Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/LbcVeiuDUugzhWMtPmYqNrGtC38.roa
File: LbcVeiuDUugzhWMtPmYqNrGtC38.roa (raw, json)
Hash identifier: 17lM/1TLk5NwhqbTHI9QcyIG0e9IHDWy4YL3CEcB+EE=
Subject key identifier: 2D:B7:15:7A:2B:83:52:E8:33:85:63:2D:3E:66:2A:36:B1:AD:0B:7F
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019427B56133FB320DA7B78EABF32504A802
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/LbcVeiuDUugzhWMtPmYqNrGtC38.roa
Signing time: Thu 02 Jan 2025 15:49:45 +0000
ROA not before: Thu 02 Jan 2025 15:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211617
IP address blocks: 2a10:4646:40::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:61:33:fb:32:0d:a7:b7:8e:ab:f3:25:04:a8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 15:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2db7157a2b8352e83385632d3e662a36b1ad0b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:d8:f1:1b:7d:15:c0:8e:c1:ce:1a:f6:a9:
65:b0:00:5a:40:ef:85:47:10:0b:ed:15:9f:6e:2d:
20:4a:04:ea:b8:86:9e:08:6f:e9:77:b3:26:16:86:
50:51:b2:cf:db:06:39:ed:12:2b:69:97:d4:ec:0c:
88:de:0a:1a:00:bb:7a:e4:86:10:45:d2:63:03:25:
23:18:e6:9a:ab:c1:43:29:b9:88:3c:a6:d2:9a:ce:
e6:bc:92:88:9f:46:3c:5f:a9:0d:c3:a2:e8:fd:c4:
04:e9:51:97:70:56:6a:80:fc:e9:16:c4:46:26:07:
b7:03:fc:c3:0f:3b:03:88:80:1b:68:da:16:53:6a:
dd:a4:78:5e:8e:ec:de:5b:53:3b:f8:2c:5d:12:17:
0a:1d:34:fb:b0:b5:f4:95:6f:f3:62:97:60:0d:21:
b5:59:7a:06:3c:90:b4:bb:10:94:07:71:c2:bd:39:
13:fe:89:29:bf:d5:12:f5:b3:cf:91:ec:ba:7d:3a:
4c:c5:66:2a:c4:1c:52:df:a1:9d:ae:92:a2:68:49:
18:df:a6:2e:03:4f:33:ae:d2:61:12:76:36:aa:e0:
ee:47:0b:a8:04:cc:f8:5a:0e:b3:28:7a:19:d8:b1:
9c:f7:e7:11:72:2a:3a:39:a5:ee:49:9a:ed:0e:94:
f4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B7:15:7A:2B:83:52:E8:33:85:63:2D:3E:66:2A:36:B1:AD:0B:7F
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/LbcVeiuDUugzhWMtPmYqNrGtC38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:40::/44
Signature Algorithm: sha256WithRSAEncryption
21:93:ef:be:b4:3e:83:e1:cc:22:9a:61:6a:12:c5:dc:d5:97:
47:e8:b0:90:b5:08:1d:d1:25:6f:45:1d:27:03:0c:af:cb:8d:
28:c0:65:ba:a3:c4:40:e2:8c:a9:11:7b:2c:e9:2e:c8:df:a7:
27:47:db:f3:d3:31:1c:d3:f5:a1:24:33:ae:9d:45:22:2b:2f:
45:37:76:72:01:38:60:0a:fe:3f:c5:7e:0f:68:59:fe:0b:ff:
de:be:5a:8f:4f:4a:6b:f6:08:1a:d6:a8:d0:62:6d:f5:38:1c:
29:f1:2b:96:5a:87:92:76:78:65:e4:f6:12:3a:af:42:dc:6b:
99:4e:95:f3:88:44:07:bf:5b:65:cf:9f:e5:79:3b:41:20:fb:
37:67:32:23:5b:61:c6:50:ff:ce:92:6e:7c:5c:a4:49:b1:20:
f4:29:20:50:34:c2:f4:cf:3d:cb:56:14:32:83:03:05:bf:ec:
cb:a0:f4:44:01:fd:62:f7:27:14:5d:25:08:00:5d:9b:f6:99:
5e:78:6d:92:79:ea:2f:ba:1f:15:b2:ab:86:b1:ba:51:1f:40:
30:b8:c2:34:70:c0:39:df:b6:86:af:d3:62:a4:1e:0b:e0:96:
83:e7:eb:66:e1:4e:15:e8:c4:15:43:ef:fe:e6:45:e4:a9:41:
57:53:0e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:42 2025 by rpki-client