Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Ltl-WYATbDmJCNay9qRq5rw2C1E.roa
File: Ltl-WYATbDmJCNay9qRq5rw2C1E.roa (raw, json)
Hash identifier: jelsYg8bWSECTSyYqAUzaSGlnNHYtoQDUzAn1gEA150=
Subject key identifier: 2E:D9:7E:59:80:13:6C:39:89:08:D6:B2:F6:A4:6A:E6:BC:36:0B:51
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E4D577D255A68366A67616A28C773BB0
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Ltl-WYATbDmJCNay9qRq5rw2C1E.roa
Signing time: Sun 30 Mar 2025 02:15:49 +0000
ROA not before: Sun 30 Mar 2025 02:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e4:d5:77:d2:55:a6:83:66:a6:76:16:a2:8c:77:3b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 30 02:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ed97e5980136c398908d6b2f6a46ae6bc360b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f4:f4:6f:6f:7d:53:67:de:21:31:12:e0:ae:
4c:31:79:1d:af:e3:49:0d:0e:93:d0:3e:d6:08:0f:
d9:9b:de:3f:8a:c1:90:ec:15:7a:6a:e9:ef:61:e0:
7e:a6:b8:fd:09:9a:35:1e:3d:36:3f:d2:ee:29:86:
ef:d9:f2:76:fc:34:e1:a2:aa:b4:cc:1a:42:0b:c5:
22:e7:b8:ec:ae:d5:24:5c:59:68:2d:b0:f5:27:ad:
6b:ef:ec:b9:fe:21:11:9d:7f:a1:33:7c:c0:52:56:
88:d7:22:b4:c4:43:9a:53:5d:2c:1f:e3:e8:1e:cd:
c5:c1:61:b1:c4:f4:2a:1b:63:30:0b:58:04:6a:99:
48:ef:3b:19:75:cf:a3:39:ef:b0:cb:20:09:b4:d5:
1d:3e:7e:94:73:92:c8:93:13:5a:ca:7a:7c:27:93:
b2:de:63:c7:2d:4f:8b:c8:50:25:fe:87:a2:bb:56:
07:45:b9:2c:83:7a:c4:53:7e:6c:66:4a:7e:36:c2:
e4:c8:ae:f9:96:d4:04:c2:9c:a6:ee:a2:03:1e:5c:
23:96:48:f6:e6:b3:78:76:07:0c:e2:7f:c7:ac:e5:
0a:6e:ef:ec:41:5f:0c:43:4b:e0:fe:eb:46:b0:85:
4f:5f:94:12:4f:ef:46:18:fd:e6:16:74:c1:9f:ac:
40:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D9:7E:59:80:13:6C:39:89:08:D6:B2:F6:A4:6A:E6:BC:36:0B:51
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Ltl-WYATbDmJCNay9qRq5rw2C1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
3c:98:25:39:5f:6a:50:81:b0:ab:65:59:9b:87:9f:5d:8d:65:
48:65:1b:30:2c:07:a8:9f:8f:44:9b:cb:5d:f4:41:7d:4b:e2:
26:43:21:0f:c6:30:b4:23:36:62:93:90:ad:ec:40:59:f7:92:
f6:3f:2d:57:c9:11:e8:67:32:33:df:c9:a5:89:90:73:ac:2e:
0a:48:10:60:7a:d6:1d:45:36:d3:3c:2a:34:8c:dc:e8:97:3b:
72:b8:76:44:15:f4:62:fe:15:04:d8:83:56:2b:b3:b5:ac:fa:
ce:e7:08:13:22:5e:b7:67:94:5e:7b:11:d5:52:4d:ba:70:ee:
05:89:73:79:56:14:0c:39:98:e1:2b:7a:62:cc:1b:43:aa:b9:
20:03:5b:dd:25:48:75:7c:e7:21:ad:77:fb:ef:ac:de:fe:ad:
30:98:87:68:ba:55:f0:bb:5e:74:81:5b:62:6b:f5:e6:b4:b1:
ca:bd:8c:09:a4:96:03:c5:13:a0:e3:88:0c:81:81:5a:a5:4c:
08:e3:fb:f4:6f:e1:f9:ea:b5:0a:ab:eb:8e:4f:a8:02:31:8f:
e2:e8:d6:f5:df:40:0b:66:6b:5b:4b:82:10:d0:ea:51:88:e5:
98:9f:25:5d:01:1b:2f:11:88:ef:ec:84:f6:f3:37:1d:a8:dd:
be:84:ad:6f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:06 2025 by rpki-client