Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/LZikoJCXDFhkGudMxFeDLLtpIuQ.roa
File: LZikoJCXDFhkGudMxFeDLLtpIuQ.roa (raw, json)
Hash identifier: TV25uGSXRbCMi70Aq/wXKeSpPXfsa0L2gc6TZogEOew=
Subject key identifier: 2D:98:A4:A0:90:97:0C:58:64:1A:E7:4C:C4:57:83:2C:BB:69:22:E4
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 019421B22B3DD02C75314A4DD275E3B9D8E6
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/LZikoJCXDFhkGudMxFeDLLtpIuQ.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31563
IP address blocks: 195.251.244.0/23 maxlen: 23
195.251.244.0/24 maxlen: 24
195.251.245.0/24 maxlen: 24
195.251.246.0/24 maxlen: 24
2001:648:2420::/48 maxlen: 48
2001:648:2421::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2b:3d:d0:2c:75:31:4a:4d:d2:75:e3:b9:d8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d98a4a090970c58641ae74cc457832cbb6922e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fd:e7:2c:d0:2e:9d:4d:d0:2b:04:da:5c:47:
47:70:b1:98:35:b5:3f:00:f4:e3:05:a6:90:2e:9c:
e9:7d:47:28:eb:48:82:84:09:1b:21:2c:cb:5f:a8:
b9:aa:de:64:72:86:e4:6f:13:63:6e:41:3c:a5:38:
7d:f2:31:ac:9b:65:8c:b7:71:ba:06:df:c1:f7:ff:
fa:6c:15:19:f5:62:99:87:34:d9:b2:65:1f:47:bc:
09:6f:f6:84:88:b9:dc:66:c7:7a:04:be:87:4e:e8:
09:71:4d:5b:e6:05:74:ca:a4:76:2f:88:87:61:f2:
7c:e5:b2:0d:70:6f:1c:f4:f5:3a:49:e9:c8:1b:79:
70:61:4f:c0:11:db:89:14:92:21:c7:60:e2:0f:b3:
05:a4:12:8a:59:35:58:00:e5:69:ac:a0:c1:fc:31:
01:91:46:5d:74:5f:50:03:00:33:15:a9:4e:26:e8:
61:22:a5:cb:e3:36:0f:54:10:a9:ff:7e:36:6e:6c:
45:c1:ae:a0:ea:da:f5:34:53:50:c5:4b:e1:70:c5:
ca:a9:be:89:36:69:dc:4e:30:f3:cc:b1:b5:aa:fe:
2e:b8:3b:bf:8d:1e:fa:d7:5a:7e:e1:2f:2e:fe:df:
db:43:f2:d8:5a:f0:30:88:b2:bc:26:82:40:f6:78:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:98:A4:A0:90:97:0C:58:64:1A:E7:4C:C4:57:83:2C:BB:69:22:E4
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/LZikoJCXDFhkGudMxFeDLLtpIuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.251.244.0-195.251.246.255
IPv6:
2001:648:2420::/47
Signature Algorithm: sha256WithRSAEncryption
23:53:79:ef:af:a0:ba:66:a2:94:44:cc:80:bb:7b:91:95:e1:
1d:7e:44:4f:a2:ff:d5:58:e6:2b:91:c4:d2:9f:36:a4:54:dc:
8a:69:51:43:7e:8e:3a:1e:a5:4f:8c:6f:4e:ff:b0:48:2b:38:
ae:6d:d2:63:46:d0:27:5b:4d:cb:e3:8b:84:16:37:a4:d9:b0:
81:59:d6:1b:a8:05:01:95:87:69:5c:42:a8:3d:30:ce:fa:e1:
50:45:9c:15:da:e1:ed:34:cb:82:88:61:0e:fa:cc:74:0d:5f:
96:3b:4e:d1:13:1e:10:cc:48:7d:ff:05:00:95:8b:af:60:f6:
7e:f7:f0:ab:20:60:e9:d3:99:35:d3:b4:80:76:8b:57:d3:30:
0e:fe:3e:94:84:1a:5d:db:73:a2:de:a9:ef:13:71:70:85:c8:
b0:fb:58:1f:70:6a:ac:b3:a7:de:f9:69:d6:f8:dd:c4:82:96:
8e:88:e0:72:f9:fa:44:05:57:61:24:35:c1:57:65:0d:8f:fe:
ad:93:17:b8:8e:0a:61:25:9e:4c:f5:d5:aa:3f:db:87:3d:25:
69:23:b2:bd:3d:e4:c4:9a:43:0f:32:7f:f8:98:84:67:b6:75:
56:63:e5:b4:b9:14:57:8e:f3:ff:79:77:0a:7c:6b:75:f0:b0:
bb:0d:35:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQhsis90Cx1MUpN0nXjudjmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1
MjlkYzMwHhcNMjUwMTAxMTE0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDk4YTRhMDkwOTcwYzU4NjQxYWU3NGNjNDU3ODMyY2JiNjkyMmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf3nLNAunU3QKwTaXEdHcLGYNbU/
APTjBaaQLpzpfUco60iChAkbISzLX6i5qt5kcobkbxNjbkE8pTh98jGsm2WMt3G6
Bt/B9//6bBUZ9WKZhzTZsmUfR7wJb/aEiLncZsd6BL6HTugJcU1b5gV0yqR2L4iH
YfJ85bINcG8c9PU6SenIG3lwYU/AEduJFJIhx2DiD7MFpBKKWTVYAOVprKDB/DEB
kUZddF9QAwAzFalOJuhhIqXL4zYPVBCp/342bmxFwa6g6tr1NFNQxUvhcMXKqb6J
NmncTjDzzLG1qv4uuDu/jR7611p+4S8u/t/bQ/LYWvAwiLK8JoJA9ngrjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2YpKCQlwxYZBrnTMRXgyy7aSLkMB8GA1UdIwQY
MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut
YWFhNDU1M2QyYWJkLzEvTFppa29KQ1hERmhrR3VkTXhGZURMTHRwSXVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk
LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBALD+/QD
BADD+/YwDwQCAAIwCQMHASABBkgkIDANBgkqhkiG9w0BAQsFAAOCAQEAI1N576+g
umailETMgLt7kZXhHX5ET6L/1VjmK5HE0p82pFTcimlRQ36OOh6lT4xvTv+wSCs4
rm3SY0bQJ1tNy+OLhBY3pNmwgVnWG6gFAZWHaVxCqD0wzvrhUEWcFdrh7TTLgohh
DvrMdA1fljtO0RMeEMxIff8FAJWLr2D2fvfwqyBg6dOZNdO0gHaLV9MwDv4+lIQa
Xdtzot6p7xNxcIXIsPtYH3BqrLOn3vlp1vjdxIKWjojgcvn6RAVXYSQ1wVdlDY/+
rZMXuI4KYSWeTPXVqj/bhz0laSOyvT3kxJpDDzJ/+JiEZ7Z1VmPltLkUV47z/3l3
CnxrdfCwuw01ow==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net