Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/PreduLpg0Wn_iLFbrZUalQa5d1M.roa
File: PreduLpg0Wn_iLFbrZUalQa5d1M.roa (raw, json)
Hash identifier: 7wPghoPgpXHOK7LSpOiUnRhB/hTVEIQA7BR4qWl5n6E=
Subject key identifier: 3E:B7:9D:B8:BA:60:D1:69:FF:88:B1:5B:AD:95:1A:95:06:B9:77:53
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 0194CC603C2AE14EAACB1C1D5BE4F0D57783
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/PreduLpg0Wn_iLFbrZUalQa5d1M.roa
Signing time: Mon 03 Feb 2025 15:14:06 +0000
ROA not before: Mon 03 Feb 2025 15:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29182
IP address blocks: 2a0c:c183::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:60:3c:2a:e1:4e:aa:cb:1c:1d:5b:e4:f0:d5:77:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Feb 3 15:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eb79db8ba60d169ff88b15bad951a9506b97753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:18:ef:31:f8:ec:13:8a:8f:9c:cf:91:9a:
76:fd:26:b5:d8:08:4a:30:b2:91:3a:e3:6e:d6:aa:
64:15:cb:4f:5b:e3:b2:58:9c:16:a6:43:a0:fb:45:
35:ab:cf:a8:aa:4f:fe:49:0e:26:de:04:f0:6f:7b:
c9:e3:3f:99:c4:4a:91:54:4a:a4:4c:d0:ad:13:a9:
7a:9f:09:ff:b9:32:48:d6:ec:d2:6d:00:aa:b6:11:
69:44:df:f9:0c:58:f5:ae:75:c3:fc:79:de:ae:ad:
e5:db:aa:d9:be:db:8e:4c:f9:f8:cf:bd:9d:45:88:
91:3c:07:c8:80:36:5a:6a:05:d6:19:00:17:b3:f7:
43:c5:18:be:34:37:b3:71:80:95:ab:49:34:bc:24:
67:b6:8a:30:5b:bb:bd:d1:3b:48:76:40:68:8f:a4:
2c:56:71:2e:34:7e:17:67:c1:33:54:05:5d:5a:c2:
8a:93:db:0b:a6:60:9b:f8:3f:8c:aa:70:01:45:11:
af:cc:ee:e9:5d:a9:a6:45:40:9f:7b:cc:74:46:11:
2b:d3:02:43:25:b3:65:e1:2c:f6:46:01:3a:65:c0:
3f:b8:76:5b:5c:44:c2:1a:3d:de:4c:ff:77:f2:47:
66:86:e9:e7:71:af:17:67:87:f4:2a:fc:d8:0a:6c:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B7:9D:B8:BA:60:D1:69:FF:88:B1:5B:AD:95:1A:95:06:B9:77:53
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/PreduLpg0Wn_iLFbrZUalQa5d1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:c183::/32
Signature Algorithm: sha256WithRSAEncryption
5c:d7:2d:ee:84:86:37:1e:42:ff:6f:4a:f6:90:a5:49:99:c2:
b8:40:75:dd:7a:f6:40:05:cb:91:96:79:69:48:9e:e4:83:da:
65:84:92:ba:f8:6b:6f:7c:9a:e2:ec:7c:84:9d:3f:d1:6a:80:
ae:9c:7b:df:5d:ee:68:21:3b:99:41:a9:b7:31:0a:f9:85:60:
42:f3:d6:52:8d:cc:cc:7f:15:b3:e3:a4:27:c6:dd:5f:dc:68:
60:c9:32:5e:12:b7:eb:c7:03:a2:01:87:08:89:12:45:d3:5f:
a5:cc:05:c0:cd:73:83:73:15:6b:35:b8:56:86:e0:26:71:39:
d1:d8:47:8b:5b:2e:e3:e6:51:56:59:03:1a:9e:22:6e:ad:bc:
e3:5f:76:07:9e:f9:f2:23:bd:60:8d:f8:d3:78:e3:a1:5c:92:
70:87:4e:d1:ce:99:68:c9:57:fd:83:35:b6:f7:26:01:64:a9:
04:64:d1:86:7a:78:07:3e:62:ef:5b:a0:6d:18:58:0f:e6:67:
03:37:8c:12:6d:30:bd:99:53:77:86:be:d2:24:36:8a:73:6e:
1e:0e:29:70:69:b3:25:1a:58:fa:6b:ec:a1:d7:1a:87:00:ef:
91:93:52:83:ac:5f:7f:31:d7:d7:2d:c9:f7:9d:8d:36:72:e0:
2f:1e:c4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:53:38 2025 by rpki-client