Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/LsVqREgxEvpbs-pgSooNXLhfRcY.roa
File: LsVqREgxEvpbs-pgSooNXLhfRcY.roa (raw, json)
Hash identifier: 0S+0r/0mz1CjD+30q6AYjUcjy/aYKxmGuL/Pwc5zhuQ=
Subject key identifier: 2E:C5:6A:44:48:31:12:FA:5B:B3:EA:60:4A:8A:0D:5C:B8:5F:45:C6
Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial: 019423D6B8F3E0FD73412A4F0A6275508064
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/LsVqREgxEvpbs-pgSooNXLhfRcY.roa
Signing time: Wed 01 Jan 2025 21:47:42 +0000
ROA not before: Wed 01 Jan 2025 21:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208772
IP address blocks: 2a0f:d607::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b8:f3:e0:fd:73:41:2a:4f:0a:62:75:50:80:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Validity
Not Before: Jan 1 21:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ec56a44483112fa5bb3ea604a8a0d5cb85f45c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:b0:c0:04:5d:16:46:57:4d:79:57:02:36:
09:fe:a4:72:43:da:0a:28:5b:cf:87:c1:b7:c3:e8:
d6:3a:2b:f1:51:02:0d:7f:b2:c0:05:60:f2:50:c3:
9c:04:fc:ef:dd:38:df:c2:cd:d8:e5:b1:42:08:81:
45:be:72:1d:ba:1f:31:73:5d:06:9e:23:42:f2:fc:
f2:a7:35:a6:b0:10:52:aa:ae:9f:7c:b3:84:7b:50:
65:ba:74:f4:10:5d:9b:4b:87:eb:44:4b:b9:9c:48:
96:8f:f9:41:9f:77:2c:3f:1f:73:db:74:df:8f:a4:
ab:62:eb:b1:60:c8:d7:d8:15:58:a8:7b:ed:16:d6:
83:d7:65:cb:97:27:77:3a:02:9b:71:8c:86:1b:b5:
30:40:20:e2:70:e0:ad:f2:41:53:71:b9:f8:03:f1:
48:91:2f:03:b2:c4:d8:e7:ad:a8:2d:8a:dc:02:e6:
ed:0d:86:3f:e1:aa:a5:d4:c2:37:ab:14:7c:ca:52:
48:67:1c:f5:35:01:75:61:60:4c:88:48:46:91:8a:
4e:5b:87:52:44:9d:1a:3d:0f:67:61:14:d6:55:16:
a0:00:26:48:b0:17:14:92:12:e4:42:b8:5b:a9:cb:
79:57:38:6b:ab:3d:61:f4:47:a1:59:d7:1e:b2:6f:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C5:6A:44:48:31:12:FA:5B:B3:EA:60:4A:8A:0D:5C:B8:5F:45:C6
X509v3 Authority Key Identifier:
keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/LsVqREgxEvpbs-pgSooNXLhfRcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:d607::/44
Signature Algorithm: sha256WithRSAEncryption
0d:00:b9:4e:fa:e5:d5:c0:09:fe:05:e5:1f:73:3a:e9:58:e5:
cc:64:ec:1e:29:34:cb:e4:e1:00:57:a1:e4:d6:66:37:9d:46:
cb:cc:1b:77:83:58:e7:62:24:89:ec:aa:2d:49:17:7f:d5:3d:
80:ae:84:e7:01:6f:34:d7:da:26:1c:1e:af:2f:8f:6a:99:ac:
90:7c:dc:93:dd:65:64:33:ff:cc:f3:63:67:ae:aa:97:1e:00:
af:b8:8e:54:d0:62:a9:3e:cf:b6:ab:8c:e8:00:6b:fb:3d:15:
93:92:2f:6c:8a:04:72:aa:2d:f2:6c:72:a0:75:bb:2d:cb:8b:
a6:fb:b5:cf:d3:0e:06:34:5d:36:20:25:60:02:21:af:55:d7:
15:82:7b:17:6d:4d:88:41:c5:ec:fe:7f:ee:62:18:52:65:d3:
96:82:85:b8:a5:fb:50:03:28:03:55:b7:f2:17:16:96:0a:4f:
32:3d:4b:1b:b1:16:2e:fe:60:20:b0:5e:c1:83:08:ed:2b:7b:
df:e0:fc:bf:d1:13:a0:48:2a:de:16:5d:d5:c4:dd:12:6e:56:
1d:c3:8d:f4:30:e8:cb:90:9d:0d:e1:14:c4:02:27:f9:39:0b:
24:90:61:58:2c:24:b1:4e:5e:67:21:a3:5a:f9:d7:ce:14:6f:
c4:0d:a1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:30 2025 by rpki-client