Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/lUApR8rVpWyDLR1GadE8v1PzIFI.roa
File: lUApR8rVpWyDLR1GadE8v1PzIFI.roa (raw, json)
Hash identifier: SjTc2RPVxxZZujKF5tyIKpHPh6Uad/TapUg1uEd/j6M=
Subject key identifier: 95:40:29:47:CA:D5:A5:6C:83:2D:1D:46:69:D1:3C:BF:53:F3:20:52
Certificate issuer: /CN=1c7dd3c816d8596080472054348095ed2b8551e5
Certificate serial: 019421B259A59C9F7D57CAD303922DB84703
Authority key identifier: 1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/lUApR8rVpWyDLR1GadE8v1PzIFI.roa
Signing time: Wed 01 Jan 2025 11:48:44 +0000
ROA not before: Wed 01 Jan 2025 11:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212567
IP address blocks: 2001:678:e68::/48 maxlen: 48
2001:678:ed0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:59:a5:9c:9f:7d:57:ca:d3:03:92:2d:b8:47:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7dd3c816d8596080472054348095ed2b8551e5
Validity
Not Before: Jan 1 11:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95402947cad5a56c832d1d4669d13cbf53f32052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:38:79:da:47:4c:47:dd:94:49:5e:c9:5f:
05:f8:71:b3:10:d9:c8:75:8f:4b:4f:43:ae:c2:64:
c5:6d:06:f2:db:15:46:c3:81:43:4e:5f:77:6c:49:
05:ec:46:33:bc:92:3a:fb:d3:d5:96:0b:3a:13:47:
3e:a2:30:7e:f6:fe:09:bd:32:af:6a:88:82:74:f3:
5a:a8:82:62:ed:64:0c:60:d2:5c:0e:ab:cb:b4:2a:
8a:ba:88:11:f8:d5:c5:aa:5d:20:42:a7:51:8a:dd:
ce:36:48:40:39:f4:ae:b9:1b:38:58:f7:ee:af:76:
5b:7d:02:f7:50:a3:ad:2b:9e:8e:88:ff:43:4c:4b:
19:53:2a:a1:2f:0a:2d:3a:86:64:7b:53:03:d0:16:
2b:d7:77:fc:7a:2c:6e:ce:94:47:d8:7a:e1:80:63:
73:9f:4f:b5:3d:f4:6c:0e:6a:b7:07:82:10:e0:94:
8c:0a:15:27:f7:48:c7:03:e8:a8:fb:45:ce:c9:b3:
8c:6e:73:be:cc:db:b0:53:da:99:65:bd:3a:4a:69:
b1:1f:03:0b:41:96:5f:0f:e2:0d:8e:99:ca:ef:09:
f6:3e:c6:fd:8e:eb:44:ef:29:93:66:3e:de:ed:01:
d4:9a:16:26:85:74:08:7d:c2:05:63:71:71:ec:a4:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:40:29:47:CA:D5:A5:6C:83:2D:1D:46:69:D1:3C:BF:53:F3:20:52
X509v3 Authority Key Identifier:
keyid:1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/lUApR8rVpWyDLR1GadE8v1PzIFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e68::/48
2001:678:ed0::/48
Signature Algorithm: sha256WithRSAEncryption
68:60:6d:05:26:32:5d:d9:6d:19:0f:27:ba:63:7e:d3:cc:ec:
c9:ab:23:23:4a:13:2e:a5:e9:2c:87:4c:01:d6:c6:6f:39:69:
15:47:13:ba:85:07:4a:8d:6e:3d:92:95:5b:a7:3f:39:fe:80:
71:7a:43:34:a9:26:e7:c5:56:81:63:b9:0f:4b:44:6f:6a:0d:
63:93:66:a9:7a:a2:89:a4:b7:93:c2:6e:a3:a0:36:a8:4f:62:
0e:5d:b4:81:ab:c5:34:49:0a:45:4a:63:8d:ba:c8:2f:52:54:
22:10:87:0f:e6:1a:31:9e:7f:d0:97:a7:f7:41:36:d7:e2:3d:
2a:cf:98:db:8a:e8:19:0a:f1:60:26:4e:2e:07:19:97:80:4e:
61:df:90:36:cc:40:f6:72:90:13:9d:ad:86:cc:d4:08:11:5e:
68:5e:f8:6c:63:b7:54:07:df:cd:59:58:37:3f:65:83:95:15:
0e:dc:59:77:61:8b:1e:8a:94:24:61:41:67:74:ad:66:7a:a9:
be:52:34:aa:39:fd:db:96:8f:8f:ef:3c:7a:7b:d9:32:75:54:
17:f8:bc:22:16:25:5a:82:d7:23:44:12:9c:39:6c:1e:dc:62:
69:82:51:6f:a1:be:cf:4c:f4:d0:d6:fe:d9:af:0c:86:4b:14:
92:5d:78:a5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQhslmlnJ99V8rTA5ItuEcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2RkM2M4MTZkODU5NjA4MDQ3MjA1NDM0ODA5NWVkMmI4
NTUxZTUwHhcNMjUwMTAxMTE0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTQwMjk0N2NhZDVhNTZjODMyZDFkNDY2OWQxM2NiZjUzZjMyMDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjU4edpHTEfdlEleyV8F+HGzENnI
dY9LT0OuwmTFbQby2xVGw4FDTl93bEkF7EYzvJI6+9PVlgs6E0c+ojB+9v4JvTKv
aoiCdPNaqIJi7WQMYNJcDqvLtCqKuogR+NXFql0gQqdRit3ONkhAOfSuuRs4WPfu
r3ZbfQL3UKOtK56OiP9DTEsZUyqhLwotOoZke1MD0BYr13f8eixuzpRH2HrhgGNz
n0+1PfRsDmq3B4IQ4JSMChUn90jHA+io+0XOybOMbnO+zNuwU9qZZb06SmmxHwML
QZZfD+INjpnK7wn2Psb9jutE7ymTZj7e7QHUmhYmhXQIfcIFY3Fx7KQnhwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJVAKUfK1aVsgy0dRmnRPL9T8yBSMB8GA1UdIwQY
MBaAFBx908gW2FlggEcgVDSAle0rhVHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEgzVHlCYllXV0NBUnlCVU5JQ1Y3U3VGVWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYWFiMzYtODg4Ni00MjA2LTllNzkt
Y2MyY2Q3ZDMxYTI2LzEvbFVBcFI4clZwV3lETFIxR2FkRTh2MVB6SUZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iYWFiMzYtODg4Ni00MjA2LTllNzktY2MyY2Q3ZDMxYTI2
LzEvSEgzVHlCYllXV0NBUnlCVU5JQ1Y3U3VGVWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeA5o
AwcAIAEGeA7QMA0GCSqGSIb3DQEBCwUAA4IBAQBoYG0FJjJd2W0ZDye6Y37TzOzJ
qyMjShMupeksh0wB1sZvOWkVRxO6hQdKjW49kpVbpz85/oBxekM0qSbnxVaBY7kP
S0Rvag1jk2apeqKJpLeTwm6joDaoT2IOXbSBq8U0SQpFSmONusgvUlQiEIcP5hox
nn/Ql6f3QTbX4j0qz5jbiugZCvFgJk4uBxmXgE5h35A2zED2cpATna2GzNQIEV5o
XvhsY7dUB9/NWVg3P2WDlRUO3Fl3YYseipQkYUFndK1meqm+UjSqOf3blo+P7zx6
e9kydVQX+LwiFiVagtcjRBKcOWwe3GJpglFvob7PTPTQ1v7ZrwyGSxSSXXil
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:19:40 2025 by rpki-client