Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lmRHWLB9TfoskDgwmkeCSVqrhyw.roa
File: lmRHWLB9TfoskDgwmkeCSVqrhyw.roa (raw, json)
Hash identifier: k6UZgF22LAuPqaCuQ4niQyHJ3zsM1lyd0OkBww1OWLo=
Subject key identifier: 96:64:47:58:B0:7D:4D:FA:2C:90:38:30:9A:47:82:49:5A:AB:87:2C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521EF8C138E865C9231E0A26DF2E8E3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lmRHWLB9TfoskDgwmkeCSVqrhyw.roa
Signing time: Thu 02 Jan 2025 03:49:28 +0000
ROA not before: Thu 02 Jan 2025 03:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151202
IP address blocks: 2a10:ccc0:cc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ef:8c:13:8e:86:5c:92:31:e0:a2:6d:f2:e8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96644758b07d4dfa2c9038309a4782495aab872c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c0:8b:62:a1:7d:55:71:61:1c:60:88:13:7a:
47:dc:75:83:74:cb:d9:e8:51:0e:42:19:f3:06:ee:
c4:e0:2f:b9:b1:c3:9c:bc:67:b5:7f:8a:85:fe:bb:
09:5e:8e:72:46:34:e9:a6:71:20:b8:88:f9:8d:b5:
f4:70:52:47:36:de:57:6c:92:6f:09:e6:ef:fb:f5:
d3:f0:48:b6:bb:3f:56:35:27:2c:61:ca:d3:26:00:
b3:aa:8e:90:b9:b1:bd:a3:f9:fe:a6:18:5a:71:a5:
21:94:a0:0f:4f:47:aa:05:b6:d5:ea:7b:02:bc:ad:
cf:ef:9e:2b:54:2a:ac:d9:2a:88:98:ca:ea:d8:a6:
46:4a:7d:85:e0:e2:87:95:51:ff:70:38:ac:e1:4a:
9a:6d:d1:3b:fe:d0:ea:05:9f:74:7f:45:88:1c:cd:
a9:a2:76:5f:29:9c:5e:84:ef:44:06:22:9a:d5:08:
eb:ae:2e:7d:00:dc:f3:53:08:63:2e:d0:0a:ba:83:
0b:54:95:8a:84:e8:9b:a8:13:57:cc:21:63:c9:6f:
42:59:00:53:00:90:97:82:67:25:c8:a7:35:ac:63:
58:f1:da:5b:03:18:8e:e4:91:f4:37:23:cf:61:66:
95:1c:2f:d8:0c:6e:16:54:6f:43:2c:fa:42:bf:a0:
1c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:64:47:58:B0:7D:4D:FA:2C:90:38:30:9A:47:82:49:5A:AB:87:2C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lmRHWLB9TfoskDgwmkeCSVqrhyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:cc0::/44
Signature Algorithm: sha256WithRSAEncryption
82:0d:a6:7a:4b:f8:14:4f:30:e6:a2:be:e1:ba:b0:80:fd:2b:
ca:5f:1e:d8:23:90:d4:ab:bf:e6:79:08:1a:12:ea:25:70:dd:
e1:09:db:48:0d:69:15:bf:37:58:05:e4:5c:f7:45:7c:c0:88:
e6:22:dd:7b:e5:a7:c7:a8:dc:2e:04:04:9a:32:62:7c:41:10:
25:32:f5:22:01:c6:6c:89:69:0e:56:48:4e:86:6a:a2:33:ad:
e9:32:af:73:ad:d0:38:f8:a3:8d:05:0f:29:ef:d0:54:cc:4e:
38:21:85:93:0c:46:6e:04:11:18:f1:14:c8:31:09:0e:d7:7c:
0d:8c:a1:14:09:4c:a9:22:08:63:c3:68:b8:07:07:37:66:76:
2b:3f:36:09:cb:2f:c6:37:ee:57:7b:57:76:68:c9:f7:51:07:
0d:2b:f6:2c:97:ca:9e:e7:bf:b0:65:40:3f:fd:19:17:a4:72:
5b:f7:25:9f:bc:9f:5e:3c:f7:2f:58:0c:49:0c:d6:77:e8:f2:
a1:88:98:78:96:2e:09:dd:37:fc:23:01:f2:cd:69:8a:4b:b7:
f6:7e:79:14:4e:22:49:5e:1a:43:29:69:31:6e:32:68:08:1b:
2f:0e:d8:e3:d1:b3:24:74:04:68:07:0a:65:a9:3f:00:66:1f:
7d:e7:71:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:59:28 2025 by rpki-client