Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/LWsi3KmW8bzkCxEOXVP0T6JNl74.roa
File: LWsi3KmW8bzkCxEOXVP0T6JNl74.roa (raw, json)
Hash identifier: ++a3kmsuF/zJu9wF6l25AqVnQ10r4JeQqeeIizqUJQ4=
Subject key identifier: 2D:6B:22:DC:A9:96:F1:BC:E4:0B:11:0E:5D:53:F4:4F:A2:4D:97:BE
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 0195C68833C310B2A02FD82398DD3A8D7075
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/LWsi3KmW8bzkCxEOXVP0T6JNl74.roa
Signing time: Mon 24 Mar 2025 05:02:49 +0000
ROA not before: Mon 24 Mar 2025 05:02:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13852
IP address blocks: 2a0d:d940:54::/48 maxlen: 48
2a0d:d940:56::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c6:88:33:c3:10:b2:a0:2f:d8:23:98:dd:3a:8d:70:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Mar 24 05:02:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d6b22dca996f1bce40b110e5d53f44fa24d97be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:90:e4:01:c4:59:31:a4:67:b3:9a:85:b6:
e3:c0:e5:16:18:cd:dd:57:6c:00:a5:41:42:c7:dc:
e1:4e:99:51:22:e9:0d:b6:61:62:71:c6:13:3b:6e:
fc:d2:0c:b2:5c:ab:c4:ab:be:bf:6c:32:f3:e0:fa:
9c:04:43:91:9a:54:49:31:8c:7e:58:05:cc:21:49:
be:6f:e1:35:43:24:66:a8:53:49:3e:9f:91:ed:73:
ef:f5:0d:15:fd:2a:ef:1a:77:84:dd:f3:2c:bb:54:
50:fc:98:56:ec:7c:5d:09:39:21:d0:9b:1c:89:1c:
80:de:f0:b4:b9:09:b4:08:77:62:a7:7f:a7:ed:78:
19:48:d3:35:12:71:50:37:31:8f:6c:47:d5:41:bf:
3f:f5:43:5c:70:fb:57:e8:6d:02:c9:fc:d3:c7:3e:
b8:bd:98:26:de:62:8f:0b:4b:25:c1:44:a3:30:a9:
a2:e7:38:81:f7:fb:34:fc:f8:11:f6:81:82:9d:59:
f8:2b:5a:b4:54:3e:b8:f9:00:f0:4e:d8:5e:2c:c6:
c8:24:2e:69:88:62:e0:16:78:75:65:ee:17:0e:fd:
7f:47:3a:f8:49:e1:34:5f:72:7a:82:8f:58:91:58:
05:bd:cb:6d:fd:6f:5f:3b:e2:96:a3:27:e4:84:d8:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6B:22:DC:A9:96:F1:BC:E4:0B:11:0E:5D:53:F4:4F:A2:4D:97:BE
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/LWsi3KmW8bzkCxEOXVP0T6JNl74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:54::/48
2a0d:d940:56::/47
Signature Algorithm: sha256WithRSAEncryption
8a:c0:c2:b6:6a:a3:e1:b0:b0:f7:89:02:6b:eb:ee:60:6b:a3:
3d:f4:33:f5:d2:7e:ca:7f:cd:6a:6c:bc:ac:2a:91:0a:98:9e:
62:17:cc:81:fe:8e:23:c4:87:b8:70:01:0c:cb:83:3f:6c:7a:
bc:2f:9d:30:44:c4:c0:20:b4:0a:5f:28:d1:b1:67:1a:4e:28:
ff:bb:aa:14:33:bb:38:23:b7:ed:c6:c0:3e:b2:76:6d:4d:60:
25:79:fa:ed:9e:2c:8f:f9:b9:9b:02:34:2e:db:e4:d1:57:5e:
95:c2:af:13:4c:be:49:01:53:00:b7:ef:34:ad:a9:86:1c:54:
eb:78:e0:ef:6b:b1:ce:4e:a0:8b:c3:9e:57:37:8d:44:6d:46:
a5:53:2a:9e:5b:99:aa:2a:d7:c7:b3:06:14:08:0b:04:ab:d3:
a7:1c:c8:c1:47:49:42:14:b8:f0:e8:b8:96:3c:fb:e6:41:99:
8a:0d:f6:68:37:ca:d0:95:7f:6d:9a:35:16:ad:7e:91:68:39:
bb:71:e3:55:20:55:64:67:fb:3f:6e:ee:42:58:44:95:4d:25:
4b:af:b1:29:fb:d0:3a:79:ef:0e:be:f7:50:57:70:2c:1d:0d:
a4:0c:c2:7f:80:39:a6:83:e8:62:39:5b:97:27:54:f9:00:41:
6d:31:4b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:26:14 2025 by rpki-client