Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/Lwc8Au-PT1_hkxIqtOTnuliteYc.roa
File: Lwc8Au-PT1_hkxIqtOTnuliteYc.roa (raw, json)
Hash identifier: wAhzwm0Busbp8T9Bx8r7wOXvoHho3lS6Lk98GWnhgFo=
Subject key identifier: 2F:07:3C:02:EF:8F:4F:5F:E1:93:12:2A:B4:E4:E7:BA:58:AD:79:87
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 019532B07FB50615283E942583450433BDA5
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/Lwc8Au-PT1_hkxIqtOTnuliteYc.roa
Signing time: Sun 23 Feb 2025 12:03:02 +0000
ROA not before: Sun 23 Feb 2025 12:03:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57027
IP address blocks: 2a09:2b80:2::/48 maxlen: 48
2a09:2b80:3::/48 maxlen: 48
2a09:2b80:4::/48 maxlen: 48
2a09:2b80:5::/48 maxlen: 48
2a09:2b80:6::/48 maxlen: 48
2a09:2b80:7::/48 maxlen: 48
2a09:2b80:8::/48 maxlen: 48
2a09:2b80:9::/48 maxlen: 48
2a09:2b80:10::/48 maxlen: 48
2a09:2b80:12::/48 maxlen: 48
2a09:2b80:13::/48 maxlen: 48
2a09:2b80:14::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:32:b0:7f:b5:06:15:28:3e:94:25:83:45:04:33:bd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Feb 23 12:03:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f073c02ef8f4f5fe193122ab4e4e7ba58ad7987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:2c:0a:57:4b:be:38:30:4c:67:98:5e:13:
b6:c3:df:19:62:38:bf:2c:61:2d:0b:20:d8:d1:a7:
59:96:f4:ca:6b:5e:6c:bd:92:6a:6f:69:00:60:4b:
58:bb:ce:ce:b1:0c:02:74:6b:81:09:4e:35:1f:7c:
24:fd:51:c4:c1:83:78:2e:76:c1:f2:0f:78:33:c9:
7b:ff:5e:84:45:6d:7e:2d:40:37:f4:1e:01:2a:ac:
4f:1e:77:01:32:8f:60:85:25:85:9f:8a:1e:1d:df:
ed:86:04:ce:f2:bc:21:6d:98:35:54:32:10:09:14:
03:12:bb:9d:00:45:d9:ee:da:73:0c:60:c7:cc:83:
71:60:ec:3d:0d:3b:e7:86:b3:39:93:59:c6:16:ea:
81:2c:49:65:5e:29:10:33:20:3f:ca:58:36:18:12:
c4:f8:b1:3b:04:37:50:9b:44:b8:eb:c9:ca:e3:4c:
01:2a:bb:3a:e3:69:7b:5e:f2:d0:ca:85:ed:b6:53:
46:af:b8:f1:3c:bc:cc:69:93:36:a7:ee:fa:ca:0c:
e2:c5:ac:20:56:7b:b0:a0:7a:e0:1f:47:6f:b3:ef:
da:78:e2:12:fa:5c:1b:b0:58:66:da:23:67:0a:4e:
1c:f4:7e:3f:61:e1:b5:cd:38:1b:f3:96:b0:e2:04:
5a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:07:3C:02:EF:8F:4F:5F:E1:93:12:2A:B4:E4:E7:BA:58:AD:79:87
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/Lwc8Au-PT1_hkxIqtOTnuliteYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2b80:2::-2a09:2b80:9:ffff:ffff:ffff:ffff:ffff
2a09:2b80:10::/48
2a09:2b80:12::-2a09:2b80:14:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1d:1b:9a:d6:c7:53:e9:ee:15:d6:4b:3a:95:e1:b1:7b:e0:a7:
1b:39:27:6f:0c:41:ea:63:0c:ad:98:df:c7:5d:92:b0:e8:a4:
bd:80:ec:d9:d3:90:99:de:4b:51:95:cf:58:16:11:78:51:68:
bc:b2:9e:89:00:06:a3:7d:7b:e7:7f:02:be:2f:e5:8a:aa:0e:
d1:13:7d:55:8e:63:36:b2:8e:74:8b:ef:37:d7:9e:0a:a1:d9:
91:73:4c:ad:ac:f8:01:2c:7f:dd:ea:a6:12:9d:60:03:81:a5:
10:d8:85:22:99:5e:c8:90:4e:a4:3e:35:0b:87:d9:e8:53:94:
48:3d:6c:6f:ad:9b:3b:59:11:c7:d3:4e:d7:05:d1:b4:4f:38:
16:8d:80:69:c4:a2:29:1f:af:c7:8d:20:36:3e:cf:2d:d6:73:
bd:5e:b5:be:36:5a:51:b0:a1:38:ec:46:e6:38:a0:67:3a:d9:
53:62:f8:57:31:0c:3b:7e:de:93:52:d0:95:d2:0b:be:a5:e6:
af:46:78:06:9a:df:4b:42:ab:8c:a6:61:c0:de:62:8c:9f:74:
39:23:4e:e8:aa:9a:64:6b:b5:80:d5:c0:87:d2:ac:93:11:38:
9b:b7:56:34:17:c9:de:13:66:5a:cc:0b:70:47:b6:15:5b:ca:
84:c8:e0:6b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAZUysH+1BhUoPpQlg0UEM72lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTY2NWI5MDA2OWJkNzE4NTA2MDJlNzQwMGM1Mjk3OTMy
NjllMzkwHhcNMjUwMjIzMTIwMzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjA3M2MwMmVmOGY0ZjVmZTE5MzEyMmFiNGU0ZTdiYTU4YWQ3OTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mosCldLvjgwTGeYXhO2w98ZYji/
LGEtCyDY0adZlvTKa15svZJqb2kAYEtYu87OsQwCdGuBCU41H3wk/VHEwYN4LnbB
8g94M8l7/16ERW1+LUA39B4BKqxPHncBMo9ghSWFn4oeHd/thgTO8rwhbZg1VDIQ
CRQDErudAEXZ7tpzDGDHzINxYOw9DTvnhrM5k1nGFuqBLEllXikQMyA/ylg2GBLE
+LE7BDdQm0S468nK40wBKrs642l7XvLQyoXttlNGr7jxPLzMaZM2p+76ygzixawg
VnuwoHrgH0dvs+/aeOIS+lwbsFhm2iNnCk4c9H4/YeG1zTgb85aw4gRamQIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFC8HPALvj09f4ZMSKrTk57pYrXmHMB8GA1UdIwQY
MBaAFGWmZbkAab1xhQYC50AMUpeTJp45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjct
Yzk0NTdlYzgxMTUxLzEvTHdjOEF1LVBUMV9oa3hJcXRPVG51bGl0ZVljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjctYzk0NTdlYzgxMTUx
LzEvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxMBIDBwEqCSuA
AAIDBwEqCSuAAAgDBwAqCSuAABAwEgMHASoJK4AAEgMHACoJK4AAFDANBgkqhkiG
9w0BAQsFAAOCAQEAHRua1sdT6e4V1ks6leGxe+CnGzknbwxB6mMMrZjfx12SsOik
vYDs2dOQmd5LUZXPWBYReFFovLKeiQAGo317538Cvi/liqoO0RN9VY5jNrKOdIvv
N9eeCqHZkXNMraz4ASx/3eqmEp1gA4GlENiFIpleyJBOpD41C4fZ6FOUSD1sb62b
O1kRx9NO1wXRtE84Fo2AacSiKR+vx40gNj7PLdZzvV61vjZaUbChOOxG5jigZzrZ
U2L4VzEMO37ek1LQldILvqXmr0Z4BprfS0KrjKZhwN5ijJ90OSNO6KqaZGu1gNXA
h9KskxE4m7dWNBfJ3hNmWswLcEe2FVvKhMjgaw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:01:37 2025 by rpki-client