Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/ltulORma-P3wSZy8kJxgbvD19do.roa
File: ltulORma-P3wSZy8kJxgbvD19do.roa (raw, json)
Hash identifier: 3uqahYMVTtnE2H28OWI+8QzVU2R+VXC5p06rtgEZIiM=
Subject key identifier: 96:DB:A5:39:19:9A:F8:FD:F0:49:9C:BC:90:9C:60:6E:F0:F5:F5:DA
Certificate issuer: /CN=d1a1244a3c57b9febb68d684a832b0671e3e4c84
Certificate serial: 018CC425482DF9CA0EF60E4BB299BD86E566
Authority key identifier: D1:A1:24:4A:3C:57:B9:FE:BB:68:D6:84:A8:32:B0:67:1E:3E:4C:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aEkSjxXuf67aNaEqDKwZx4-TIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/ltulORma-P3wSZy8kJxgbvD19do.roa
Signing time: Mon 01 Jan 2024 08:30:26 +0000
ROA not before: Mon 01 Jan 2024 08:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200303
IP address blocks: 2001:678:c20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:48:2d:f9:ca:0e:f6:0e:4b:b2:99:bd:86:e5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a1244a3c57b9febb68d684a832b0671e3e4c84
Validity
Not Before: Jan 1 08:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96dba539199af8fdf0499cbc909c606ef0f5f5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:6f:a9:71:1c:ce:25:fc:8b:a2:08:ed:13:
b3:9c:fc:0e:60:d7:39:37:e6:24:2d:5b:a5:47:63:
b3:ed:79:f5:b2:cf:65:73:7f:ca:a5:bc:9a:2b:17:
4f:dd:ab:ff:b7:18:92:f5:21:3b:63:8f:64:2f:6f:
44:cf:8a:ab:a2:ac:2c:6e:f2:cd:5d:87:39:c8:1e:
8e:ed:79:09:88:17:37:ee:27:89:8c:d0:8f:4f:7f:
a2:df:2a:14:5f:9c:4e:76:68:89:d7:07:70:3f:32:
fd:d1:4d:53:5c:f9:25:ff:08:60:31:8c:b3:f8:86:
b2:82:53:85:af:0b:68:1e:35:43:4f:04:3a:74:23:
c7:54:31:17:5b:43:8c:72:2a:71:20:2a:c6:b3:04:
66:c8:66:90:d8:a9:87:0b:28:ed:c3:c8:0f:09:89:
b7:47:98:ad:4b:bf:b8:5a:25:bd:e1:4c:32:a6:f0:
9f:ff:ce:1a:c1:6a:d8:76:6c:51:a8:0d:af:88:15:
f1:fe:cc:1f:e3:e7:e7:8e:45:9a:1e:d5:f4:4a:82:
52:07:ff:66:3f:41:3b:b1:d0:eb:57:7b:85:60:e1:
6c:e7:5d:40:44:87:52:ff:84:15:ae:1e:28:d4:8e:
53:11:ea:6c:a8:dd:b2:7d:a4:65:af:f7:51:75:16:
91:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DB:A5:39:19:9A:F8:FD:F0:49:9C:BC:90:9C:60:6E:F0:F5:F5:DA
X509v3 Authority Key Identifier:
keyid:D1:A1:24:4A:3C:57:B9:FE:BB:68:D6:84:A8:32:B0:67:1E:3E:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aEkSjxXuf67aNaEqDKwZx4-TIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/ltulORma-P3wSZy8kJxgbvD19do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/0aEkSjxXuf67aNaEqDKwZx4-TIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c20::/48
Signature Algorithm: sha256WithRSAEncryption
14:68:0a:c4:00:c7:98:47:fc:0e:c5:e0:7d:42:31:34:bb:7d:
0f:b0:3a:44:b1:65:27:16:6b:93:99:23:a1:32:d1:de:3e:c2:
10:7d:8b:e4:14:28:4c:22:6e:82:e8:30:8e:82:f3:9a:23:63:
c8:b9:3b:1d:7a:87:32:81:26:15:5b:a8:66:cc:40:06:f4:4d:
3e:aa:29:88:84:41:5a:3d:a6:59:1e:41:35:ab:02:60:09:26:
18:20:7f:13:ca:a5:77:72:68:d8:97:55:a0:7f:1f:7b:b1:e3:
a6:61:0c:d0:ff:97:73:4b:11:ab:f5:88:0d:0f:e5:4e:cd:e8:
b7:10:83:2a:7c:67:63:06:7f:1c:bb:f4:af:aa:87:1e:e1:53:
83:80:09:3b:83:d6:50:d1:e0:43:f2:ce:16:51:ad:d8:bf:a7:
bc:39:bb:77:67:7b:41:8b:17:52:bc:25:9c:23:5b:04:3d:d5:
75:01:44:12:9a:1e:14:85:00:23:8e:19:4c:4b:84:d8:fc:14:
c8:38:20:e4:fa:5a:91:81:4a:34:7f:85:ba:ad:cd:e2:19:a9:
7f:d5:8d:a8:ec:d8:8b:72:bb:35:ef:42:6f:69:4f:99:32:b2:
fc:59:15:b7:d7:54:c0:57:14:18:1a:77:09:05:90:bd:db:86:
c3:1d:8f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:42 2025 by rpki-client