Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/LwjuDBy22G2-Q-2JO3jMhOy1eNU.roa
File: LwjuDBy22G2-Q-2JO3jMhOy1eNU.roa (raw, json)
Hash identifier: lEUkgsAO72uMMjQemqqZ36mEX8JKjX4GaMbgSM4hzTI=
Subject key identifier: 2F:08:EE:0C:1C:B6:D8:6D:BE:43:ED:89:3B:78:CC:84:EC:B5:78:D5
Certificate issuer: /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Certificate serial: 0194206876260997521323AE0C4E8E8FCE12
Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/LwjuDBy22G2-Q-2JO3jMhOy1eNU.roa
Signing time: Wed 01 Jan 2025 05:48:24 +0000
ROA not before: Wed 01 Jan 2025 05:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202560
IP address blocks: 2001:67c:74::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:76:26:09:97:52:13:23:ae:0c:4e:8e:8f:ce:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Validity
Not Before: Jan 1 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f08ee0c1cb6d86dbe43ed893b78cc84ecb578d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:fc:83:52:06:62:ba:dc:42:9c:8a:22:c5:
64:d4:6e:24:ce:85:d5:49:23:31:5b:ed:94:eb:aa:
eb:5f:2d:f2:7f:86:ec:20:33:df:f1:17:0e:98:06:
a0:4b:96:70:23:c6:27:a3:47:a6:7d:17:73:d6:63:
fc:5c:fa:c4:fa:6c:fb:c2:b0:03:c0:de:9c:d9:87:
5b:fe:8b:dc:0e:2e:01:77:fe:41:38:f9:9f:a3:b0:
85:c1:2e:e6:36:d2:68:bd:c5:89:b7:7e:0f:9c:b0:
d8:7d:61:44:90:a8:f6:ba:d6:fd:71:49:66:3b:52:
23:43:62:59:ef:b9:17:85:fe:29:1f:69:f9:d1:b5:
da:5e:39:f1:34:44:cb:62:18:ef:fc:36:37:8c:76:
c6:cb:f0:50:79:c0:86:e4:06:30:26:0f:96:dd:87:
19:45:0a:17:cc:d5:04:9a:f2:46:7a:8a:81:14:87:
93:ae:8d:c2:a3:3e:a0:7c:d6:9c:06:37:2e:5c:ec:
ba:21:46:55:8a:7a:6e:74:f3:b1:d9:58:7d:22:28:
24:d2:9f:bb:2a:b1:9f:68:59:72:f9:89:ca:f4:00:
ee:d0:c6:82:b4:3a:95:83:e2:10:e7:0b:2a:8d:a4:
7c:34:0c:b1:46:06:5d:04:d7:6d:75:f0:6e:ab:46:
85:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:08:EE:0C:1C:B6:D8:6D:BE:43:ED:89:3B:78:CC:84:EC:B5:78:D5
X509v3 Authority Key Identifier:
keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/LwjuDBy22G2-Q-2JO3jMhOy1eNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:74::/48
Signature Algorithm: sha256WithRSAEncryption
4c:6b:89:14:be:76:84:94:09:50:5e:71:46:a6:b3:78:de:6e:
0b:5c:a5:10:13:d2:b8:7d:a6:72:1a:ce:84:d8:40:81:a4:0e:
0b:f7:10:41:93:13:d0:95:ff:3d:83:5c:e0:38:e0:d1:ae:70:
39:81:9e:29:39:f7:84:36:48:d4:a7:ad:1c:03:ea:bb:85:32:
ec:eb:79:30:f9:79:f7:7f:87:7c:6f:a1:21:bc:76:6a:48:48:
7f:8c:35:d0:ef:10:89:44:21:02:7a:18:1a:c6:2b:e4:92:2f:
d3:44:8c:e0:36:50:21:96:be:44:c1:a0:9d:a7:31:28:57:45:
33:1a:93:43:8d:f9:40:8e:fe:7e:0e:b7:a8:d7:6b:0e:01:0e:
2d:07:21:4d:72:da:f8:70:58:b9:5b:a2:bf:17:ab:6a:f3:74:
4e:71:dd:22:b8:f5:cc:99:be:39:6b:7b:63:ec:7d:64:a7:4e:
f6:77:25:b8:2f:c6:46:d0:2c:05:82:43:30:67:c0:b6:5d:38:
3c:04:8e:6b:c0:c0:80:ac:72:47:b6:f7:a9:b1:71:8c:12:f4:
62:1b:de:5d:76:1c:90:e0:d2:b0:2a:e9:4a:c2:cc:b8:e7:48:
bc:fc:fb:9c:e9:3e:2f:07:5c:3c:4e:9c:66:ec:1f:3d:5d:b6:
1b:db:e7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:15 2025 by rpki-client