Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LESCEwfMjTTcygkEN7npRfOddwU.roa
File: LESCEwfMjTTcygkEN7npRfOddwU.roa (raw, json)
Hash identifier: ALwYT5vXwogpDkrCPypgkb7zIiDJBt8h46Oy3biiXtA=
Subject key identifier: 2C:44:82:13:07:CC:8D:34:DC:CA:09:04:37:B9:E9:45:F3:9D:77:05
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFAB9C96DD11D9B660EE5C969CD16F7
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LESCEwfMjTTcygkEN7npRfOddwU.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215969
IP address blocks: 2a0c:b641:b20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b9:c9:6d:d1:1d:9b:66:0e:e5:c9:69:cd:16:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c44821307cc8d34dcca090437b9e945f39d7705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:76:5c:86:f4:be:d0:f4:1d:2c:5b:2b:cb:2f:
0e:6c:c1:c4:6a:81:51:7b:46:56:9a:4d:a9:f6:68:
0a:83:b8:1f:02:dc:c6:58:58:18:f1:c7:9f:f9:c2:
61:bb:d2:1b:e6:4b:e5:03:19:c4:4a:aa:f6:e8:e3:
9d:ab:1f:e4:af:3e:ba:7d:2f:0f:85:c6:34:70:f8:
59:73:fe:86:e0:9a:e4:1a:ef:be:86:35:3b:50:21:
fa:06:91:a8:78:90:74:5e:53:12:e5:98:6c:f2:5b:
a4:0b:21:3e:51:94:78:ff:e2:df:f0:5c:b5:73:9f:
a8:ac:77:e0:7a:70:61:ee:3f:ad:5f:43:e4:3d:8c:
11:ad:6e:e6:0c:6f:b4:40:92:4e:a1:15:9e:af:15:
a4:eb:f3:22:71:da:97:68:e6:f0:1d:42:67:c2:e1:
9d:30:00:b6:db:14:fa:19:41:b2:26:46:5c:45:6b:
75:b8:29:3e:df:6e:07:61:48:ca:23:07:d6:cc:e7:
87:94:13:7f:42:bb:ef:44:e3:0b:20:ea:24:1a:6f:
a6:df:19:03:0b:5d:d0:b6:61:3a:0b:68:85:52:ac:
4c:9e:22:9e:96:dd:4a:65:db:62:4d:b6:f8:1a:90:
dd:23:42:79:64:92:ab:c4:ce:b0:9b:76:2f:4e:7e:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:44:82:13:07:CC:8D:34:DC:CA:09:04:37:B9:E9:45:F3:9D:77:05
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LESCEwfMjTTcygkEN7npRfOddwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:b20::/44
Signature Algorithm: sha256WithRSAEncryption
2a:bc:68:50:42:9a:b7:7f:81:1b:69:6a:bb:d7:01:2c:83:9e:
d7:49:dc:22:f9:30:fe:2d:19:eb:1e:ce:b2:d1:9e:ae:c9:c7:
09:d9:83:30:0a:38:06:ec:57:f9:08:d9:4a:45:0e:ee:1d:09:
33:4e:b4:02:ca:8f:ee:35:d2:7e:cb:a6:d3:ea:2e:d6:a4:ca:
dd:f0:69:8a:24:33:8e:b0:70:5d:fc:db:31:24:59:67:3e:0d:
c6:32:e7:87:9b:99:1c:5c:79:de:c3:c0:49:4d:82:10:79:66:
4a:79:5e:62:d6:00:b3:86:77:dc:30:2f:9e:c2:7d:68:0f:20:
21:48:81:80:32:62:96:b8:c3:bb:69:5e:71:22:0d:78:ef:21:
5d:53:bf:0c:49:86:53:76:8f:05:f3:83:58:e1:77:8f:98:ef:
8b:39:67:8a:70:b5:e3:d2:c3:2b:8d:da:20:60:3a:8a:7d:61:
63:cf:9c:a6:48:e3:e9:0e:de:91:bf:2d:5c:40:bb:09:34:27:
c9:33:d5:d2:5b:75:0d:88:3e:d1:97:1a:0b:f9:57:f6:4a:22:
50:5b:2d:77:99:d8:46:d4:a3:b0:83:80:87:c6:a6:7a:4a:9c:
23:e2:95:39:d6:3d:2e:0a:3b:47:af:cc:63:38:3a:4f:a3:a5:
47:23:5e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:40 2025 by rpki-client