Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/lTDGFOEHleeAgYpGLUXAmxQeWF4.roa
File: lTDGFOEHleeAgYpGLUXAmxQeWF4.roa (raw, json)
Hash identifier: MXBaSrVfYLxOUa1qMNqlBVqGPuFkLVafjJsmfk4Jfmw=
Subject key identifier: 95:30:C6:14:E1:07:95:E7:80:81:8A:46:2D:45:C0:9B:14:1E:58:5E
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 01941F8C3E696132C8A4ABB8BD683803BDDC
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/lTDGFOEHleeAgYpGLUXAmxQeWF4.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202269
IP address blocks: 2a0e:b080::/30 maxlen: 30
2a0e:b084::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3e:69:61:32:c8:a4:ab:b8:bd:68:38:03:bd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9530c614e10795e780818a462d45c09b141e585e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:43:fb:a8:f6:c7:2a:5b:37:5c:a5:5e:0e:16:
24:97:8f:35:ce:0a:c7:4b:a7:1c:89:21:24:d9:80:
be:f1:0c:6f:9d:7a:1b:f0:5a:36:cf:89:14:71:82:
36:16:d8:13:62:86:fc:9c:ff:42:c0:56:8c:18:d5:
f0:b3:93:d1:ed:11:9a:45:07:47:92:df:da:7b:da:
2f:b1:c9:0e:fa:13:a7:88:9c:69:8a:36:39:72:e4:
af:00:da:3e:74:5a:19:53:1d:1f:f7:28:9a:e0:91:
d5:cc:44:2c:00:b2:1d:91:d3:ad:f7:ce:fd:a4:51:
a2:7b:e2:dd:f1:0b:74:ac:b3:b9:91:41:04:20:f4:
de:d6:ab:32:cd:44:3a:c7:a8:4f:42:80:61:d9:da:
34:93:dd:69:52:ca:b1:e7:04:3f:28:87:20:b8:30:
3f:52:5c:c0:c7:0a:ea:eb:64:14:6e:fb:c6:65:0c:
38:6a:99:eb:9d:9c:90:4a:8d:c8:67:1a:d9:85:d4:
26:b3:b9:b7:fa:cb:4a:eb:cc:58:2e:09:be:5e:dd:
96:38:8b:5d:1a:7a:19:69:0a:45:43:8d:24:dd:9a:
9d:ab:07:8c:0e:0b:97:ef:2e:9e:99:2e:b0:c2:56:
e2:80:2d:ad:41:f6:2d:65:d0:28:26:a7:2b:5f:91:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:30:C6:14:E1:07:95:E7:80:81:8A:46:2D:45:C0:9B:14:1E:58:5E
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/lTDGFOEHleeAgYpGLUXAmxQeWF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b080::/29
Signature Algorithm: sha256WithRSAEncryption
13:50:ed:26:39:54:30:b1:59:ac:23:35:08:51:3e:97:74:19:
6c:8b:75:9c:11:12:32:ff:70:98:ef:f7:fa:10:18:5b:46:54:
30:03:9a:05:eb:63:00:e8:23:b2:99:2d:f0:32:2a:66:21:69:
ae:a8:7f:76:53:8b:60:5c:98:54:f7:68:35:20:59:19:8a:17:
11:e9:b8:7c:32:5c:bf:ba:4b:0c:a4:12:b1:c8:89:be:bb:d6:
4b:0b:1a:45:95:4c:9f:d6:ea:6a:15:de:0f:58:fc:78:a2:bf:
0f:6c:17:09:c1:ee:50:9a:b8:d9:ae:0f:03:c1:b9:e6:c8:b7:
a7:d4:53:5d:23:e8:72:21:af:6d:46:a6:67:6b:0e:75:b8:1d:
d3:35:62:80:2a:8e:a7:9e:15:2c:5d:7f:fc:4b:55:ba:e7:fc:
d6:93:9a:02:ca:78:01:d0:43:73:1b:48:6c:2d:86:6e:f0:ef:
03:8e:6b:e0:c2:b0:bb:b3:33:59:20:49:db:83:f3:9b:b7:4b:
13:0b:59:be:bc:d7:e9:90:5d:61:79:e9:d0:6f:00:e7:49:2e:
20:d5:b2:9e:fa:ef:30:e0:fd:86:43:b5:d9:30:9e:ac:fa:f4:
b1:17:a8:46:71:27:fd:61:fc:10:cb:2d:d5:df:96:3c:51:5b:
7a:95:17:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:43 2025 by rpki-client