Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LHYhArygEQHoXsPu05ZdX1hBItA.roa
File: LHYhArygEQHoXsPu05ZdX1hBItA.roa (raw, json)
Hash identifier: wZKPjS9R/cR3iv12m6mk/919+PlqfBxcQKMvd3loOPU=
Subject key identifier: 2C:76:21:02:BC:A0:11:01:E8:5E:C3:EE:D3:96:5D:5F:58:41:22:D0
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01939C614D764D9510F9DEC689E56E1D4896
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LHYhArygEQHoXsPu05ZdX1hBItA.roa
Signing time: Fri 06 Dec 2024 14:30:42 +0000
ROA not before: Fri 06 Dec 2024 14:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213738
IP address blocks: 2a0c:b641:70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9c:61:4d:76:4d:95:10:f9:de:c6:89:e5:6e:1d:48:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Dec 6 14:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c762102bca01101e85ec3eed3965d5f584122d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:02:be:12:8d:14:bd:da:db:e5:f0:f4:90:
25:e0:c8:9d:20:d7:d9:93:0a:f0:8f:10:b8:85:e7:
42:16:da:18:b4:93:be:c0:a9:c6:76:27:79:27:bd:
f1:d3:ff:34:81:ec:52:25:7e:89:80:d6:fc:55:54:
f3:1f:a9:27:9c:39:5c:5d:4a:75:87:d1:17:21:df:
40:30:a6:b0:41:f9:76:c3:b2:6f:06:84:ce:a2:ea:
0f:ca:af:e4:68:b5:56:09:7c:88:d1:cb:98:8d:d9:
11:72:89:1c:46:c5:40:1f:9d:f5:3a:c3:48:95:97:
71:b7:0e:5a:f8:76:b0:ad:60:b5:a5:3f:c2:b1:7d:
d1:71:e1:3b:ef:7b:6c:11:e1:1b:af:3d:84:56:1f:
92:44:18:13:a8:34:22:a3:0a:02:de:6e:1b:f8:eb:
69:5d:66:8b:d7:e1:35:a0:9b:e5:03:33:c2:45:90:
73:b0:da:51:c2:08:b9:b0:73:57:c2:81:a4:ab:4e:
ec:73:fa:5b:73:af:bb:8a:41:cb:75:1f:f7:55:73:
a8:14:61:24:38:fa:f2:0b:2e:26:28:e7:14:84:ba:
cd:12:93:0a:fa:b8:fb:b0:63:51:0c:dc:02:4f:b6:
2a:60:6f:1d:ce:8d:da:34:9b:be:24:38:c2:b7:75:
eb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:76:21:02:BC:A0:11:01:E8:5E:C3:EE:D3:96:5D:5F:58:41:22:D0
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LHYhArygEQHoXsPu05ZdX1hBItA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:70::/44
Signature Algorithm: sha256WithRSAEncryption
1c:06:ca:24:a6:4c:d0:63:39:85:9e:1f:54:8c:af:c0:b7:7a:
56:84:0b:8d:cf:f8:41:67:25:b5:98:8d:ac:3c:59:69:9e:01:
03:6a:bb:7b:f9:e4:48:46:a8:22:40:05:b9:bc:99:43:41:f3:
f4:0e:51:7b:9b:12:e8:6a:2c:27:86:da:1a:bd:b2:72:d5:93:
71:d8:44:f3:e6:bc:74:a6:cc:f3:fd:1d:2b:72:20:50:04:5f:
d0:eb:47:ba:e0:ae:67:b8:a9:8c:46:8b:8c:1f:ce:4d:90:d2:
78:58:0e:eb:8b:fb:4f:c8:92:ec:e9:03:20:da:f1:3c:5d:bb:
4c:6d:b4:9c:aa:79:78:70:52:94:d2:0e:3e:68:0b:ef:a4:ea:
66:95:04:b5:c1:58:41:f1:93:51:a8:71:5f:71:f0:6e:c1:ca:
e5:a7:0a:cd:48:e4:b2:e3:c0:00:7d:05:15:84:fc:5d:3e:4b:
ea:46:1f:3a:7e:38:a8:fc:c9:08:ce:08:5d:18:0b:3f:e2:bd:
1d:16:40:b8:4d:82:71:3c:1c:34:78:aa:d7:82:1a:e9:54:12:
ed:e5:e6:41:18:62:f2:ec:d9:76:5f:64:5b:f9:3d:a0:b5:05:
45:04:ed:1f:c2:04:e2:17:06:87:c0:7b:ca:c6:81:35:14:43:
ba:7d:73:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:41:18 2025 by rpki-client