Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/88ed70-ce1d-407e-87f9-1d3ac04f7282/1/lIGD8K1BmhOpB0q5WgDe68EuOYA.roa
File: lIGD8K1BmhOpB0q5WgDe68EuOYA.roa (raw, json)
Hash identifier: KCThuK3AvSt8KOjRGGo7nEkeGwQox/817MQ/Gc0KAVE=
Subject key identifier: 94:81:83:F0:AD:41:9A:13:A9:07:4A:B9:5A:00:DE:EB:C1:2E:39:80
Certificate issuer: /CN=54337ac93ff048ed837dd543a09159b3ea03a0d9
Certificate serial: 03EF4AB6
Authority key identifier: 54:33:7A:C9:3F:F0:48:ED:83:7D:D5:43:A0:91:59:B3:EA:03:A0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDN6yT_wSO2DfdVDoJFZs-oDoNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/88ed70-ce1d-407e-87f9-1d3ac04f7282/1/lIGD8K1BmhOpB0q5WgDe68EuOYA.roa
Signing time: Sat 01 Jan 2022 09:54:17 +0000
ROA not before: Sat 01 Jan 2022 09:54:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197040
IP address blocks: 195.206.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66013878 (0x3ef4ab6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54337ac93ff048ed837dd543a09159b3ea03a0d9
Validity
Not Before: Jan 1 09:54:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=948183f0ad419a13a9074ab95a00deebc12e3980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:6b:57:48:3a:ab:0b:cd:78:8a:03:d9:77:
89:1b:5b:dc:82:0b:b0:92:7c:76:21:3f:44:5f:93:
87:12:33:e7:2c:f6:73:01:3f:bb:c9:29:2d:a9:c1:
e1:0c:d4:b0:79:1e:fb:30:26:89:25:b0:d1:f1:06:
18:7b:11:e6:d1:54:1d:1c:ed:69:ca:0c:07:09:f5:
27:5d:28:36:da:09:3b:5e:7e:74:18:08:b0:be:7c:
49:b9:da:69:65:6d:3f:57:91:64:d3:82:90:43:41:
7c:b3:d6:1c:3b:2d:be:d8:26:dd:60:19:8f:f1:19:
6c:d0:a0:34:ce:d3:a6:f8:32:26:d4:f0:c7:32:46:
9e:ee:68:ba:64:c1:7b:37:52:9e:c1:c1:70:2d:c1:
5b:2d:95:ae:75:88:fe:d4:23:f3:a2:21:8f:b2:3d:
37:a9:11:ec:74:76:7e:5b:58:4c:4d:c6:f2:e6:e7:
a6:6a:26:bb:72:03:3d:bb:4c:94:c0:9b:ed:51:89:
46:4b:e6:14:57:d7:d7:41:14:07:0d:52:a0:5c:e0:
25:86:be:d8:dc:be:ea:07:9f:e4:31:ca:2e:85:27:
52:0c:54:0a:3f:c5:8e:e6:34:3a:d6:2f:56:31:62:
b8:d4:54:e0:20:d8:26:24:65:d2:68:f9:7c:c7:ce:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:81:83:F0:AD:41:9A:13:A9:07:4A:B9:5A:00:DE:EB:C1:2E:39:80
X509v3 Authority Key Identifier:
keyid:54:33:7A:C9:3F:F0:48:ED:83:7D:D5:43:A0:91:59:B3:EA:03:A0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDN6yT_wSO2DfdVDoJFZs-oDoNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/88ed70-ce1d-407e-87f9-1d3ac04f7282/1/lIGD8K1BmhOpB0q5WgDe68EuOYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/88ed70-ce1d-407e-87f9-1d3ac04f7282/1/VDN6yT_wSO2DfdVDoJFZs-oDoNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.224.0/23
Signature Algorithm: sha256WithRSAEncryption
19:57:47:89:b4:f5:f0:0b:e4:61:94:d8:cd:5c:3e:47:d0:55:
a2:dd:8c:39:e7:84:ae:50:5e:a0:67:c6:16:bf:bb:54:44:bc:
ed:1c:6c:8b:7c:0e:03:15:8d:1a:1b:6e:09:8e:a2:c8:ab:ae:
37:a7:d8:37:9b:a7:dd:9b:4b:9e:f9:3c:09:b2:3c:c5:1b:aa:
a6:b3:e7:64:b9:a3:ed:c8:53:47:4b:d1:34:60:3f:2a:f8:ad:
2b:15:ce:46:b7:4b:50:9c:2b:e9:b5:da:81:c2:18:55:d3:28:
d1:88:0e:2e:ef:ac:56:37:5e:f0:54:30:3a:ef:e5:82:ee:4d:
fa:f6:04:d7:da:a1:17:22:d6:ac:9c:b7:1d:94:6c:96:65:e3:
a9:99:97:e9:3d:5c:f2:e8:ad:28:7c:37:38:46:23:93:c5:0e:
a0:ca:dd:a8:bc:e5:75:f8:5c:ce:c0:19:0f:f3:17:5d:3f:b1:
a4:2c:d9:cf:34:66:7e:33:86:59:04:b3:b2:71:9e:8e:4e:61:
6c:bf:f2:0b:8a:a7:d5:98:e2:77:87:47:16:01:33:69:6a:d1:
79:4f:e1:6f:72:b2:51:2d:ff:c0:28:b3:8a:ca:1c:cc:38:19:
95:81:5a:a2:0a:4b:2d:2d:33:95:b5:fe:5e:ed:88:6d:27:b2:
65:24:49:a8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA+9KtjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDMzN2FjOTNmZjA0OGVkODM3ZGQ1NDNhMDkxNTliM2VhMDNhMGQ5MB4XDTIyMDEw
MTA5NTQxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTQ4MTgzZjBhZDQx
OWExM2E5MDc0YWI5NWEwMGRlZWJjMTJlMzk4MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL4ya1dIOqsLzXiKA9l3iRtb3IILsJJ8diE/RF+ThxIz5yz2
cwE/u8kpLanB4QzUsHke+zAmiSWw0fEGGHsR5tFUHRztacoMBwn1J10oNtoJO15+
dBgIsL58SbnaaWVtP1eRZNOCkENBfLPWHDstvtgm3WAZj/EZbNCgNM7TpvgyJtTw
xzJGnu5oumTBezdSnsHBcC3BWy2VrnWI/tQj86Ihj7I9N6kR7HR2fltYTE3G8ubn
pmomu3IDPbtMlMCb7VGJRkvmFFfX10EUBw1SoFzgJYa+2Ny+6gef5DHKLoUnUgxU
Cj/FjuY0OtYvVjFiuNRU4CDYJiRl0mj5fMfOCAUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSUgYPwrUGaE6kHSrlaAN7rwS45gDAfBgNVHSMEGDAWgBRUM3rJP/BI7YN9
1UOgkVmz6gOg2TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZETjZ5VF93U08yRGZkVkRvSkZacy1vRG9Oay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvODhlZDcwLWNlMWQtNDA3ZS04N2Y5LTFkM2FjMDRmNzI4Mi8x
L2xJR0Q4SzFCbWhPcEIwcTVXZ0RlNjhFdU9ZQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
ODhlZDcwLWNlMWQtNDA3ZS04N2Y5LTFkM2FjMDRmNzI4Mi8xL1ZETjZ5VF93U08y
RGZkVkRvSkZacy1vRG9Oay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcPO4DANBgkqhkiG9w0BAQsFAAOC
AQEAGVdHibT18AvkYZTYzVw+R9BVot2MOeeErlBeoGfGFr+7VES87Rxsi3wOAxWN
GhtuCY6iyKuuN6fYN5un3ZtLnvk8CbI8xRuqprPnZLmj7chTR0vRNGA/KvitKxXO
RrdLUJwr6bXagcIYVdMo0YgOLu+sVjde8FQwOu/lgu5N+vYE19qhFyLWrJy3HZRs
lmXjqZmX6T1c8uitKHw3OEYjk8UOoMrdqLzldfhczsAZD/MXXT+xpCzZzzRmfjOG
WQSzsnGejk5hbL/yC4qn1Zjid4dHFgEzaWrReU/hb3KyUS3/wCizisoczDgZlYFa
ogpLLS0zlbX+Xu2IbSeyZSRJqA==
-----END CERTIFICATE-----
Generated at Wed May 14 01:34:21 2025 by rpki-client