Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/LwODeFlTbNm331VlQw3cZjyD1Sg.roa
File: LwODeFlTbNm331VlQw3cZjyD1Sg.roa (raw, json)
Hash identifier: 6xKklCkI+s1DbuNSCG9T6RXJeAeTq1fLNQfBDhNCOAU=
Subject key identifier: 2F:03:83:78:59:53:6C:D9:B7:DF:55:65:43:0D:DC:66:3C:83:D5:28
Certificate issuer: /CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Certificate serial: 0194266B6FBFFD42FBB0410B5904F01B6638
Authority key identifier: 89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/LwODeFlTbNm331VlQw3cZjyD1Sg.roa
Signing time: Thu 02 Jan 2025 09:49:22 +0000
ROA not before: Thu 02 Jan 2025 09:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205094
IP address blocks: 195.128.143.0/24 maxlen: 24
213.142.154.0/23 maxlen: 23
2a12:f140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:6f:bf:fd:42:fb:b0:41:0b:59:04:f0:1b:66:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Validity
Not Before: Jan 2 09:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f03837859536cd9b7df5565430ddc663c83d528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:83:67:f5:9c:3a:f6:8e:10:39:38:07:8c:c7:
8a:d4:ed:bc:ae:83:9d:b0:47:73:be:a5:8a:1e:2a:
5d:c8:7f:c8:38:76:63:f6:9a:d1:5c:47:bd:cd:0c:
b8:9a:73:6b:d3:31:90:41:fb:19:0a:be:e9:8f:0a:
2c:a6:39:e3:ed:b7:b1:34:78:06:a7:68:4d:7b:0d:
fc:9b:94:46:34:dc:e1:d1:56:da:4b:12:df:65:7d:
5f:f0:11:70:9b:06:66:d2:7c:dd:66:5f:2f:a4:5b:
37:16:93:62:8e:62:3b:a2:1d:df:0a:9e:2b:59:53:
b7:9b:e2:31:e0:f6:dc:2b:b8:f7:51:e9:94:42:25:
de:c5:85:47:e1:bc:2c:15:6e:13:1b:05:20:d3:ee:
6b:fd:b6:1b:a1:8f:69:0d:96:0e:6f:7f:83:ad:1d:
90:c2:09:fa:45:ff:25:ea:fa:8d:b3:33:57:d9:03:
a0:04:28:b3:55:61:e1:6f:0e:d3:a6:6a:d9:b0:dd:
00:69:d0:d4:90:dd:bb:fa:78:48:bf:8e:f9:f9:0c:
88:5a:c7:0f:62:65:6b:1b:fb:8b:20:e0:f7:18:79:
76:9d:30:5c:ab:41:2a:20:28:f6:96:23:3b:b2:c1:
95:77:60:c4:5d:4f:fc:e7:b2:e5:8e:26:41:b7:c2:
31:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:03:83:78:59:53:6C:D9:B7:DF:55:65:43:0D:DC:66:3C:83:D5:28
X509v3 Authority Key Identifier:
keyid:89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/LwODeFlTbNm331VlQw3cZjyD1Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.143.0/24
213.142.154.0/23
IPv6:
2a12:f140::/29
Signature Algorithm: sha256WithRSAEncryption
1b:8b:49:4d:fa:e9:3e:93:d3:61:1d:76:5f:99:63:49:60:9c:
c0:7d:12:b2:88:f1:93:05:a2:03:b7:e3:f2:42:1e:d3:c0:e6:
96:e6:df:26:80:e0:6b:b0:bb:2c:cb:d4:07:82:50:6f:ec:a2:
00:b1:5c:ce:f2:72:9d:a8:58:45:10:3a:63:62:7b:05:2c:66:
45:b3:8c:f0:51:5d:f4:75:95:7a:d2:78:e0:52:61:d0:e4:26:
e7:81:bc:8c:c1:fa:e8:67:e7:ba:4f:c3:cc:42:6c:c9:df:23:
cc:86:e6:fe:ca:b8:9c:5e:0a:18:10:04:79:ff:91:1c:e0:b2:
cf:49:a2:80:72:f3:7d:bc:de:f8:57:c0:eb:dd:9d:5d:87:10:
c5:68:2e:a6:33:22:51:d9:c0:db:aa:86:d0:e1:87:02:d5:1e:
d6:ff:ca:e1:d7:c3:bd:1a:72:c6:d7:de:f8:13:d7:4f:0e:26:
f0:95:8b:87:80:b2:cc:71:61:67:58:c8:19:97:20:47:03:cf:
34:be:68:91:ef:f4:ea:3b:1e:20:5c:94:7a:9c:00:ff:16:bc:
c4:71:49:dc:0e:8b:e2:1b:1f:d3:e8:46:ef:ef:24:60:6e:fa:
b1:55:76:4e:d2:b3:57:33:c3:63:4c:4e:32:e0:e5:45:9b:b8:
22:3b:14:9e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQma2+//UL7sEELWQTwG2Y4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MDFmNjczYzZiMGZmODgzNWVhMDJmYWVkYmE1YjQ5Y2Yx
NDIyNGUwHhcNMjUwMTAyMDk0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjAzODM3ODU5NTM2Y2Q5YjdkZjU1NjU0MzBkZGM2NjNjODNkNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4Nn9Zw69o4QOTgHjMeK1O28roOd
sEdzvqWKHipdyH/IOHZj9prRXEe9zQy4mnNr0zGQQfsZCr7pjwospjnj7bexNHgG
p2hNew38m5RGNNzh0VbaSxLfZX1f8BFwmwZm0nzdZl8vpFs3FpNijmI7oh3fCp4r
WVO3m+Ix4PbcK7j3UemUQiXexYVH4bwsFW4TGwUg0+5r/bYboY9pDZYOb3+DrR2Q
wgn6Rf8l6vqNszNX2QOgBCizVWHhbw7TpmrZsN0AadDUkN27+nhIv475+QyIWscP
YmVrG/uLIOD3GHl2nTBcq0EqICj2liM7ssGVd2DEXU/857LljiZBt8Ix2QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFC8Dg3hZU2zZt99VZUMN3GY8g9UoMB8GA1UdIwQY
MBaAFIkB9nPGsP+INeoC+u26W0nPFCJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVFIMmM4YXdfNGcxNmdMNjdicGJTYzhVSWs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMmJhMTAtMjBlZC00ZThjLWI3NmMt
NTNjNGQ1NzYyZDFhLzEvTHdPRGVGbFRiTm0zMzFWbFF3M2NaanlEMVNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9jMmJhMTAtMjBlZC00ZThjLWI3NmMtNTNjNGQ1NzYyZDFh
LzEvaVFIMmM4YXdfNGcxNmdMNjdicGJTYzhVSWs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAw4CPAwQB
1Y6aMA0EAgACMAcDBQMqEvFAMA0GCSqGSIb3DQEBCwUAA4IBAQAbi0lN+uk+k9Nh
HXZfmWNJYJzAfRKyiPGTBaIDt+PyQh7TwOaW5t8mgOBrsLssy9QHglBv7KIAsVzO
8nKdqFhFEDpjYnsFLGZFs4zwUV30dZV60njgUmHQ5CbngbyMwfroZ+e6T8PMQmzJ
3yPMhub+yricXgoYEAR5/5Ec4LLPSaKAcvN9vN74V8Dr3Z1dhxDFaC6mMyJR2cDb
qobQ4YcC1R7W/8rh18O9GnLG1974E9dPDibwlYuHgLLMcWFnWMgZlyBHA880vmiR
7/TqOx4gXJR6nAD/FrzEcUncDoviGx/T6Ebv7yRgbvqxVXZO0rNXM8NjTE4y4OVF
m7giOxSe
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net