Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/_LjXL3YpDt_zyQsAkB93yjvRiaQ.roa
File: _LjXL3YpDt_zyQsAkB93yjvRiaQ.roa (raw, json)
Hash identifier: ZQ7+7ZrSo0V28gXLcUC1wHDwSfOa/Id279ib+ZBn12k=
Subject key identifier: FC:B8:D7:2F:76:29:0E:DF:F3:C9:0B:00:90:1F:77:CA:3B:D1:89:A4
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B67280F2990E183F6427E1D0F2A283
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/_LjXL3YpDt_zyQsAkB93yjvRiaQ.roa
Signing time: Thu 02 Jan 2025 15:50:55 +0000
ROA not before: Thu 02 Jan 2025 15:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1267
IP address blocks: 2.21.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:72:80:f2:99:0e:18:3f:64:27:e1:d0:f2:a2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcb8d72f76290edff3c90b00901f77ca3bd189a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:40:41:25:66:39:8e:f0:41:f9:c5:13:b1:81:
bd:df:d9:72:90:82:33:66:69:72:b8:74:97:e4:9b:
37:25:e2:a2:f5:bf:4b:f0:88:1e:ec:1f:be:90:8e:
6e:68:5f:a2:ae:bc:f0:9c:bb:06:13:5c:c0:c5:90:
32:be:87:e7:0d:91:d4:dd:a4:1a:a2:fd:d9:cd:36:
61:9f:ea:f5:82:5e:60:40:f4:46:40:b0:7c:4c:b7:
01:64:9f:61:79:38:2b:cd:41:51:31:e4:c7:9b:63:
c3:79:6b:77:1c:bd:26:3a:79:3e:ef:33:20:45:ba:
99:1d:fc:99:1c:69:e5:3a:e2:23:7d:9e:f0:c2:5c:
be:4c:c0:9b:13:d2:02:0e:cf:2b:14:4e:d8:ca:fc:
81:fd:06:4f:79:03:dd:4a:d5:1c:ed:d1:9b:f3:08:
e5:d2:aa:08:12:3d:3c:1f:13:09:a8:8e:8a:a2:2a:
1a:09:00:ec:17:18:df:f2:ed:b6:f4:c9:72:f1:65:
95:f3:84:5e:09:a0:dc:0c:32:5f:7f:f9:e1:e6:42:
ce:57:f8:51:83:a6:e0:6d:27:be:ed:5a:17:80:df:
37:c1:d4:3f:e8:90:2e:55:6f:be:b9:41:88:80:50:
d2:be:00:05:dd:b7:79:dc:fd:6a:c1:68:ca:94:a3:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B8:D7:2F:76:29:0E:DF:F3:C9:0B:00:90:1F:77:CA:3B:D1:89:A4
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/_LjXL3YpDt_zyQsAkB93yjvRiaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.21.164.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:7d:e6:aa:02:ef:3b:77:98:84:3b:9e:74:b0:7d:3a:99:a4:
9b:45:9f:cc:b7:c1:91:34:38:5b:2a:35:da:c9:45:d2:3c:8b:
bf:36:cb:83:f8:01:63:0a:22:5b:19:e8:9f:26:09:c8:b4:36:
f9:22:c8:8b:92:a8:01:9c:f9:38:a8:a5:7c:5e:e7:16:5d:0f:
ca:22:72:9f:bc:ec:a8:bf:12:b8:98:c0:ec:8f:0e:d2:b1:35:
89:6a:a8:e6:1d:17:ef:1f:bf:d2:89:bb:6a:9c:28:84:84:c9:
c0:3a:93:6d:a0:b3:ff:f5:55:9d:21:44:fd:99:92:ef:4c:27:
83:a9:b7:a2:73:32:8e:04:7b:67:04:d2:b6:bf:dc:b4:75:af:
ad:c4:c2:25:35:71:39:ae:a2:29:81:a0:17:25:2b:9a:a0:c4:
4d:c6:81:c4:d8:ba:5a:48:d1:36:a3:b8:00:f2:5d:9a:ad:57:
fd:99:f9:d8:30:04:a9:69:85:3a:6f:3e:09:c7:16:67:5b:2c:
e7:d0:5e:51:06:ed:d6:fd:c6:f9:9a:57:1e:cc:01:75:32:8d:
d7:4a:b3:d4:6f:4f:b9:7f:45:ff:86:d6:b9:aa:f0:88:3c:2b:
cb:84:59:48:7f:df:8b:dd:1e:86:8c:50:81:e3:7e:1a:fc:fb:
66:d0:e7:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntnKA8pkOGD9kJ+HQ8qKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjUwMTAyMTU1MDU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2I4ZDcyZjc2MjkwZWRmZjNjOTBiMDA5MDFmNzdjYTNiZDE4OWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0BBJWY5jvBB+cUTsYG939lykIIz
ZmlyuHSX5Js3JeKi9b9L8Ige7B++kI5uaF+irrzwnLsGE1zAxZAyvofnDZHU3aQa
ov3ZzTZhn+r1gl5gQPRGQLB8TLcBZJ9heTgrzUFRMeTHm2PDeWt3HL0mOnk+7zMg
RbqZHfyZHGnlOuIjfZ7wwly+TMCbE9ICDs8rFE7YyvyB/QZPeQPdStUc7dGb8wjl
0qoIEj08HxMJqI6KoioaCQDsFxjf8u229Mly8WWV84ReCaDcDDJff/nh5kLOV/hR
g6bgbSe+7VoXgN83wdQ/6JAuVW++uUGIgFDSvgAF3bd53P1qwWjKlKOEMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPy41y92KQ7f88kLAJAfd8o70YmkMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvX0xqWEwzWXBEdF96eVFzQWtCOTN5anZSaWFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAhWkMA0G
CSqGSIb3DQEBCwUAA4IBAQCdfeaqAu87d5iEO550sH06maSbRZ/Mt8GRNDhbKjXa
yUXSPIu/NsuD+AFjCiJbGeifJgnItDb5IsiLkqgBnPk4qKV8XucWXQ/KInKfvOyo
vxK4mMDsjw7SsTWJaqjmHRfvH7/SibtqnCiEhMnAOpNtoLP/9VWdIUT9mZLvTCeD
qbeiczKOBHtnBNK2v9y0da+txMIlNXE5rqIpgaAXJSuaoMRNxoHE2LpaSNE2o7gA
8l2arVf9mfnYMASpaYU6bz4JxxZnWyzn0F5RBu3W/cb5mlcezAF1Mo3XSrPUb0+5
f0X/hta5qvCIPCvLhFlIf9+L3R6GjFCB434a/Ptm0Oc4
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:31 2025 by rpki-client