Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_lG-LGUI-17VBzSncmkmZ-YgHds.roa
File: _lG-LGUI-17VBzSncmkmZ-YgHds.roa (raw, json)
Hash identifier: 76e50up01HshusCSHPkrJxQgajWl7kYiKQQv57y7Wzk=
Subject key identifier: FE:51:BE:2C:65:08:FB:5E:D5:07:34:A7:72:69:26:67:E6:20:1D:DB
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA8C678F4D2EF2475A03E08A5A9A1B
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_lG-LGUI-17VBzSncmkmZ-YgHds.roa
Signing time: Wed 01 Jan 2025 03:48:21 +0000
ROA not before: Wed 01 Jan 2025 03:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207957
IP address blocks: 2a0c:b641:880::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:8c:67:8f:4d:2e:f2:47:5a:03:e0:8a:5a:9a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe51be2c6508fb5ed50734a772692667e6201ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:00:b7:dc:de:40:75:75:cd:d4:90:67:46:67:
67:c1:9a:c6:07:52:08:99:70:14:29:e5:82:71:3e:
57:f0:33:f2:80:7d:45:3d:d7:b5:c4:99:22:0e:c5:
12:48:2a:49:28:64:65:6b:68:e6:ed:ce:2f:93:a2:
c1:19:a3:4a:7d:6b:97:d8:e8:ca:48:de:62:a3:a2:
a3:44:0b:e2:c1:17:c2:1b:eb:af:b1:58:82:4d:d7:
36:02:e5:2c:3f:07:4f:88:49:25:9f:1b:1a:c6:e6:
81:a9:d4:30:41:ec:63:50:82:cb:d9:67:38:87:86:
3b:00:d5:98:a5:dc:f6:ad:dd:f4:84:b8:f7:c7:bf:
67:c8:f1:6c:8b:70:21:be:9b:6c:b7:ab:e7:b4:26:
45:99:61:4f:6e:29:79:0e:4f:42:10:3c:0b:b6:6e:
36:58:97:ad:c7:d6:ec:55:eb:4d:82:c4:d6:2f:65:
95:53:ec:cc:8a:71:ae:b7:8e:51:c1:0c:cc:0d:07:
4d:10:4c:6b:62:3a:da:f9:9f:58:26:97:7a:5d:70:
ce:12:1b:56:0f:a9:0f:e3:88:74:68:fd:10:f1:d7:
3f:89:85:76:5a:c5:c1:75:70:fd:3a:77:c5:47:25:
02:7a:71:67:22:a1:39:3a:87:24:51:9d:1e:db:92:
75:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:51:BE:2C:65:08:FB:5E:D5:07:34:A7:72:69:26:67:E6:20:1D:DB
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_lG-LGUI-17VBzSncmkmZ-YgHds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:880::/44
Signature Algorithm: sha256WithRSAEncryption
81:01:c1:e0:be:9c:34:b1:d3:0a:20:c7:f3:2d:9c:84:77:36:
88:dd:aa:a0:88:a6:7f:4e:45:a4:33:c5:1f:41:97:ce:d5:cc:
c6:cb:d1:1d:2e:39:bc:09:a4:09:65:f8:3a:56:fd:35:a1:0a:
bb:6b:b5:39:b0:be:a2:f2:e8:75:41:2b:29:8a:b5:eb:49:44:
e7:bc:b4:f4:fa:85:b0:91:98:c8:a0:3a:5b:fe:91:25:c6:e9:
cf:cb:b6:da:fc:b8:31:49:a5:96:5c:d8:9b:04:00:c4:10:43:
ad:92:66:58:15:4d:c6:b3:4b:e8:64:2f:92:fb:f8:b6:5d:8b:
ca:44:42:98:52:c0:70:e9:f4:15:fa:0f:c5:73:c8:50:12:30:
eb:e0:c5:9d:35:95:45:9c:fc:7a:0c:2a:2d:26:1c:66:b6:7c:
8e:97:ed:c0:0b:e5:55:32:5f:9d:05:01:f2:25:55:92:2d:b8:
30:82:8c:cb:13:8b:46:7c:aa:9b:e7:ce:d9:a2:b6:63:fa:1e:
d2:2f:86:c0:f3:03:c2:13:54:ac:51:74:24:9a:c5:b6:9f:04:
7b:30:23:6c:7b:b0:1f:b5:c0:9d:a3:00:96:e6:8f:06:bb:1f:
28:d2:95:99:29:b9:54:97:3f:6b:2d:b4:a3:1b:33:35:b5:b9:
39:52:5f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:04:32 2025 by rpki-client