Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/Lxf5hH33G-Ulw9NLaiF_pS9V1Rw.roa
File: Lxf5hH33G-Ulw9NLaiF_pS9V1Rw.roa (raw, json)
Hash identifier: Xqe000TyyEgCl3Xlm2comP5qxdDjqONcVYdK0bsmHFY=
Subject key identifier: 2F:17:F9:84:7D:F7:1B:E5:25:C3:D3:4B:6A:21:7F:A5:2F:55:D5:1C
Certificate issuer: /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial: 02745A98
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/Lxf5hH33G-Ulw9NLaiF_pS9V1Rw.roa
Signing time: Thu 02 Jun 2022 10:13:25 +0000
ROA not before: Thu 02 Jun 2022 10:13:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210344
IP address blocks: 2a11:29c0:3df4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41179800 (0x2745a98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Validity
Not Before: Jun 2 10:13:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f17f9847df71be525c3d34b6a217fa52f55d51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:7b:7f:fe:4a:38:6a:ba:0d:2f:a3:36:70:
26:9f:24:be:32:ac:c8:d1:7d:82:d6:d7:e4:95:ef:
ce:92:5d:ee:3c:e8:8c:00:e1:09:5c:09:a1:b1:c1:
5a:17:0c:aa:4e:57:bd:5b:25:82:aa:e9:3c:9f:52:
1f:6e:dc:ca:43:4c:ed:98:52:59:88:16:0c:a1:6a:
25:c4:41:59:e7:24:9c:4c:6c:65:ba:ad:35:bb:3e:
e9:a9:00:ee:54:fc:0a:21:3c:45:6b:b8:38:36:a7:
d0:53:ac:f4:9d:60:55:f3:38:b2:3a:fd:62:31:79:
8e:8c:b3:b9:5f:75:ae:89:f1:c8:82:3a:76:23:04:
83:65:06:03:eb:42:97:5e:0a:79:7f:02:8f:80:7e:
60:c8:cd:9d:a7:5f:e7:33:94:a9:20:02:aa:b7:17:
38:87:46:dd:d7:55:72:97:01:df:bd:99:22:60:4c:
d4:78:3a:29:42:a0:b0:0e:5f:ef:23:22:53:9b:94:
e3:ec:95:0f:b0:28:a0:4e:72:2e:dd:5a:f0:38:82:
50:57:80:59:59:be:50:29:d7:cd:40:5b:61:0d:ef:
e6:fd:4f:85:91:0d:3b:4d:a3:5f:88:f4:dd:2a:bc:
e9:e7:31:a5:6e:29:7a:28:d1:2f:20:b7:81:37:7a:
c4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:17:F9:84:7D:F7:1B:E5:25:C3:D3:4B:6A:21:7F:A5:2F:55:D5:1C
X509v3 Authority Key Identifier:
keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/Lxf5hH33G-Ulw9NLaiF_pS9V1Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3df4::/48
Signature Algorithm: sha256WithRSAEncryption
16:d6:8f:13:2b:a1:6e:e9:e3:46:a9:72:36:27:fe:27:3b:4d:
c5:f3:ed:31:64:f1:0b:3c:96:14:80:9d:a6:c4:bf:e4:c3:31:
b1:48:f8:ab:23:0c:7d:e7:f1:ba:75:a9:65:34:dd:98:e7:86:
df:45:b9:e9:7b:b9:2e:05:45:1c:87:a3:99:3c:69:29:94:91:
b8:d0:54:f7:ce:c2:41:a4:0e:fe:ca:2d:ca:3e:c9:8b:95:c7:
1f:43:b0:25:24:a4:b0:9b:30:90:cd:16:31:b9:d8:89:25:32:
d7:8f:1d:3b:ad:76:49:d5:58:79:ba:99:62:11:98:36:e7:24:
6d:08:2a:a2:a4:51:db:7f:0e:b4:4d:37:0b:25:38:d7:7f:e9:
e3:5e:b8:59:0a:7f:7f:e4:02:e1:aa:37:6e:f6:0e:17:0d:d7:
4d:eb:d0:e4:0d:18:40:b5:31:70:7d:16:0a:ed:6c:ed:6b:2e:
0c:77:b1:fc:17:2e:34:67:55:d4:e1:05:92:77:8d:9e:7f:64:
a0:61:90:f4:d2:01:cb:17:df:a2:db:21:d3:a5:f7:3e:78:bf:
e8:e3:7f:f8:84:98:ab:59:5f:34:1e:5e:81:c6:36:7a:5e:cc:
53:92:cc:8d:1f:8a:7c:72:fa:5f:1b:79:ea:d4:91:99:05:e3:
31:5c:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:07 2025 by rpki-client