Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/lLP-E00mNSkZdFDrKJuZ9EPwFgU.roa
File: lLP-E00mNSkZdFDrKJuZ9EPwFgU.roa (raw, json)
Hash identifier: JDgtiflp78wBLsxsEpYCE7XGiYVzJmbra6nl5ogonwA=
Subject key identifier: 94:B3:FE:13:4D:26:35:29:19:74:50:EB:28:9B:99:F4:43:F0:16:05
Certificate issuer: /CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Certificate serial: 019987A5A05DC71AA148AEC0B53AFBC5DE08
Authority key identifier: CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/lLP-E00mNSkZdFDrKJuZ9EPwFgU.roa
Signing time: Fri 26 Sep 2025 20:10:02 +0000
ROA not before: Fri 26 Sep 2025 20:10:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12796
IP address blocks: 94.190.128.0/20 maxlen: 24
94.190.128.0/22 maxlen: 22
94.190.132.0/22 maxlen: 24
94.190.136.0/21 maxlen: 21
94.190.160.0/19 maxlen: 19
94.190.192.0/23 maxlen: 23
94.190.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:87:a5:a0:5d:c7:1a:a1:48:ae:c0:b5:3a:fb:c5:de:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Validity
Not Before: Sep 26 20:10:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94b3fe134d263529197450eb289b99f443f01605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:93:b6:e3:ae:46:02:b6:4c:a3:58:1b:2d:
06:c8:1c:bd:13:fe:bd:46:b4:c3:f8:b2:4d:87:a7:
56:43:53:16:ab:ab:4c:09:2d:bd:86:8b:92:3f:06:
e4:12:a7:24:64:46:64:73:fa:05:62:d5:57:5e:f0:
ca:a1:2d:cc:b5:ae:4e:e8:a4:3c:70:13:1d:46:4f:
65:f5:3e:bb:31:8b:19:27:c7:b1:55:42:c9:89:71:
4a:06:05:fd:64:48:39:40:37:30:fe:d7:6c:00:f2:
13:50:c3:23:2b:e7:fb:ee:f1:fa:5e:ef:f7:c4:f6:
21:d3:97:0f:12:7f:11:7d:c6:f2:85:e0:97:d1:7a:
ba:43:04:45:0d:e4:e0:85:b3:34:24:72:14:95:32:
22:95:1c:ef:d5:d5:4b:18:c9:d0:da:93:88:6a:1e:
51:dc:84:c0:44:9e:9e:23:5f:6d:8f:b4:8a:8b:42:
8d:88:6c:85:f3:be:79:a0:99:03:5f:fd:fe:37:b9:
e9:3f:93:94:e7:9e:ee:6c:58:65:a3:e9:ef:0c:7c:
56:9f:d6:db:50:5a:00:95:50:e5:dd:02:aa:c6:ea:
3a:8b:58:e6:5b:12:54:c1:e9:9c:33:31:ea:02:7b:
f0:dd:e5:bb:d4:99:15:59:36:4f:8e:e3:dc:25:45:
50:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B3:FE:13:4D:26:35:29:19:74:50:EB:28:9B:99:F4:43:F0:16:05
X509v3 Authority Key Identifier:
keyid:CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/lLP-E00mNSkZdFDrKJuZ9EPwFgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.190.128.0/20
94.190.160.0-94.190.194.255
Signature Algorithm: sha256WithRSAEncryption
a4:cd:f3:28:49:d5:3e:e0:e6:70:3b:3f:e9:6a:cc:19:08:9f:
50:54:83:ba:a0:30:f6:52:45:fd:f4:88:55:77:16:ba:47:6c:
1e:96:a2:00:95:c4:ed:9c:b6:1e:a9:19:ea:89:7c:97:ab:5f:
11:0c:c3:c8:37:f7:00:b7:db:9d:5c:25:d1:15:0e:d2:1d:f1:
20:23:97:94:e5:72:29:21:ec:9c:02:af:52:89:a6:71:f3:f5:
e2:57:1f:74:6d:2e:b3:b4:67:96:b4:7b:45:6d:0a:15:70:58:
8b:73:6e:19:71:96:61:8a:22:d5:ee:33:90:84:7c:e3:b4:97:
3f:90:63:0f:3c:51:1f:3e:39:e2:c1:6d:fc:2d:23:8c:e4:40:
aa:93:66:7b:20:fa:d7:e0:29:d5:1a:01:96:ca:4b:61:7c:fc:
9a:3d:ed:33:00:e1:0b:c3:52:7e:af:25:4c:19:c8:8f:54:5a:
94:7d:5c:a9:ea:51:53:7e:48:bc:66:c9:8a:b5:59:56:4c:c4:
c9:ac:4e:b6:77:b1:41:1a:d9:86:57:55:17:6e:50:9a:84:df:
dd:c8:04:80:cb:ce:c2:02:39:6b:a2:53:8f:44:2f:68:38:eb:
3c:d7:51:68:83:08:c0:96:4a:61:cf:26:60:96:b6:15:4f:53:
73:c9:1a:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:03:47 2025 by rpki-client