Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/LJgy--ghdav_MyF8TPbJGBBcJsM.roa
File: LJgy--ghdav_MyF8TPbJGBBcJsM.roa (raw, json)
Hash identifier: RYIOnFchz2QfqIrXcmdOLL5n/fP3CTzRL8l0RQHC3K4=
Subject key identifier: 2C:98:32:FB:E8:21:75:AB:FF:33:21:7C:4C:F6:C9:18:10:5C:26:C3
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD1DBDDF347F33A7019DF527626E1C
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/LJgy--ghdav_MyF8TPbJGBBcJsM.roa
Signing time: Thu 02 Jan 2025 07:48:52 +0000
ROA not before: Thu 02 Jan 2025 07:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42532
IP address blocks: 216.173.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:1d:bd:df:34:7f:33:a7:01:9d:f5:27:62:6e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c9832fbe82175abff33217c4cf6c918105c26c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:e4:70:36:dd:c4:c1:6e:4a:83:08:38:a7:
fe:83:f8:fe:ab:94:0b:13:3b:40:07:0a:8d:61:77:
21:dd:2b:00:c5:a7:44:1f:30:16:c4:ca:ce:55:a2:
cb:28:39:a4:8e:38:91:00:09:86:bb:02:4d:76:5b:
c1:9c:c0:66:86:d8:3e:1d:ea:f5:c8:3c:2b:b1:f0:
0c:05:f1:c5:78:3a:fb:f0:c7:26:1c:1e:26:f7:46:
16:3f:40:db:cf:e4:ff:ed:af:ee:3b:cb:6e:c4:60:
67:51:9b:9b:06:24:0a:ff:0f:03:3b:19:c3:bc:bd:
95:e7:e8:81:68:71:40:c6:d6:8c:4b:6d:87:9b:f3:
2c:8a:42:5d:67:6f:66:af:60:6f:2e:ad:47:10:f8:
29:8f:ec:40:e1:47:7b:bb:17:65:c8:14:43:bd:41:
16:5b:ff:2f:d3:74:f0:fa:a3:25:cb:8c:ab:f6:a3:
20:3b:a3:28:5f:34:55:6b:99:7d:a5:a6:78:0e:99:
67:4a:53:c5:da:b0:2a:c7:2e:bb:f7:81:9b:82:42:
2b:4d:9e:b6:53:f8:e0:0e:07:fb:17:0f:cb:e4:80:
aa:21:40:cd:8e:7e:cf:71:1b:96:96:6a:ce:f6:f8:
d1:2d:f2:74:57:38:cb:dd:e5:47:f9:f8:57:9f:93:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:98:32:FB:E8:21:75:AB:FF:33:21:7C:4C:F6:C9:18:10:5C:26:C3
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/LJgy--ghdav_MyF8TPbJGBBcJsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.173.68.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:b3:26:3f:4d:c6:8d:f6:2b:50:7f:6b:63:40:1f:41:0f:f3:
e6:22:01:8b:6f:59:dd:00:8e:c7:3a:44:9c:77:cb:4e:94:d1:
15:8b:80:22:f1:68:73:a1:d2:90:2b:d4:d2:37:99:bb:7b:14:
09:fb:84:72:0c:89:43:f0:82:f8:06:c3:88:6a:65:99:2c:1f:
1f:13:ff:0e:8a:53:1d:e9:2a:77:e0:f0:a7:76:1c:21:b4:6d:
3a:38:9c:f9:9a:56:f5:fe:5f:5c:73:61:d4:a1:04:7d:28:f9:
03:67:bf:59:c0:e4:26:73:52:c6:9c:bb:a9:52:ac:f2:f0:51:
cb:95:b2:27:1e:cf:c2:1d:7e:78:a4:ed:33:57:6b:4f:ba:25:
c7:72:43:7f:66:c1:e3:dd:db:81:f1:43:9e:36:61:52:6b:9c:
17:d7:39:70:51:f6:af:57:3c:65:8a:38:c5:42:ce:c9:c6:ad:
a8:32:f8:0b:76:95:1e:f5:ac:81:5d:c2:d5:32:c7:41:53:b6:
e0:cd:00:35:34:b1:be:10:2f:13:51:08:fc:fd:9c:eb:87:7f:
d4:60:cc:11:b1:db:88:c2:f4:f5:61:c2:15:af:f7:52:05:59:
93:b4:c9:63:8b:7a:19:88:27:5c:92:fc:69:4a:eb:ac:7d:c6:
33:fc:47:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/R293zR/M6cBnfUnYm4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjUwMTAyMDc0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzk4MzJmYmU4MjE3NWFiZmYzMzIxN2M0Y2Y2YzkxODEwNWMyNmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPnkcDbdxMFuSoMIOKf+g/j+q5QL
EztABwqNYXch3SsAxadEHzAWxMrOVaLLKDmkjjiRAAmGuwJNdlvBnMBmhtg+Her1
yDwrsfAMBfHFeDr78McmHB4m90YWP0Dbz+T/7a/uO8tuxGBnUZubBiQK/w8DOxnD
vL2V5+iBaHFAxtaMS22Hm/MsikJdZ29mr2BvLq1HEPgpj+xA4Ud7uxdlyBRDvUEW
W/8v03Tw+qMly4yr9qMgO6MoXzRVa5l9paZ4DplnSlPF2rAqxy6794GbgkIrTZ62
U/jgDgf7Fw/L5ICqIUDNjn7PcRuWlmrO9vjRLfJ0VzjL3eVH+fhXn5PKQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCyYMvvoIXWr/zMhfEz2yRgQXCbDMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvTEpneS0tZ2hkYXZfTXlGOFRQYkpHQkJjSnNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2K1EMA0G
CSqGSIb3DQEBCwUAA4IBAQAssyY/TcaN9itQf2tjQB9BD/PmIgGLb1ndAI7HOkSc
d8tOlNEVi4Ai8WhzodKQK9TSN5m7exQJ+4RyDIlD8IL4BsOIamWZLB8fE/8OilMd
6Sp34PCndhwhtG06OJz5mlb1/l9cc2HUoQR9KPkDZ79ZwOQmc1LGnLupUqzy8FHL
lbInHs/CHX54pO0zV2tPuiXHckN/ZsHj3duB8UOeNmFSa5wX1zlwUfavVzxlijjF
Qs7Jxq2oMvgLdpUe9ayBXcLVMsdBU7bgzQA1NLG+EC8TUQj8/Zzrh3/UYMwRsduI
wvT1YcIVr/dSBVmTtMlji3oZiCdckvxpSuusfcYz/EeP
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:01:10 2025 by rpki-client