Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/lcycvAbT-2PUUx_keEjD_rzNQVg.roa
File: lcycvAbT-2PUUx_keEjD_rzNQVg.roa (raw, json)
Hash identifier: ohYpD8zllBNGHneXiioDVg0sD783EBRieTug607OnxU=
Subject key identifier: 95:CC:9C:BC:06:D3:FB:63:D4:53:1F:E4:78:48:C3:FE:BC:CD:41:58
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 019425215781C3962DC5187DA8D423BFCFDA
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/lcycvAbT-2PUUx_keEjD_rzNQVg.roa
Signing time: Thu 02 Jan 2025 03:48:49 +0000
ROA not before: Thu 02 Jan 2025 03:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50304
IP address blocks: 2a01:6560:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:57:81:c3:96:2d:c5:18:7d:a8:d4:23:bf:cf:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Jan 2 03:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95cc9cbc06d3fb63d4531fe47848c3febccd4158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ab:8b:9f:1d:39:5f:65:20:9f:d1:2f:0b:42:
d2:f0:0a:87:69:36:cd:0b:3e:e3:00:95:79:0c:75:
90:67:84:6b:c3:9b:70:01:bd:08:e9:89:7b:5a:de:
59:59:ba:aa:a1:46:91:c8:b9:a2:7e:f0:1e:21:ed:
66:51:8f:e8:b7:da:cb:b0:b5:5c:7a:40:b5:97:12:
92:c8:04:be:26:4e:1f:a9:f5:5e:7b:90:4a:83:06:
4d:3d:04:45:b0:2c:38:70:bb:7e:b4:20:31:89:d3:
6b:dc:16:3b:ab:a7:32:19:05:94:fa:6e:13:d6:50:
84:97:5b:88:eb:a4:bd:12:6e:47:b4:72:64:d1:bd:
29:d8:3d:5d:d5:02:43:9e:f0:65:00:24:b1:b9:04:
88:0a:2d:e3:b0:8d:d9:14:dd:15:bb:6a:d4:fe:36:
07:a4:64:05:e2:5a:ab:0a:f7:f1:8d:82:d3:65:ec:
86:d0:7e:68:7f:61:56:53:2a:42:85:cd:b0:6e:51:
06:a8:71:44:4a:6c:e3:40:17:49:8e:a4:ac:14:93:
5a:87:5d:f9:ca:ee:26:e3:c8:50:91:00:d6:fc:74:
b0:c9:8b:9f:af:23:61:29:4d:d0:1c:e6:82:51:f2:
37:dd:ae:4e:0e:76:c1:dd:d6:2a:6f:17:3d:39:3b:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CC:9C:BC:06:D3:FB:63:D4:53:1F:E4:78:48:C3:FE:BC:CD:41:58
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/lcycvAbT-2PUUx_keEjD_rzNQVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:6560:100::/48
Signature Algorithm: sha256WithRSAEncryption
51:fb:5f:2c:dd:e4:05:85:81:22:e7:62:75:67:9b:8a:d8:e4:
d5:17:08:76:bd:e0:d8:8e:73:d8:cc:92:6d:23:23:f1:ff:9e:
d8:58:c8:71:bf:06:57:da:10:b6:fb:a1:cc:d8:e2:13:2a:67:
a9:67:ca:76:e7:88:c7:df:9d:76:8c:75:71:6f:72:91:c3:cd:
e8:27:c1:5a:5e:2b:1b:07:79:1d:e8:e6:1f:bb:d4:da:eb:12:
96:cb:55:8c:44:af:e4:96:03:25:f2:b0:4c:1d:91:3c:b3:e7:
3f:f0:34:93:fc:bd:26:89:3a:76:c7:41:dd:85:3e:32:36:e0:
84:70:0d:e0:1b:85:9c:96:fc:eb:98:2c:78:65:34:6a:d8:6b:
49:f2:f9:53:8b:89:51:1c:24:cf:57:78:63:eb:a6:bf:12:21:
7c:2b:42:f4:5e:75:2f:67:bf:1e:9b:28:1f:60:1e:f0:c1:99:
36:05:8d:d8:1c:ca:1e:80:91:d8:f1:63:e0:b6:17:28:e0:80:
67:2d:09:ec:3d:81:e9:cf:24:3e:cc:fa:cb:e8:ea:21:bc:73:
83:e4:a2:c5:ab:59:ed:7f:2c:f4:be:39:de:88:3d:d7:32:f9:
9b:e0:d9:fd:60:ba:f8:74:d6:eb:4b:d7:55:97:cf:36:8a:1a:
aa:8a:87:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:33 2025 by rpki-client