Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/lwlNrqm3r8NOZc8muUo80fFlOeY.roa
File: lwlNrqm3r8NOZc8muUo80fFlOeY.roa (raw, json)
Hash identifier: FfJzjpvXZQfdbT9Lc8mjBM1Q8TX5WkjUXsorwJal9Zo=
Subject key identifier: 97:09:4D:AE:A9:B7:AF:C3:4E:65:CF:26:B9:4A:3C:D1:F1:65:39:E6
Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404
Certificate serial: 0194228E0C5430BBB360BB4D4AA3C6899335
Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/lwlNrqm3r8NOZc8muUo80fFlOeY.roa
Signing time: Wed 01 Jan 2025 15:48:42 +0000
ROA not before: Wed 01 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213988
IP address blocks: 2a01:ffc6::/34 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0c:54:30:bb:b3:60:bb:4d:4a:a3:c6:89:93:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255876412d20fbb6cab823481782ac47703b4404
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97094daea9b7afc34e65cf26b94a3cd1f16539e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c7:61:bf:0a:f2:8f:39:cb:c4:70:bc:15:7e:
02:e9:1d:c9:71:ec:d3:63:5b:c5:1b:05:6a:c9:d5:
83:ae:79:dd:21:f5:94:cd:5c:5c:e6:a9:a4:a0:4c:
fb:58:2f:39:e0:7b:29:6e:91:3c:10:1f:39:ff:44:
38:31:8b:e4:63:65:35:70:74:d9:da:1d:eb:b9:ae:
27:6f:3c:b2:40:a9:0f:42:27:ac:db:6c:fb:4d:8e:
3b:48:2e:e2:34:4a:54:5b:7a:ba:76:97:a9:82:a5:
46:a3:09:fc:92:d1:21:b4:6f:cf:9c:81:87:8e:f5:
d5:77:f4:21:5b:44:80:8f:7f:07:86:76:b4:ee:25:
bd:af:0a:1b:e4:9a:58:65:7a:92:d5:12:c6:f4:34:
b6:85:e5:5e:39:2d:a1:41:df:6c:b1:7c:97:05:b1:
98:d6:22:5a:61:78:40:b4:a3:e4:f7:3a:b5:b2:f3:
df:b7:30:53:62:06:32:99:55:5c:6c:e7:50:c5:d2:
56:2a:dc:6b:10:00:5a:fe:70:fe:df:3f:6b:ec:44:
9c:89:bc:09:1f:4e:34:ee:58:1f:e5:a3:65:2b:94:
8e:1b:2f:13:6f:c8:5f:34:00:72:fc:7b:35:73:6c:
29:ac:1e:0b:1a:64:26:c1:5f:e2:8e:58:d4:2a:47:
0d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:09:4D:AE:A9:B7:AF:C3:4E:65:CF:26:B9:4A:3C:D1:F1:65:39:E6
X509v3 Authority Key Identifier:
keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/lwlNrqm3r8NOZc8muUo80fFlOeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ffc6::/34
Signature Algorithm: sha256WithRSAEncryption
82:f5:1b:9a:dc:eb:35:1c:62:a5:29:fd:50:69:ce:97:62:e3:
1d:e0:eb:16:13:08:42:60:f1:f6:7b:e7:8f:c3:23:4b:9b:f6:
60:43:9a:b4:50:7d:1e:5b:eb:2f:f6:85:db:55:b0:a3:ad:09:
44:7b:39:34:54:c7:ae:18:63:d1:f5:1c:1e:9a:08:72:88:c7:
59:45:b0:b0:e4:84:e8:19:ff:a7:77:1d:33:d4:c9:4a:bd:76:
0f:c3:f2:1b:fb:ef:46:4d:0e:20:be:7d:f6:03:1b:4d:e9:e4:
e3:dd:26:41:b8:7f:af:2a:37:48:30:de:8d:02:84:77:9e:93:
39:fd:e8:77:f1:20:60:84:81:dc:3e:93:54:6e:46:86:da:83:
d4:ee:94:6c:59:f6:3c:2f:67:b5:af:61:97:22:9a:06:97:e8:
d3:35:42:8a:0f:9b:fe:9d:13:14:f0:96:ab:c8:fe:6c:1b:58:
ba:b8:57:98:e7:6f:55:f8:8f:71:0a:2e:51:c3:f8:8d:16:2c:
f9:7d:f5:d3:b1:ec:78:a5:b7:f2:8f:8f:87:78:0d:fd:e0:9b:
93:d6:1e:4b:e2:6d:f5:6b:d1:f0:a6:ae:41:83:eb:27:ca:7b:
d5:aa:9b:c2:27:d3:d3:d6:d9:98:70:3f:c0:e8:c6:d6:44:92:
11:06:42:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:15:18 2025 by rpki-client