Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LMVbAxS10phocuZGxlgx8d7kbrY.roa
File: LMVbAxS10phocuZGxlgx8d7kbrY.roa (raw, json)
Hash identifier: dMb/z5P6kwB/Z/78OEp7KNmzhiN7+UEYXWch+BnAOYY=
Subject key identifier: 2C:C5:5B:03:14:B5:D2:98:68:72:E6:46:C6:58:31:F1:DE:E4:6E:B6
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA776F13F106458C30C2F77E5845BD
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LMVbAxS10phocuZGxlgx8d7kbrY.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39792
IP address blocks: 2a0c:b641:1c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:77:6f:13:f1:06:45:8c:30:c2:f7:7e:58:45:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cc55b0314b5d2986872e646c65831f1dee46eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:02:69:b1:5f:b1:1e:65:59:4a:22:72:85:
63:f0:52:49:2e:86:15:87:94:0e:97:69:55:14:3f:
b8:c2:12:99:71:54:f3:2e:9f:d4:03:40:25:72:9c:
8d:5d:d9:ab:75:e9:71:e9:e2:de:24:14:09:f9:4b:
8c:a7:9a:2e:c3:75:c3:f1:cb:52:1c:b0:16:b0:4a:
8d:50:61:5a:f1:2d:ce:c0:f1:f4:bc:23:48:51:85:
bc:bd:d9:54:7a:2e:8e:4e:06:e3:91:8f:7c:09:cb:
9f:36:f5:45:6c:d9:32:f5:29:27:88:ef:bf:39:24:
35:5c:3b:62:33:b1:60:19:ff:15:7b:c1:42:c0:e3:
66:62:e6:1c:6f:15:0b:3e:ad:53:2b:45:24:f2:0b:
e8:e5:f8:40:8f:9d:92:2c:9e:83:81:a0:0e:f4:4b:
dc:21:d8:8b:c2:7e:1b:56:2e:02:a6:bd:83:01:7a:
31:db:2c:b5:ff:34:5e:d7:f7:11:21:73:03:6e:a3:
e1:13:c7:7d:69:ac:66:1b:08:6e:6c:2b:f0:9f:ce:
ef:57:22:48:39:cf:0b:b2:2b:cf:3c:b6:42:92:0a:
0c:65:ff:6e:fb:5c:cd:1c:c1:7d:55:2a:ed:b2:1e:
4a:a6:fa:82:86:5a:b0:8d:4f:e0:da:62:32:cb:68:
1a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C5:5B:03:14:B5:D2:98:68:72:E6:46:C6:58:31:F1:DE:E4:6E:B6
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LMVbAxS10phocuZGxlgx8d7kbrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:1c0::/44
Signature Algorithm: sha256WithRSAEncryption
09:d8:63:58:09:f7:9f:c9:2e:ce:eb:61:5b:22:74:10:1b:10:
ad:87:bc:67:b9:eb:4d:a9:ba:b3:71:47:b8:b2:5b:4f:0c:83:
43:79:c9:99:01:70:b2:94:4a:c7:58:91:28:df:e4:41:5f:20:
19:fa:c1:57:65:b7:a6:f8:2f:3d:33:fb:ba:19:fc:06:49:0d:
b1:e9:c4:10:c3:d5:d2:0e:98:21:e2:44:38:8c:d1:38:1f:58:
8d:f0:e4:d1:5c:53:c6:6e:40:69:ec:3c:bc:de:0d:27:09:fc:
02:a0:f9:07:8f:76:42:e7:de:8a:e6:a7:e9:23:93:25:14:e3:
c3:1f:d6:ea:d2:97:54:1f:d1:54:85:57:36:dd:24:6c:94:6e:
a2:d0:99:7c:06:46:b3:26:95:1d:c4:d6:f7:63:ac:4a:40:56:
b0:28:04:67:49:c3:db:a2:07:18:b9:b3:cf:ed:d9:0a:82:a7:
b5:dc:03:e5:b4:04:10:29:ee:a0:2f:db:b4:7c:a4:fa:65:38:
0c:4d:5d:1d:d9:37:49:9b:57:fa:d1:6d:1b:db:f3:46:df:04:
3f:d6:5e:0b:e7:2b:9b:b0:24:e4:63:ab:08:82:93:4e:30:54:
0d:1e:5d:77:06:cf:e6:85:c2:16:95:35:37:ef:c7:cc:a4:b4:
f2:37:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:23:38 2025 by rpki-client