Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/LLXCDE3u8n3KkseV273SByWcjV4.roa
File: LLXCDE3u8n3KkseV273SByWcjV4.roa (raw, json)
Hash identifier: 8EOsq9VwSIEUHYYe/uyVc69GPMWiBScIX6xDY5S+MGY=
Subject key identifier: 2C:B5:C2:0C:4D:EE:F2:7D:CA:92:C7:95:DB:BD:D2:07:25:9C:8D:5E
Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Certificate serial: 0417C401
Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/LLXCDE3u8n3KkseV273SByWcjV4.roa
Signing time: Wed 19 Jan 2022 10:13:23 +0000
ROA not before: Wed 19 Jan 2022 10:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213246
IP address blocks: 2a01:b960:230f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68666369 (0x417c401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Validity
Not Before: Jan 19 10:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2cb5c20c4deef27dca92c795dbbdd207259c8d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:ff:0d:54:84:68:21:28:22:50:b6:ca:54:
dc:a2:95:2f:e0:02:66:2f:c7:11:69:68:d5:21:69:
41:00:18:69:f7:03:9a:47:60:26:57:ec:2d:32:22:
7f:a8:b9:7a:a9:28:be:a3:12:86:09:91:6b:42:85:
90:55:f2:b4:2b:61:ea:46:d3:77:6e:9d:d7:d7:a8:
94:e1:71:36:9e:62:da:8d:39:f7:d8:47:4b:a8:7e:
05:7a:de:59:fb:29:4c:7b:c0:00:28:8c:b7:83:54:
e3:db:3b:81:3a:1e:00:2f:e7:8e:ef:0a:bd:c9:bb:
9c:30:12:4b:cd:e5:93:45:0e:a6:79:86:a5:a7:f9:
48:0f:55:47:d7:f5:ce:86:39:b9:f0:f5:0a:fe:3b:
5a:db:49:c8:71:8c:b7:6a:39:ac:f0:bb:0e:42:d3:
5b:3e:b8:a9:c8:b2:79:9c:2e:92:6f:ae:1a:d8:e6:
0c:12:2c:47:e4:72:99:3a:2a:82:9b:c5:d4:93:f0:
c1:e1:a1:47:40:b7:fb:79:06:f6:84:4c:65:57:5d:
19:6d:dc:9c:85:63:63:a6:6f:0e:49:0c:bc:d8:c7:
b1:2d:50:08:86:f1:4e:84:bc:6c:0d:66:3a:3e:81:
0b:fc:aa:bb:af:88:b3:38:42:94:12:94:51:a2:7c:
fd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B5:C2:0C:4D:EE:F2:7D:CA:92:C7:95:DB:BD:D2:07:25:9C:8D:5E
X509v3 Authority Key Identifier:
keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/LLXCDE3u8n3KkseV273SByWcjV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:b960:230f::/48
Signature Algorithm: sha256WithRSAEncryption
56:38:69:c1:09:69:61:c8:2b:10:14:8d:73:45:6d:c5:07:fa:
30:13:21:5d:e6:87:9a:08:76:b7:5a:74:68:ea:fd:94:5f:6a:
e0:c4:91:44:12:79:56:2b:f8:89:f4:85:6b:fb:9a:99:ac:e3:
22:54:54:66:a0:32:e3:74:85:79:57:97:32:2f:06:15:96:18:
a1:54:96:f9:ce:9d:f8:46:1f:fb:08:db:d8:d1:0e:49:c9:61:
2a:eb:c9:3f:35:8d:a4:23:4a:e4:5d:dc:80:5c:4b:6f:9b:9f:
37:9c:50:e2:5b:05:45:6b:f0:7f:4d:69:36:9f:35:5e:37:f1:
c6:4d:90:0f:db:c3:ef:c3:30:d9:19:85:ce:b9:7b:1d:20:5d:
5e:df:f4:bc:1e:13:80:be:b6:bb:82:dd:76:5d:16:df:cd:ff:
2a:f0:71:ab:10:68:9b:9f:c9:2d:af:d3:dc:b8:a1:65:45:87:
3d:e7:90:6b:e6:7d:54:a7:68:21:bf:a5:c3:35:eb:fd:20:81:
94:fc:c8:0b:4e:69:e1:ea:e4:73:a3:82:66:bf:9f:b9:14:c6:
a3:e6:c3:fe:22:72:3a:43:9b:6d:b9:2b:e5:5f:2f:5d:df:4c:
01:7c:eb:02:c3:c9:65:e2:ce:a0:1c:df:49:3e:96:8d:7e:38:
7b:5b:8f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:00 2025 by rpki-client