Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LGoYubqoBurQ5z4QyBgkfp_ULV8.roa
File: LGoYubqoBurQ5z4QyBgkfp_ULV8.roa (raw, json)
Hash identifier: SgKBCxIl+NHkQvSDDepAdZ12bHP5YMES2y7rBSJ8VrQ=
Subject key identifier: 2C:6A:18:B9:BA:A8:06:EA:D0:E7:3E:10:C8:18:24:7E:9F:D4:2D:5F
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBFB6A682772355DE9BD5C65D2A96A
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LGoYubqoBurQ5z4QyBgkfp_ULV8.roa
Signing time: Wed 01 Jan 2025 17:48:46 +0000
ROA not before: Wed 01 Jan 2025 17:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215909
IP address blocks: 2a0c:9a40:8a20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:fb:6a:68:27:72:35:5d:e9:bd:5c:65:d2:a9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c6a18b9baa806ead0e73e10c818247e9fd42d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:63:1b:7a:07:4a:7f:e4:83:c2:b5:74:b1:
3a:15:34:b1:8a:95:2e:49:bd:c0:60:b9:cd:65:90:
43:16:ce:b9:87:3b:70:ef:98:61:7e:34:dc:05:73:
e4:4a:c8:9b:75:28:40:b0:85:4b:a1:46:6e:9e:06:
40:a0:c6:b9:09:3d:d2:dc:fa:04:d5:e3:8b:ad:53:
1d:03:c0:a6:bd:c7:8c:ba:d1:83:2e:97:20:27:e8:
5a:b4:39:3a:9a:a2:12:9a:a6:4d:7a:5a:4c:5d:ec:
d3:1c:46:53:d1:0b:b0:f5:9a:00:b0:4a:f4:a7:b6:
89:a1:3b:01:b0:4a:b0:a2:7a:b1:74:a8:20:2c:18:
c7:21:83:f1:f2:10:ab:ef:5b:86:d2:d8:5a:d6:9f:
66:2f:4e:f1:1a:56:5e:4d:d5:64:10:0a:bb:ce:f0:
e9:b0:11:ad:50:95:45:89:5e:86:6b:e8:c9:79:30:
cc:06:3d:54:50:bf:a0:a7:4a:0e:cf:cd:ff:e7:e5:
f9:a5:ff:01:ee:07:64:2c:52:58:b6:06:40:4d:ad:
01:1d:0d:86:7c:43:c9:ec:b7:d4:31:48:c4:ab:d1:
98:95:c1:0f:b2:ec:5b:87:00:54:93:c5:91:b4:be:
ce:26:75:38:7e:6a:e4:9f:d6:e6:75:ad:90:e8:c3:
ca:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6A:18:B9:BA:A8:06:EA:D0:E7:3E:10:C8:18:24:7E:9F:D4:2D:5F
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LGoYubqoBurQ5z4QyBgkfp_ULV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8a20::/48
Signature Algorithm: sha256WithRSAEncryption
7b:67:b5:68:ad:49:39:90:5b:85:dd:f7:e4:71:06:13:4a:cc:
3d:22:7f:2f:bb:bc:13:98:28:79:ae:b7:58:bb:a5:ae:10:fc:
fa:79:20:f8:03:18:04:60:23:ac:5c:e7:21:b5:a0:2f:aa:54:
be:c6:00:2c:25:62:5c:66:ea:bb:3c:a6:03:71:f4:85:ff:20:
87:d5:9c:9e:28:9e:55:49:48:a3:35:4f:64:8b:1d:5b:42:2b:
0d:ca:96:31:cd:35:86:ba:0e:6c:37:af:fd:62:47:a4:3a:74:
91:5d:25:00:e9:50:06:4e:51:ac:55:80:ec:c3:ce:53:b7:7a:
eb:43:1f:fb:9e:a7:39:1f:f0:df:d7:23:2e:f1:5f:c5:4d:cb:
42:3c:ec:11:21:9b:60:4e:c0:2a:5c:4d:90:f9:c1:e2:06:f9:
75:3d:b6:c0:cf:53:21:bf:b3:8c:6c:a4:ba:77:21:19:41:f8:
ee:43:f2:51:87:1f:91:3f:d9:4f:1f:2c:73:c2:07:44:cb:9e:
25:b0:49:a2:a9:6f:c6:79:96:34:5e:6b:8b:91:9b:08:06:bd:
ba:06:59:66:50:e7:66:6a:b0:04:71:17:18:a9:1f:b6:d2:d8:
a8:41:ac:59:f2:0b:dd:86:0c:59:f5:7c:08:ff:2a:72:92:7e:
80:59:8b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:26 2025 by rpki-client