Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/ljHEtmGW3cEet7KrFAXFqk3Ea5o.roa
File: ljHEtmGW3cEet7KrFAXFqk3Ea5o.roa (raw, json)
Hash identifier: g9odyMeFUXbz4KA3It8y0JaaRZFHbE8uEJXFJGKvhPE=
Subject key identifier: 96:31:C4:B6:61:96:DD:C1:1E:B7:B2:AB:14:05:C5:AA:4D:C4:6B:9A
Certificate issuer: /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial: 0194252152E82525FE70DDF992703E56DC5C
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/ljHEtmGW3cEet7KrFAXFqk3Ea5o.roa
Signing time: Thu 02 Jan 2025 03:48:48 +0000
ROA not before: Thu 02 Jan 2025 03:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214171
IP address blocks: 2001:39c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:52:e8:25:25:fe:70:dd:f9:92:70:3e:56:dc:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
Validity
Not Before: Jan 2 03:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9631c4b66196ddc11eb7b2ab1405c5aa4dc46b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:9f:3f:3e:60:d8:b0:eb:eb:db:30:f1:61:
29:15:2e:bd:93:1e:cd:b3:63:1d:a5:f3:1a:9c:4a:
8a:b7:f7:26:0e:c9:99:19:91:2e:5f:26:77:2a:ec:
11:89:bb:0c:27:ba:44:53:11:91:35:67:d4:cc:37:
9f:e3:8b:16:2d:5d:cc:0f:1e:c3:b2:f2:cc:da:10:
1f:a8:80:09:4b:e3:1a:4b:49:20:ed:c3:01:22:12:
6d:dc:ee:51:0e:59:33:e0:42:3e:85:de:20:b4:bf:
2f:30:a3:ed:06:35:03:3d:9c:8a:1f:6a:a7:9b:33:
87:25:d8:46:57:e1:10:64:76:78:fb:ef:08:4c:69:
be:14:b8:61:d5:e6:a8:02:b4:35:58:a6:ef:f9:8b:
e2:c9:b4:35:ee:11:7f:da:bb:e7:45:45:bf:c2:0f:
ac:bf:d9:75:18:4b:1c:ab:e0:80:08:f9:31:9b:78:
dc:98:f5:b0:7f:96:8d:2f:90:59:82:bd:7f:a9:8a:
6a:7b:e4:93:50:d3:61:08:bb:e3:ca:db:75:ed:d6:
a4:2f:a9:15:4d:f7:db:44:24:db:a2:73:96:aa:b7:
15:e5:d2:75:3b:bd:9e:d9:62:a9:61:df:c0:07:53:
7c:0e:5c:3c:5b:40:b6:64:3e:88:1b:80:eb:a0:53:
f5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:31:C4:B6:61:96:DD:C1:1E:B7:B2:AB:14:05:C5:AA:4D:C4:6B:9A
X509v3 Authority Key Identifier:
keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/ljHEtmGW3cEet7KrFAXFqk3Ea5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:39c0::/29
Signature Algorithm: sha256WithRSAEncryption
2d:73:3d:c4:3c:31:0a:54:bd:1b:1e:e2:bf:67:89:11:62:b6:
11:11:4e:99:24:9e:60:03:f3:88:6f:4c:01:0e:29:9e:56:59:
77:66:f0:3d:ca:20:b6:17:b6:59:25:2e:6e:55:d5:92:02:77:
e0:49:02:df:06:aa:31:e5:a7:20:86:99:c8:09:99:58:bf:0d:
0f:e3:2e:a0:b1:0f:6e:ed:c1:8a:a2:2a:16:3f:e7:d3:3f:6e:
ad:24:5d:fe:97:1f:ff:7b:30:74:23:2d:36:df:a7:38:f9:ce:
bc:bb:23:e4:11:5d:77:d2:b2:88:24:77:ea:ca:8c:19:e5:e8:
35:46:5f:6e:df:37:a0:36:8a:19:70:4c:c1:53:af:28:22:0c:
f3:15:4a:e4:e6:69:26:25:29:56:4c:d9:80:ea:7f:bb:d6:cb:
ca:59:df:32:06:7b:21:82:03:68:a1:13:fc:24:ed:2b:bb:16:
11:18:94:aa:ce:c4:55:4a:6b:2b:8e:f8:47:71:4c:d3:8a:e5:
2e:f4:f1:5e:92:1d:ef:06:bc:3c:a3:66:63:77:30:39:0d:46:
4f:a9:2c:ef:30:fb:93:1e:b7:df:ed:9e:fc:ac:34:79:0c:1d:
55:ff:c5:eb:01:00:c7:73:2f:09:61:1c:91:11:c3:dd:a6:f5:
56:f5:71:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:11 2025 by rpki-client