Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/LlU4QULfxG-fJbjUK6blpUANe_Q.roa
File: LlU4QULfxG-fJbjUK6blpUANe_Q.roa (raw, json)
Hash identifier: 3vAOeQYnb+huFwQtsH8ApJ7rgbdzg+C7TMAlcbQDIOw=
Subject key identifier: 2E:55:38:41:42:DF:C4:6F:9F:25:B8:D4:2B:A6:E5:A5:40:0D:7B:F4
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 01941FFA01C20E640C4FC989EC925215B1B5
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/LlU4QULfxG-fJbjUK6blpUANe_Q.roa
Signing time: Wed 01 Jan 2025 03:47:45 +0000
ROA not before: Wed 01 Jan 2025 03:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61298
IP address blocks: 2001:67c:2aa0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:01:c2:0e:64:0c:4f:c9:89:ec:92:52:15:b1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: Jan 1 03:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e55384142dfc46f9f25b8d42ba6e5a5400d7bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:89:37:98:b1:70:3f:4d:54:bd:c5:b3:9d:
ee:f5:af:39:9b:f4:17:a5:bc:fa:1e:12:7f:9c:f4:
b2:78:7f:d3:a5:ee:26:b7:8b:26:c5:0e:f2:a3:18:
ed:ac:ee:3a:27:d9:48:0e:c2:35:f9:ec:8f:a8:14:
f5:42:87:ad:20:8c:4d:d8:4b:e0:34:14:9e:48:8f:
de:68:5d:73:a4:26:bc:8e:70:c1:63:d0:5d:4f:5e:
5c:fa:bd:f5:4b:ee:28:39:06:4c:81:92:dd:ad:59:
4d:57:f9:27:29:cd:a1:2e:fb:df:68:94:0e:b5:11:
61:40:f0:5d:64:fe:b8:fd:51:44:5e:76:72:97:3b:
54:86:b9:e4:5c:01:91:d8:ad:9e:e3:48:8d:10:26:
a9:70:06:58:9a:10:a2:84:b2:77:90:5c:de:9b:fe:
28:f0:25:13:92:a8:af:7e:38:7e:72:09:9a:65:5b:
f6:bd:6b:58:bd:d4:2e:39:83:2a:e1:e0:23:ab:ac:
10:f6:c7:94:4c:dc:3a:1c:f3:62:20:a7:25:b0:2b:
f0:a0:8f:5f:82:8a:f8:75:3e:18:ce:3d:a3:e8:1f:
a8:39:da:cb:ed:2e:96:8d:fd:47:c2:7d:ef:74:e3:
28:27:a1:ae:85:e8:2e:80:20:e3:6e:d5:e3:bc:48:
6c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:55:38:41:42:DF:C4:6F:9F:25:B8:D4:2B:A6:E5:A5:40:0D:7B:F4
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/LlU4QULfxG-fJbjUK6blpUANe_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2aa0::/48
Signature Algorithm: sha256WithRSAEncryption
8f:af:e5:db:36:8b:eb:e3:d2:59:b0:7a:13:09:88:fb:00:16:
42:5c:3b:c2:3c:7e:e3:52:5a:5d:5c:04:d2:20:c5:90:a7:7e:
5f:d0:d5:07:1f:a1:eb:d1:83:a8:ef:e0:22:fe:14:32:fa:74:
dd:f7:b0:4b:79:5a:bb:df:e3:68:f1:78:53:ed:5c:d3:4a:bf:
77:32:d3:dc:6f:d0:2a:09:91:87:55:59:12:41:c5:9f:e0:ba:
00:3e:29:3d:fd:64:93:39:da:cf:05:42:dd:99:24:40:d3:e0:
29:6b:10:e7:dc:85:58:01:01:22:43:82:69:d4:fd:b1:d7:24:
d1:d5:87:20:fa:dc:51:ee:48:ce:5c:c8:90:bf:1d:09:08:dc:
6c:0b:f4:88:16:7a:f6:27:ed:4f:9c:10:ee:88:ad:c9:f0:86:
db:ed:84:d9:d6:b4:f6:91:8e:6f:9f:28:55:38:77:cc:37:33:
a7:6c:45:7e:90:7a:c4:62:44:2e:c9:90:12:32:da:4b:2a:2b:
ca:7b:9e:62:32:ea:1b:07:5b:f9:89:58:a0:4f:0f:3c:49:ca:
2f:6f:95:72:a1:ef:db:d4:2b:55:14:4a:0b:bc:73:b2:56:ec:
1d:fb:8e:b2:f0:82:51:69:c8:29:93:9e:50:fe:ca:47:27:df:
1b:55:e8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:55:35 2025 by rpki-client