Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/LmNll9il-VLD6ieWdCkoTSLRGQ0.roa
File: LmNll9il-VLD6ieWdCkoTSLRGQ0.roa (raw, json)
Hash identifier: 06LMQp7B0dQ4GE9fHmmhPx+WxuqyvjdsTfdIPQ90vHA=
Subject key identifier: 2E:63:65:97:D8:A5:F9:52:C3:EA:27:96:74:29:28:4D:22:D1:19:0D
Certificate issuer: /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial: 026F7C55
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/LmNll9il-VLD6ieWdCkoTSLRGQ0.roa
Signing time: Thu 02 Jun 2022 10:13:23 +0000
ROA not before: Thu 02 Jun 2022 10:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208749
IP address blocks: 2a11:29c0:3df8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40860757 (0x26f7c55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Validity
Not Before: Jun 2 10:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e636597d8a5f952c3ea27967429284d22d1190d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:53:f3:24:26:6a:58:5b:d1:d5:27:38:a2:af:
7c:5b:38:67:40:b2:b5:62:ce:1d:84:7b:0c:8d:be:
0c:95:26:a0:58:ac:fd:31:f8:00:cb:3a:82:f3:64:
e7:ef:a9:a3:f1:b6:b8:3b:b6:35:f2:77:f8:e6:81:
4b:aa:f0:5d:1f:ec:ce:77:e6:e4:cc:6c:24:4e:36:
2e:9e:9c:c3:3f:1c:58:55:db:2f:1f:65:57:ab:56:
2e:b7:83:a7:8a:6b:de:dc:b5:2c:a3:67:d1:c0:64:
1f:95:92:42:4f:6e:d4:50:ab:63:8f:cd:ef:f6:b5:
e4:b6:be:f2:a0:a3:5c:f7:2a:8f:92:9e:81:a2:aa:
0b:48:d2:28:e7:f6:d0:1d:40:fd:55:65:9d:1b:f5:
22:4c:40:ff:bf:51:8b:e5:81:3a:ba:93:2e:ef:87:
1b:e2:b4:27:f4:52:f4:6e:42:c0:69:f0:00:c5:2c:
08:6c:a3:4b:29:a1:c3:fb:b9:56:f9:a2:5f:1d:5b:
d0:1d:3d:fa:d6:cd:c3:e8:a7:4c:94:83:92:02:5d:
0c:4d:65:70:35:bf:a0:a2:47:c7:c8:96:9b:0b:39:
5d:b4:5e:21:37:2f:0d:fc:05:9f:48:ec:8a:8b:d6:
88:79:b7:77:a7:c9:56:17:5f:05:85:18:55:cc:42:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:63:65:97:D8:A5:F9:52:C3:EA:27:96:74:29:28:4D:22:D1:19:0D
X509v3 Authority Key Identifier:
keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/LmNll9il-VLD6ieWdCkoTSLRGQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3df8::/48
Signature Algorithm: sha256WithRSAEncryption
2d:dd:5a:61:f5:9a:01:89:00:32:a6:09:e1:f3:a2:c9:81:68:
3a:33:76:e3:06:e3:ff:30:ee:72:80:79:f2:0c:02:f9:68:ef:
10:90:01:84:78:5d:90:fb:e2:b0:86:2c:d3:fe:bf:c8:06:50:
e3:1d:aa:7e:9e:c8:e2:9e:68:9c:19:8a:5f:01:76:e1:36:b4:
2c:8d:9e:8f:6b:0e:78:19:64:18:a0:a8:7c:cb:f0:cc:5d:90:
21:e7:ee:32:cb:cf:da:6b:9a:27:6f:64:11:39:c9:c8:c5:b7:
80:99:e4:8a:3c:9c:be:3f:a9:4c:9e:39:8e:09:c9:8b:3d:a5:
4b:dd:0a:07:e8:e3:ee:3b:0c:a9:f1:ed:26:68:73:5c:f6:f1:
2d:05:ff:d0:61:5a:e7:6b:d7:92:17:fe:9e:9d:e5:c7:a7:df:
a3:42:0b:05:c3:77:b3:32:e9:b7:c8:78:25:04:9d:04:5a:04:
aa:a7:06:77:c8:ce:d3:ba:2d:3d:72:da:f9:a6:46:f0:66:2d:
b2:a5:47:66:70:a1:e6:16:7f:63:d6:0b:d4:97:7e:3d:22:4d:
50:44:44:e2:a1:cc:8d:86:ce:c1:b1:89:35:d5:ad:fc:63:dc:
52:c7:79:30:4b:bc:3d:95:dc:d7:f8:82:a2:a9:76:63:a2:61:
88:f9:f8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:55 2025 by rpki-client