Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/LiLydKxv5PmgP69-XexnIVaf-Ik.roa
File: LiLydKxv5PmgP69-XexnIVaf-Ik.roa (raw, json)
Hash identifier: UFYpM6d1HZ6FscU3R1Nrdnbo/fSelWrDKcyHzBYXmJA=
Subject key identifier: 2E:22:F2:74:AC:6F:E4:F9:A0:3F:AF:7E:5D:EC:67:21:56:9F:F8:89
Certificate issuer: /CN=d24f497d157847005336b777361b1d20905c5213
Certificate serial: 01856DE63CF84DEE9AA48760B7A9699F8AFE
Authority key identifier: D2:4F:49:7D:15:78:47:00:53:36:B7:77:36:1B:1D:20:90:5C:52:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0k9JfRV4RwBTNrd3NhsdIJBcUhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/LiLydKxv5PmgP69-XexnIVaf-Ik.roa
Signing time: Sun 01 Jan 2023 15:14:43 +0000
ROA not before: Sun 01 Jan 2023 15:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212985
IP address blocks: 2a0e:9b43::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:3c:f8:4d:ee:9a:a4:87:60:b7:a9:69:9f:8a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24f497d157847005336b777361b1d20905c5213
Validity
Not Before: Jan 1 15:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e22f274ac6fe4f9a03faf7e5dec6721569ff889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:c8:fd:03:21:38:b0:2e:40:96:d4:8e:4f:
47:0d:e8:fd:e5:46:bf:24:75:26:9c:14:dc:66:7a:
53:91:11:3d:30:e5:18:fe:e7:b7:e4:03:a8:72:83:
8e:13:98:b2:20:76:40:86:9e:2b:44:5b:94:09:07:
ae:9f:31:7c:38:5c:59:39:51:f6:45:64:55:e4:66:
b4:9a:26:eb:a8:8d:ae:61:8c:6b:39:86:10:6d:3d:
7d:61:d9:a6:18:e0:1e:90:ad:f9:4f:76:45:db:16:
f4:24:f7:48:9a:88:55:dd:a8:ae:4b:f8:9d:3d:e7:
1a:3e:b5:8d:bd:de:ae:be:59:d2:72:99:7d:3c:4b:
21:dc:64:09:08:21:e9:37:45:8d:bd:8c:02:26:60:
70:b3:da:5e:dd:8e:8f:75:c7:69:b7:3b:12:ec:37:
73:12:db:91:4e:69:d3:6c:4a:62:28:fb:30:4f:9b:
77:76:9f:59:24:93:31:6c:5b:d3:0b:f6:aa:1e:99:
1a:7d:ca:48:a2:3a:fa:a7:a3:69:91:39:87:dc:f3:
98:b9:d1:31:27:59:ac:f8:ca:45:a7:c7:c2:47:c2:
9c:be:14:24:89:54:99:1c:1f:dc:27:29:81:e4:69:
68:23:8c:ea:a0:68:d2:2f:6c:79:f1:d1:37:00:71:
52:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:22:F2:74:AC:6F:E4:F9:A0:3F:AF:7E:5D:EC:67:21:56:9F:F8:89
X509v3 Authority Key Identifier:
keyid:D2:4F:49:7D:15:78:47:00:53:36:B7:77:36:1B:1D:20:90:5C:52:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0k9JfRV4RwBTNrd3NhsdIJBcUhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/LiLydKxv5PmgP69-XexnIVaf-Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/0k9JfRV4RwBTNrd3NhsdIJBcUhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:9b43::/32
Signature Algorithm: sha256WithRSAEncryption
38:71:5b:3e:e3:98:72:af:e8:70:e5:dd:cc:be:86:b3:9e:ce:
93:83:ad:fb:28:6c:cc:23:19:04:43:1f:eb:c9:cc:3c:97:18:
2c:29:e7:a5:eb:59:b4:1e:41:98:04:6c:fb:c2:17:96:fe:35:
7a:3c:c1:4c:e4:3b:cf:a0:84:c6:4e:7f:41:42:44:c2:71:a9:
d4:5b:52:32:a9:b9:88:6f:59:19:26:53:75:81:03:1f:1b:13:
23:51:70:71:11:59:69:4f:92:01:82:05:5b:ee:9f:74:e2:94:
64:cf:02:ca:d9:ab:e0:43:c0:b1:fa:26:11:82:a9:76:65:38:
55:6a:4d:d0:d2:e9:b3:e5:28:28:60:e3:1e:d1:b9:96:f8:16:
87:59:4e:05:77:de:84:95:af:eb:28:f6:96:ca:a2:9b:64:eb:
44:dd:1d:ec:5c:89:ab:bf:7f:c2:bc:72:00:05:86:48:ad:47:
a7:e6:53:b5:7e:0c:c8:12:29:d0:fe:12:08:c5:af:25:98:27:
d4:38:d2:3c:28:c4:80:e3:e4:7d:3a:0d:88:0e:76:76:dd:f5:
34:1b:1e:0d:55:4c:65:e8:87:e6:59:45:01:03:bf:d1:c9:8a:
f4:bc:5f:7b:5a:44:73:6c:a6:d8:65:9e:a7:b0:df:35:26:00:
60:15:7a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:41 2025 by rpki-client