Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/LW11wESbT2hocwdKYSbs6P71AKA.roa
File: LW11wESbT2hocwdKYSbs6P71AKA.roa (raw, json)
Hash identifier: GuYU5G46KcnUJ43J5q6WCf+WZxw+qQFx0MBht9uI9W0=
Subject key identifier: 2D:6D:75:C0:44:9B:4F:68:68:73:07:4A:61:26:EC:E8:FE:F5:00:A0
Certificate issuer: /CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
Certificate serial: 01941FFA7B426C68A9DEF46EA895883ED8F3
Authority key identifier: DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/LW11wESbT2hocwdKYSbs6P71AKA.roa
Signing time: Wed 01 Jan 2025 03:48:16 +0000
ROA not before: Wed 01 Jan 2025 03:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39513
IP address blocks: 2a0c:d540:fe00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7b:42:6c:68:a9:de:f4:6e:a8:95:88:3e:d8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d6d75c0449b4f686873074a6126ece8fef500a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:fc:11:ea:91:df:b3:f0:c5:54:24:e1:68:
0f:05:47:19:ba:04:b9:81:71:ae:11:ec:a7:5f:35:
79:8c:c6:ff:97:b2:9d:ad:3a:c3:6e:d6:f7:04:31:
35:b6:36:d5:fe:3a:de:76:da:e3:0a:52:3f:14:db:
4f:d1:78:bd:97:61:04:1b:e9:cd:27:f7:d4:92:ec:
6e:10:7a:4f:1e:72:54:46:6b:39:dc:c6:79:ca:35:
54:37:55:bb:16:60:6f:95:1d:ca:07:f8:e8:65:1d:
3e:8c:f5:de:7e:21:54:23:62:9f:d1:b4:13:2d:00:
9b:99:d2:47:11:42:c9:79:81:e3:7a:f7:97:87:8f:
2c:c9:c9:8b:73:5c:0c:c4:1f:c6:17:0e:67:2c:95:
3c:f0:29:ca:46:1f:fe:f0:57:e6:0e:5a:53:48:22:
f6:3c:8b:0d:74:23:95:e5:0b:f8:6e:c3:19:55:c2:
3a:80:75:b6:b6:d3:76:7a:2d:ab:88:19:82:bd:02:
8a:98:fa:31:8c:15:88:67:af:74:ed:c7:7a:23:2e:
0b:55:45:bb:bb:73:82:70:a4:d2:da:c5:53:05:70:
0d:b2:ec:52:d7:ec:44:32:12:c8:4f:4e:ed:61:46:
b9:10:01:57:d3:f5:d4:c7:e9:8c:ef:2e:7c:8e:49:
25:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6D:75:C0:44:9B:4F:68:68:73:07:4A:61:26:EC:E8:FE:F5:00:A0
X509v3 Authority Key Identifier:
keyid:DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/LW11wESbT2hocwdKYSbs6P71AKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:d540:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
30:dc:76:e4:2b:c3:12:62:94:63:f5:15:cf:ec:7c:37:47:7e:
2d:76:ad:a3:f6:7a:3e:8f:bd:21:fa:5b:a0:c8:45:ec:2a:9f:
e6:9e:32:03:0a:53:b7:0f:2f:ba:68:cf:d3:32:00:5e:9c:51:
86:0e:84:4c:4b:35:9a:6b:d2:99:f5:a1:ae:63:c0:65:63:4b:
b0:81:30:72:98:f1:f9:d4:b6:b8:09:79:44:98:a3:ee:11:e7:
ba:10:93:9f:74:69:db:1d:47:57:2d:12:2c:aa:41:6c:9a:51:
c4:df:41:bd:82:75:82:70:13:5d:6a:b1:c5:30:ac:84:b8:77:
56:aa:e6:07:81:9c:0c:07:88:f4:32:8f:86:a8:4e:ca:96:4a:
b2:c3:71:d3:ba:7d:20:34:f0:f0:44:0a:8d:3d:9a:9e:1a:71:
ab:fb:c1:c2:7e:91:45:1f:c4:f4:66:22:96:c4:6c:8b:ff:80:
8f:fb:8b:03:c1:b1:48:39:30:58:71:5c:a4:75:78:23:38:03:
c0:3b:78:ec:92:d8:71:c1:3f:8f:be:f4:a2:c1:82:2f:91:98:
2a:b2:bb:4a:23:1f:63:6a:5f:d8:e3:b7:3a:3f:d8:f3:4e:03:
52:83:86:bc:bc:63:df:49:18:b7:cd:f6:3a:6a:3f:32:a0:19:
c0:9f:51:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:06 2025 by rpki-client