Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/lLgPzNrIYmtNfXY3WPp-fPMUEYU.roa
File: lLgPzNrIYmtNfXY3WPp-fPMUEYU.roa (raw, json)
Hash identifier: OaGMS8N36o43A9RI4EoDlUQq50SWqO5qzGHhpWj7ufo=
Subject key identifier: 94:B8:0F:CC:DA:C8:62:6B:4D:7D:76:37:58:FA:7E:7C:F3:14:11:85
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 019425219B4420BA0FF6D10F0A7B6A3A49B4
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/lLgPzNrIYmtNfXY3WPp-fPMUEYU.roa
Signing time: Thu 02 Jan 2025 03:49:06 +0000
ROA not before: Thu 02 Jan 2025 03:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140915
IP address blocks: 2a13:a5c3:ff10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9b:44:20:ba:0f:f6:d1:0f:0a:7b:6a:3a:49:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94b80fccdac8626b4d7d763758fa7e7cf3141185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:c0:c8:d6:c0:e5:e7:54:87:74:51:43:f3:
93:6e:63:34:8b:dd:5d:50:e0:da:1d:dc:a1:74:3c:
82:51:51:f5:02:84:c2:9a:f8:db:6b:a5:8c:1f:b7:
65:e3:4e:f5:94:2f:42:4f:41:59:0b:12:63:4c:ae:
fa:e5:ba:89:5e:65:1f:00:95:3f:02:2c:03:fc:3e:
84:be:19:ad:62:13:50:64:3c:ca:79:16:af:68:60:
39:c9:5b:b8:32:4d:95:48:43:94:29:46:8f:fe:c8:
a0:5a:c2:1c:46:5d:64:c0:b0:a7:12:d9:a0:d1:57:
a8:8b:0e:c1:16:17:6c:77:23:56:d0:e1:9d:de:90:
56:dc:c3:74:44:03:ee:0f:f5:c1:3c:e7:85:ec:71:
67:a1:d9:7a:be:c7:84:0b:32:47:6a:ab:19:8c:39:
ca:be:13:0a:b3:b9:f8:ab:35:da:3f:6f:cd:28:39:
13:cf:98:b1:7b:43:9c:2c:93:89:bd:d4:13:03:e3:
fa:31:82:f3:82:a4:cc:5c:d5:8c:86:59:ce:be:4b:
ab:5a:07:42:54:06:1f:62:d0:bb:7d:e2:50:02:6b:
56:5d:7c:99:3c:49:e2:5c:a6:7e:a3:a9:c3:07:f6:
33:c7:21:11:bb:31:31:6a:77:0c:d4:c3:63:e0:ef:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B8:0F:CC:DA:C8:62:6B:4D:7D:76:37:58:FA:7E:7C:F3:14:11:85
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/lLgPzNrIYmtNfXY3WPp-fPMUEYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c3:ff10::/44
Signature Algorithm: sha256WithRSAEncryption
55:3f:9c:c6:c8:8c:9c:6f:9e:fd:a6:78:e1:78:39:fd:67:ac:
51:ad:53:f6:c7:be:a1:74:f8:90:61:0c:bf:7f:87:6e:d5:28:
3a:7a:c3:9f:7b:ef:d0:a4:47:2f:bf:2a:16:c8:64:5a:24:19:
3a:9a:5b:98:ee:b0:62:43:52:15:ff:d6:23:24:53:4b:47:15:
b7:87:51:c0:ec:41:b2:c9:8c:d5:90:d7:ca:f2:5f:46:3f:52:
62:af:a2:40:78:c3:56:19:a5:35:9d:b1:e9:d0:f1:38:07:7d:
24:75:9a:a1:1a:3b:6c:99:fe:9a:04:38:2a:82:26:11:0e:12:
6a:41:5c:50:1a:28:6e:f9:17:3c:81:c4:60:2b:5d:a7:83:c0:
a2:3e:43:81:99:20:ce:c3:72:7f:e3:5d:7d:a1:68:6b:51:c8:
4d:9d:7c:51:11:6d:52:eb:2f:4b:59:0f:5e:fb:c6:69:85:eb:
4a:e3:6f:5b:10:c9:cb:9c:b7:1c:58:63:cd:68:bc:4c:cb:3d:
39:40:8b:cd:9b:d2:da:3c:d0:e3:72:03:a3:ec:3d:61:cc:bc:
81:dc:47:f5:ea:e0:20:16:75:8b:94:76:8d:91:b9:04:89:8a:
3f:80:06:c1:27:ac:cb:81:00:5e:59:08:78:6a:9c:70:ac:83:
44:ac:22:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:05:47 2025 by rpki-client