Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/LgHzOaYuabv3TEJvgmXbSv1VpE4.roa
File: LgHzOaYuabv3TEJvgmXbSv1VpE4.roa (raw, json)
Hash identifier: injrjdPp9EmYkXsCnl9BVsm9u0fDk10lNZwLxDJq/zI=
Subject key identifier: 2E:01:F3:39:A6:2E:69:BB:F7:4C:42:6F:82:65:DB:4A:FD:55:A4:4E
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 01942521F95EB9D0043C31292A98B69DFD48
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/LgHzOaYuabv3TEJvgmXbSv1VpE4.roa
Signing time: Thu 02 Jan 2025 03:49:30 +0000
ROA not before: Thu 02 Jan 2025 03:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59819
IP address blocks: 2a03:6947:b00::/40 maxlen: 40
2a03:6947:1400::/40 maxlen: 40
2a03:6947:1500::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f9:5e:b9:d0:04:3c:31:29:2a:98:b6:9d:fd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Jan 2 03:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e01f339a62e69bbf74c426f8265db4afd55a44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:49:ce:8f:ba:9b:95:fa:0e:4d:69:56:14:
b7:a9:53:83:79:66:74:c6:ff:75:b6:69:79:7e:22:
22:59:7b:2c:88:39:16:d1:ce:e1:fb:ed:e5:38:eb:
66:c6:94:87:41:39:86:03:5c:2f:54:d4:1a:84:11:
05:f4:1a:53:b8:66:bb:01:52:21:fa:48:09:03:77:
67:90:bd:ae:a5:98:81:3f:7b:7b:4e:bd:68:cf:83:
b8:77:96:e9:25:5a:e5:76:48:41:a4:2a:2c:9b:ae:
38:6f:a3:58:ed:c3:aa:d7:1d:fe:03:7a:4e:cc:5d:
8a:24:1e:22:dc:5c:67:ae:39:f4:ed:1d:9f:70:c1:
0c:92:02:ec:4c:a2:95:d5:bb:bf:6b:ba:75:90:22:
d6:bd:43:b3:e3:72:02:be:d6:73:bb:b2:0f:f0:98:
e5:bd:81:0b:f7:c6:98:8d:01:f2:71:7a:70:2f:b9:
c8:02:c3:89:a7:03:a6:d9:87:d2:03:06:1f:0c:10:
e6:31:68:10:d9:a5:bb:a7:4d:3b:99:19:de:29:38:
23:47:96:d3:96:e9:19:e3:f3:01:c9:a5:c3:2d:1c:
4f:c4:2e:4b:97:8b:62:24:19:2d:3b:66:42:9d:9d:
3a:39:d5:7e:ab:d9:38:b4:9e:9d:38:a3:43:3b:0f:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:01:F3:39:A6:2E:69:BB:F7:4C:42:6F:82:65:DB:4A:FD:55:A4:4E
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/LgHzOaYuabv3TEJvgmXbSv1VpE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:6947:b00::/40
2a03:6947:1400::/39
Signature Algorithm: sha256WithRSAEncryption
75:2c:40:64:41:44:5e:ed:88:4e:c8:da:2c:4f:4f:ab:08:fc:
27:40:de:6c:23:6e:1b:70:2c:b3:14:7e:7d:46:6b:78:e9:c8:
ca:b0:c0:83:dd:01:57:a3:2a:aa:a4:82:e3:ae:38:f5:2e:04:
a4:fe:d3:2d:e5:24:a9:ed:ca:8a:5c:5f:90:c6:d2:12:48:a4:
ec:38:19:a0:78:3f:bc:fe:ce:37:1f:47:d8:e2:34:af:f2:36:
40:59:f6:93:41:af:fb:27:08:c8:82:4e:54:6d:5c:8e:9b:c7:
ac:61:6f:33:20:99:8a:27:b3:a7:c5:92:46:e1:ac:f2:75:06:
dc:d3:4a:8f:b4:af:89:be:fb:7e:0f:4a:6c:c1:00:e6:8f:e1:
79:16:28:c4:0f:e4:aa:e6:a6:be:00:1f:45:b0:69:95:c8:33:
18:10:74:7b:78:ae:14:5c:05:d6:90:1b:42:10:ae:e6:60:5a:
24:43:94:71:36:a8:78:57:ff:79:fd:b8:80:28:54:0d:95:fb:
bf:f6:32:19:aa:60:1b:30:57:aa:85:5f:98:81:88:38:02:99:
03:22:de:7e:85:d9:c4:47:26:3f:56:50:1c:24:8c:b2:42:db:
52:a3:aa:65:7e:c0:97:ad:70:db:6a:f8:1a:64:25:94:fd:8e:
db:92:cc:a9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAZQlIfleudAEPDEpKpi2nf1IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjkwNzgxZGJiZWJkYjhlYzQyYmFmNjY0ODgwNTllYTU4
NjZhYWMwHhcNMjUwMTAyMDM0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTAxZjMzOWE2MmU2OWJiZjc0YzQyNmY4MjY1ZGI0YWZkNTVhNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4dJzo+6m5X6Dk1pVhS3qVODeWZ0
xv91tml5fiIiWXssiDkW0c7h++3lOOtmxpSHQTmGA1wvVNQahBEF9BpTuGa7AVIh
+kgJA3dnkL2upZiBP3t7Tr1oz4O4d5bpJVrldkhBpCosm644b6NY7cOq1x3+A3pO
zF2KJB4i3Fxnrjn07R2fcMEMkgLsTKKV1bu/a7p1kCLWvUOz43ICvtZzu7IP8Jjl
vYEL98aYjQHycXpwL7nIAsOJpwOm2YfSAwYfDBDmMWgQ2aW7p007mRneKTgjR5bT
lukZ4/MByaXDLRxPxC5Ll4tiJBktO2ZCnZ06OdV+q9k4tJ6dOKNDOw88IQIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFC4B8zmmLmm790xCb4Jl20r9VaROMB8GA1UdIwQY
MBaAFPO5B4Hbvr247EK69mSIBZ6lhmqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAt
M2VmNWViN2M4NTk4LzEvTGdIek9hWXVhYnYzVEVKdmdtWGJTdjFWcEU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAtM2VmNWViN2M4NTk4
LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAKgNpRwsD
BgEqA2lHFDANBgkqhkiG9w0BAQsFAAOCAQEAdSxAZEFEXu2ITsjaLE9Pqwj8J0De
bCNuG3AssxR+fUZreOnIyrDAg90BV6MqqqSC46449S4EpP7TLeUkqe3KilxfkMbS
Ekik7DgZoHg/vP7ONx9H2OI0r/I2QFn2k0Gv+ycIyIJOVG1cjpvHrGFvMyCZiiez
p8WSRuGs8nUG3NNKj7Svib77fg9KbMEA5o/heRYoxA/kquamvgAfRbBplcgzGBB0
e3iuFFwF1pAbQhCu5mBaJEOUcTaoeFf/ef24gChUDZX7v/YyGapgGzBXqoVfmIGI
OAKZAyLefoXZxEcmP1ZQHCSMskLbUqOqZX7Al61w22r4GmQllP2O25LMqQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:49:59 2025 by rpki-client