Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/Lyt3wxp7GPsYmae1yjcH7ZriVhY.roa
File: Lyt3wxp7GPsYmae1yjcH7ZriVhY.roa (raw, json)
Hash identifier: hPKn4hG6PTy5BGSQf4AvDzlOXQQIjurdWjZynBc0Dss=
Subject key identifier: 2F:2B:77:C3:1A:7B:18:FB:18:99:A7:B5:CA:37:07:ED:9A:E2:56:16
Certificate issuer: /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Certificate serial: 01942143F493EB84184D243637BC1684E9F5
Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/Lyt3wxp7GPsYmae1yjcH7ZriVhY.roa
Signing time: Wed 01 Jan 2025 09:48:09 +0000
ROA not before: Wed 01 Jan 2025 09:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207893
IP address blocks: 2a0f:ec80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f4:93:eb:84:18:4d:24:36:37:bc:16:84:e9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Validity
Not Before: Jan 1 09:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f2b77c31a7b18fb1899a7b5ca3707ed9ae25616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:89:58:52:67:ed:fc:2b:14:8d:c7:80:90:
40:25:82:ec:06:ff:1f:ff:33:4f:c9:0b:31:a2:be:
0a:f1:03:c8:19:09:d8:db:e8:57:35:63:0b:a3:78:
16:80:9c:aa:b3:e5:57:1a:b0:6c:3c:34:c8:d0:8d:
5c:d8:d5:0e:7b:f3:0a:2b:f8:93:ce:49:5b:20:74:
68:a4:b0:c2:e2:d8:04:69:38:bd:d2:40:e2:50:4f:
8f:18:e1:71:ee:cf:af:5b:1d:98:0b:26:61:6a:74:
c3:88:fb:de:de:ab:9c:85:39:98:09:a4:33:63:94:
f8:8d:57:ca:a4:b0:6c:a0:61:de:97:67:c9:64:02:
d0:c6:57:b3:b8:37:19:24:27:b0:dd:f5:42:b9:bc:
78:04:ad:71:7e:28:b2:9a:3d:75:63:9d:c8:b8:bc:
83:af:14:96:60:a5:6b:dd:79:af:f7:ed:f4:84:e2:
f7:79:62:38:3b:d1:6c:a4:95:7d:2a:47:83:f2:02:
fa:fa:f8:34:89:ef:4e:a5:01:8b:ff:03:e4:bc:22:
13:04:93:48:35:d2:fb:7b:aa:04:9b:6f:d6:c7:59:
78:2e:e0:74:e0:25:3b:88:29:1c:e8:dd:1f:2d:9e:
8e:1b:06:a0:50:f9:65:c2:d9:44:3b:40:81:f0:79:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2B:77:C3:1A:7B:18:FB:18:99:A7:B5:CA:37:07:ED:9A:E2:56:16
X509v3 Authority Key Identifier:
keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/Lyt3wxp7GPsYmae1yjcH7ZriVhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ec80::/29
Signature Algorithm: sha256WithRSAEncryption
32:a9:4d:58:62:c6:4a:07:2e:a6:de:e8:cf:87:ae:6a:10:65:
4f:a2:fa:71:9e:ad:76:75:b9:0a:ce:b0:f6:8b:ab:0f:c1:2e:
bd:db:e9:45:33:4f:3d:c5:e1:39:39:d5:8d:58:b3:b2:8a:6b:
f6:f4:b4:65:de:9e:30:2a:16:f6:6e:5c:ba:07:51:78:dd:cb:
37:d6:ff:36:98:05:3d:30:b1:b8:3e:e3:7a:b9:85:23:1c:69:
a9:21:eb:31:ff:a7:d9:6a:2b:66:03:c3:d4:ac:fc:79:f2:bb:
54:4d:4d:e7:2c:f6:39:16:94:3c:6d:0e:f7:21:d3:0c:aa:f5:
36:97:f4:a5:17:3e:33:6e:c4:96:d9:14:26:d3:ac:7e:e2:6b:
ab:c1:b8:55:34:ef:fe:cf:bf:12:20:1f:e3:44:ee:8c:8a:fd:
83:c2:73:2c:77:c4:cf:21:ab:9b:6d:05:e7:eb:49:cb:e7:11:
c4:1e:0a:0d:f8:f3:07:93:87:91:a6:7a:e8:ec:bb:f7:6f:1a:
eb:2c:09:f1:4c:67:e0:f5:24:dc:03:ad:c3:c2:94:0f:76:e7:
22:2d:2f:82:6c:32:a9:4f:ad:d2:5f:47:a1:66:76:a9:41:17:
98:ca:44:74:1b:2a:4a:94:ff:a9:17:3e:1c:08:06:97:41:7b:
5d:74:bf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:55 2025 by rpki-client