Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/lxXNUCeQItpUU-WIqT27d6PPlu0.roa
File: lxXNUCeQItpUU-WIqT27d6PPlu0.roa (raw, json)
Hash identifier: gRV2uGVItKOTTis9BRa/lRn5duot/VIpG4JMEM2dMPg=
Subject key identifier: 97:15:CD:50:27:90:22:DA:54:53:E5:88:A9:3D:BB:77:A3:CF:96:ED
Certificate issuer: /CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Certificate serial: 019421445F6938A978C48380E9EEFCDEA61D
Authority key identifier: E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/lxXNUCeQItpUU-WIqT27d6PPlu0.roa
Signing time: Wed 01 Jan 2025 09:48:36 +0000
ROA not before: Wed 01 Jan 2025 09:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201567
IP address blocks: 2001:678:13c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5f:69:38:a9:78:c4:83:80:e9:ee:fc:de:a6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Validity
Not Before: Jan 1 09:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9715cd50279022da5453e588a93dbb77a3cf96ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:04:d8:b0:2e:ec:ce:a4:5b:46:f7:4d:8d:
a2:3c:ce:7c:65:01:18:31:89:8b:28:6a:be:19:a8:
bf:7d:d0:0d:41:3a:61:3d:f4:14:03:55:98:16:c9:
89:53:7a:a6:72:c5:5f:f9:6b:30:3e:6e:7b:eb:5f:
da:de:dd:ba:90:37:2c:db:1a:91:d5:85:70:8f:30:
a3:b5:25:e9:4a:b8:f1:a4:f2:94:8e:3f:9f:7a:fa:
39:be:aa:45:5e:5a:d3:be:6c:8a:13:8a:43:29:b1:
4b:d4:87:df:88:9e:b2:07:25:e9:12:39:b6:ce:72:
0d:98:41:b3:31:e2:3d:b0:44:25:d7:91:29:85:11:
ef:1d:09:dd:89:c5:b4:ed:97:97:af:14:a1:d2:a5:
cb:44:4a:43:ca:7d:26:cb:8c:09:ed:10:7f:be:5d:
d3:7a:24:2a:3a:b4:f6:0c:c5:87:3f:9c:16:39:89:
46:69:ce:80:45:1b:1c:ce:e8:7c:36:5e:f1:70:42:
c3:39:28:34:c4:de:ec:0c:ee:40:bd:a4:42:a0:87:
5f:92:c6:75:ca:bc:3e:7e:9e:0a:b8:75:2e:4e:bf:
63:f3:10:28:3e:cd:36:12:2b:d9:6d:a2:fb:66:89:
9e:91:c8:c6:47:a2:24:01:8b:b1:d4:c7:6c:ef:d3:
fc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:15:CD:50:27:90:22:DA:54:53:E5:88:A9:3D:BB:77:A3:CF:96:ED
X509v3 Authority Key Identifier:
keyid:E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/lxXNUCeQItpUU-WIqT27d6PPlu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:13c::/48
Signature Algorithm: sha256WithRSAEncryption
50:3b:a5:af:4e:5d:d4:9a:7d:85:ea:b1:68:fb:1b:f9:2e:ff:
68:5f:ad:fb:93:9a:9b:05:aa:b0:f3:c7:11:8c:93:d4:8a:a2:
2a:e2:d0:da:71:ff:e7:f8:ca:0c:f9:2e:ae:71:0f:a3:e5:ff:
5c:51:c4:13:0a:53:11:c7:3b:8d:bc:79:c5:4c:40:d3:23:3e:
29:c8:8f:eb:0d:10:10:df:ee:60:60:0f:4b:55:f5:02:b4:03:
9e:03:07:d4:51:7b:33:26:6b:a0:e7:7f:70:9b:e7:b1:cf:78:
77:e8:5b:1e:ba:42:90:69:13:d2:b6:51:94:46:6c:23:0b:4d:
00:b1:dc:a0:a8:33:1f:1f:94:f9:0a:ec:8f:b3:c5:ef:2b:ea:
f8:32:8d:e5:e5:ef:f9:95:c9:06:b1:08:1e:f9:05:52:57:bd:
e5:78:e7:af:f8:b1:79:6b:f3:ee:59:48:6e:b8:78:91:0f:b0:
9a:0c:3f:05:f6:b1:94:13:0f:06:03:d4:46:bd:18:74:c4:7c:
53:0c:4b:cb:f3:37:d5:22:fb:63:22:2d:63:5e:69:29:d6:e8:
5c:ed:1a:37:60:2f:68:5c:4a:25:e8:ff:6a:76:f5:f7:5e:3d:
cc:da:8d:f1:37:67:91:dc:45:ca:13:66:06:56:69:4c:da:2f:
20:2a:9c:8f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQhRF9pOKl4xIOA6e783qYdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjliYWQzMDYxODMyZGU5YjdkN2MzNzM3MzdmNDM0NmM2
YzA2ZTYwHhcNMjUwMTAxMDk0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzE1Y2Q1MDI3OTAyMmRhNTQ1M2U1ODhhOTNkYmI3N2EzY2Y5NmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAkE2LAu7M6kW0b3TY2iPM58ZQEY
MYmLKGq+Gai/fdANQTphPfQUA1WYFsmJU3qmcsVf+WswPm5761/a3t26kDcs2xqR
1YVwjzCjtSXpSrjxpPKUjj+fevo5vqpFXlrTvmyKE4pDKbFL1IffiJ6yByXpEjm2
znINmEGzMeI9sEQl15EphRHvHQndicW07ZeXrxSh0qXLREpDyn0my4wJ7RB/vl3T
eiQqOrT2DMWHP5wWOYlGac6ARRsczuh8Nl7xcELDOSg0xN7sDO5AvaRCoIdfksZ1
yrw+fp4KuHUuTr9j8xAoPs02EivZbaL7ZomekcjGR6IkAYux1Mds79P8oQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJcVzVAnkCLaVFPliKk9u3ejz5btMB8GA1UdIwQY
MBaAFOdputMGGDLem318Nzc39DRsbAbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJtNjB3WVlNdDZiZlh3M056ZjBOR3hzQnVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kMWJjZGEtOTI3MC00M2EzLWJhYWUt
MmNjOGRjNGYwMjIwLzEvbHhYTlVDZVFJdHBVVS1XSXFUMjdkNlBQbHUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kMWJjZGEtOTI3MC00M2EzLWJhYWUtMmNjOGRjNGYwMjIw
LzEvNTJtNjB3WVlNdDZiZlh3M056ZjBOR3hzQnVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAE8
MA0GCSqGSIb3DQEBCwUAA4IBAQBQO6WvTl3Umn2F6rFo+xv5Lv9oX637k5qbBaqw
88cRjJPUiqIq4tDacf/n+MoM+S6ucQ+j5f9cUcQTClMRxzuNvHnFTEDTIz4pyI/r
DRAQ3+5gYA9LVfUCtAOeAwfUUXszJmug539wm+exz3h36FseukKQaRPStlGURmwj
C00AsdygqDMfH5T5CuyPs8XvK+r4Mo3l5e/5lckGsQge+QVSV73leOev+LF5a/Pu
WUhuuHiRD7CaDD8F9rGUEw8GA9RGvRh0xHxTDEvL8zfVIvtjIi1jXmkp1uhc7Ro3
YC9oXEol6P9qdvX3Xj3M2o3xN2eR3EXKE2YGVmlM2i8gKpyP
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:09 2025 by rpki-client