Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/lHJyuYCpT3G00KDqB6KZkqUUgW4.roa
File: lHJyuYCpT3G00KDqB6KZkqUUgW4.roa (raw, json)
Hash identifier: 2GVig2gGYeF+A3GrzHDyzSk+tMsVRojPDP29H+7XUT0=
Subject key identifier: 94:72:72:B9:80:A9:4F:71:B4:D0:A0:EA:07:A2:99:92:A5:14:81:6E
Certificate issuer: /CN=b1ee320df0464877d51745e314231b55c83b6845
Certificate serial: 01942068670E9833BB11494AFB04260490F3
Authority key identifier: B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/lHJyuYCpT3G00KDqB6KZkqUUgW4.roa
Signing time: Wed 01 Jan 2025 05:48:20 +0000
ROA not before: Wed 01 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2200
IP address blocks: 129.102.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:67:0e:98:33:bb:11:49:4a:fb:04:26:04:90:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ee320df0464877d51745e314231b55c83b6845
Validity
Not Before: Jan 1 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=947272b980a94f71b4d0a0ea07a29992a514816e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:29:de:2d:47:fe:40:6e:f8:61:4f:f1:63:
cb:d5:45:a7:02:7d:24:e2:74:7c:c5:3f:33:ab:14:
67:4a:ec:46:28:1f:11:eb:8e:75:07:bf:bb:7b:3a:
ad:21:8d:71:d6:c2:84:1e:b0:a0:89:8b:6f:fa:19:
38:80:8d:aa:63:7f:b6:a5:de:29:bb:67:b5:35:86:
37:f8:7e:0e:5c:3d:c0:ad:28:3e:fa:34:9b:56:57:
3f:a3:ee:67:9f:50:26:cd:f7:4e:d6:be:75:18:3f:
6a:11:dc:a1:7c:79:98:7d:b2:27:f1:29:22:31:89:
3e:9e:31:a4:0e:bb:6f:41:68:36:97:23:95:6c:47:
ea:ce:83:d6:0b:be:fa:c0:f3:7d:88:b6:fb:85:b4:
51:3d:c5:9f:0d:34:06:07:f4:cd:7c:51:6b:69:62:
22:d6:02:6a:43:7e:17:e7:94:a9:de:cd:e1:f3:1a:
59:3d:9a:87:18:66:80:10:57:dc:21:dd:49:89:8e:
72:f5:62:52:cd:35:94:68:6a:e0:ed:98:44:68:b0:
13:54:91:d1:ed:8d:d6:19:fb:ae:d1:e5:f9:e3:48:
69:28:ec:12:d8:04:e3:4a:9b:56:bc:bd:80:cb:27:
5a:b4:f9:9c:a0:49:4e:25:a0:27:cf:fd:53:c3:a4:
44:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:72:72:B9:80:A9:4F:71:B4:D0:A0:EA:07:A2:99:92:A5:14:81:6E
X509v3 Authority Key Identifier:
keyid:B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/lHJyuYCpT3G00KDqB6KZkqUUgW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:fe:aa:c9:07:8f:ec:fe:e4:a0:7a:13:59:18:c1:e1:26:94:
6c:a4:0e:c9:33:1b:e7:20:8d:dc:46:1c:8f:a5:d1:9b:e5:1f:
db:ed:0d:ec:d9:29:02:f1:e9:50:5c:f3:8e:06:5a:9a:26:3a:
0c:fd:e3:86:83:6f:4d:f9:b3:d4:4f:eb:3a:44:c8:bc:66:ea:
84:d0:83:2d:d8:f1:63:7a:42:f8:e1:59:7b:03:d6:f5:5f:f6:
5d:22:ac:43:c1:54:d1:93:c3:2c:1d:f3:3b:bd:d8:3d:f1:b8:
d1:01:1f:c2:27:1f:31:18:94:61:9b:0f:7a:bf:e7:4d:70:ee:
5a:5b:6e:e7:7b:8d:21:f2:ec:6f:42:58:d9:8d:c4:f2:57:40:
0a:92:15:5a:0f:4c:bf:a1:fb:87:ea:bc:4a:4a:44:19:3b:95:
ca:13:f6:df:16:e9:05:83:cb:bd:aa:68:bf:a0:b7:b1:ad:0d:
32:15:16:50:1a:21:03:fd:05:80:c0:df:fa:21:a1:51:39:16:
94:1f:ba:f3:20:f8:bd:87:e2:2e:80:14:56:a5:d7:49:a4:bc:
87:ec:3e:a9:45:ac:e4:8e:f7:51:ed:77:56:56:5d:39:0f:cc:
2a:49:2d:e1:1f:9f:79:23:ea:01:1f:6d:d7:c8:7b:ca:d0:8e:
71:d4:60:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:05 2025 by rpki-client