gQVXE2
vfPtC5pDcpAdGLabzAVxYK+1jcSlW/RzvVpXlG/LHKvemPN3/E3H
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:44 2025 by rpki-client on console.sobornost.net