Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/lVXMGaXCeYAS9UTzuCTj9xPIgOs.roa
File: lVXMGaXCeYAS9UTzuCTj9xPIgOs.roa (raw, json)
Hash identifier: ACZLuIV4fCglmS12ajGiBEyZ0FBoWBDoJRm4zWyNSbY=
Subject key identifier: 95:55:CC:19:A5:C2:79:80:12:F5:44:F3:B8:24:E3:F7:13:C8:80:EB
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 019427B5EFF6A73571A7E1982EACD9C731EB
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/lVXMGaXCeYAS9UTzuCTj9xPIgOs.roa
Signing time: Thu 02 Jan 2025 15:50:22 +0000
ROA not before: Thu 02 Jan 2025 15:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197962
IP address blocks: 2a10:503::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ef:f6:a7:35:71:a7:e1:98:2e:ac:d9:c7:31:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Jan 2 15:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9555cc19a5c2798012f544f3b824e3f713c880eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8e:cf:59:75:5f:9b:aa:90:d7:80:aa:aa:f1:
27:9e:98:99:52:b3:f8:02:8a:bd:78:d8:23:a0:de:
7c:bb:ec:10:43:eb:a6:44:60:4c:68:d6:da:f4:37:
52:92:a5:57:17:76:e8:ea:b2:61:f0:63:e1:6c:73:
0a:00:2e:37:d2:d5:91:3d:17:07:a6:1c:e3:a6:6c:
6f:8e:d0:1a:85:46:61:d8:53:29:a7:40:40:3d:bf:
69:16:56:23:1f:c5:44:61:29:53:89:24:ed:d7:e0:
ea:e1:5e:c8:91:2b:a2:00:1e:b3:de:06:9d:42:a3:
32:b9:1b:7a:18:6f:a1:e4:f4:0b:fb:49:99:c9:3d:
61:8f:34:51:f2:ae:41:86:93:54:15:09:37:f4:13:
b7:4b:98:df:4f:2b:89:06:7f:15:22:a5:26:1e:95:
aa:15:8d:85:9f:b7:5d:70:12:82:f0:1c:12:61:bb:
e9:89:f0:4a:9f:01:38:a3:89:21:a6:97:64:3b:c7:
28:22:5e:aa:4e:98:cd:2e:09:6d:a6:88:d4:b5:f0:
f5:96:5f:8b:79:17:1e:7c:0e:17:67:62:93:ed:63:
19:03:e6:ac:ae:50:aa:c5:65:54:4e:e2:a7:b8:99:
17:5a:9d:65:e5:fa:4b:bc:1b:07:4a:42:09:0a:ad:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:55:CC:19:A5:C2:79:80:12:F5:44:F3:B8:24:E3:F7:13:C8:80:EB
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/lVXMGaXCeYAS9UTzuCTj9xPIgOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:503::/32
Signature Algorithm: sha256WithRSAEncryption
1c:43:49:c4:62:b3:3e:c0:47:b1:ce:ab:75:12:6a:f0:76:08:
5b:ee:3c:0e:7f:a1:26:48:ff:3a:94:db:55:52:d8:47:2f:60:
e7:93:df:d6:12:65:93:e2:37:be:8f:71:94:9c:2c:81:fb:34:
2c:d2:a0:b8:da:ed:18:b1:ee:d1:2b:2b:93:4b:9d:11:f8:00:
a0:c2:94:94:62:4f:92:f1:44:4b:80:23:36:47:ad:7f:d4:3c:
35:11:33:0a:31:21:9c:62:94:9f:f6:85:0b:92:f0:35:fe:94:
ab:8c:eb:a9:e3:ba:79:72:f1:0f:6b:53:58:1b:fb:6c:d9:1d:
bb:cf:a9:60:cc:fb:a1:66:71:74:7c:fc:3d:01:74:b6:74:50:
f8:2e:63:43:ce:f5:d9:c6:c8:18:db:6c:b9:3c:90:da:5e:30:
bb:d2:30:56:8f:7d:9e:93:18:f3:56:67:cf:de:b3:d0:a9:c7:
57:d9:7a:91:c2:d2:15:3e:0f:45:fb:e8:bc:af:e3:91:25:50:
60:39:59:40:4d:32:05:99:7c:68:77:23:11:cc:7d:6a:92:23:
4e:29:2f:4d:69:8d:b4:d4:1e:f3:eb:2b:12:e3:de:60:9b:10:
ed:7a:d4:8f:14:2b:2c:18:97:3c:a5:25:72:14:9f:5f:96:56:
a7:75:ef:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:18 2025 by rpki-client