Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8b838f-aa9f-450f-a62e-3d55bdc95650/1/Lv1YgVYRSN8W_x16sodxlW3roWQ.roa
File: Lv1YgVYRSN8W_x16sodxlW3roWQ.roa (raw, json)
Hash identifier: 4LJUbHHdRepVcfjxCbefEVxM2Ei8JousJ1c6kTbySf8=
Subject key identifier: 2E:FD:58:81:56:11:48:DF:16:FF:1D:7A:B2:87:71:95:6D:EB:A1:64
Certificate issuer: /CN=85982df8c771a012341e667ac38d8bd4f31b084e
Certificate serial: 01971B5AF364F7B559034514867528F8671B
Authority key identifier: 85:98:2D:F8:C7:71:A0:12:34:1E:66:7A:C3:8D:8B:D4:F3:1B:08:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZgt-MdxoBI0HmZ6w42L1PMbCE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8b838f-aa9f-450f-a62e-3d55bdc95650/1/Lv1YgVYRSN8W_x16sodxlW3roWQ.roa
Signing time: Thu 29 May 2025 09:23:54 +0000
ROA not before: Thu 29 May 2025 09:23:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209569
IP address blocks: 2001:678:dcc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:5a:f3:64:f7:b5:59:03:45:14:86:75:28:f8:67:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85982df8c771a012341e667ac38d8bd4f31b084e
Validity
Not Before: May 29 09:23:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2efd5881561148df16ff1d7ab28771956deba164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:c8:5b:05:1a:a5:dc:8e:f9:a4:75:94:a6:
1a:79:28:d4:20:d8:65:ec:fa:89:e3:4d:95:51:4f:
2c:5b:5e:9b:00:78:ff:66:e7:cc:82:9e:f2:8d:4b:
2a:e2:89:ce:15:a0:ea:87:6c:a9:5a:c6:20:4b:f6:
b3:04:dc:bf:27:b6:fa:3f:11:5f:f4:88:87:36:75:
31:e4:07:15:3b:24:19:65:93:5a:14:4e:03:08:dd:
6f:cb:3d:b3:2d:7f:02:36:f8:34:1d:e7:73:3c:16:
fb:a4:fa:11:19:97:08:71:25:7f:9a:90:aa:a5:12:
50:1a:31:63:03:d8:60:9a:28:d4:e6:a2:98:26:8b:
e1:6d:04:5a:c4:3b:c7:7d:e0:d4:f3:7f:c7:57:f8:
c1:0b:fe:0c:70:57:29:55:fc:c8:0a:dc:58:d4:a7:
9f:20:3f:c1:26:c2:27:77:e1:3f:d0:1e:67:1d:fd:
41:84:21:c1:e8:a9:28:28:a2:19:f7:81:86:a1:0a:
8d:a5:c0:24:4c:84:95:53:45:4f:39:0c:f8:79:41:
ab:8a:ea:1b:c9:59:d4:59:3c:86:86:d1:2c:6e:d0:
ed:eb:81:0d:b4:6d:0b:60:d1:70:ca:84:d5:d9:47:
4d:19:7f:bb:c3:59:58:fd:16:b9:62:5f:43:10:c1:
13:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FD:58:81:56:11:48:DF:16:FF:1D:7A:B2:87:71:95:6D:EB:A1:64
X509v3 Authority Key Identifier:
keyid:85:98:2D:F8:C7:71:A0:12:34:1E:66:7A:C3:8D:8B:D4:F3:1B:08:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZgt-MdxoBI0HmZ6w42L1PMbCE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8b838f-aa9f-450f-a62e-3d55bdc95650/1/Lv1YgVYRSN8W_x16sodxlW3roWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8b838f-aa9f-450f-a62e-3d55bdc95650/1/hZgt-MdxoBI0HmZ6w42L1PMbCE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:dcc::/48
Signature Algorithm: sha256WithRSAEncryption
97:96:e9:cc:91:05:54:7c:03:57:cb:dd:d7:0b:c5:01:67:e7:
c8:dc:ad:52:cd:8d:f9:c9:88:72:21:05:92:9a:ab:f0:66:ee:
df:d9:9d:70:a6:eb:6d:60:7f:bd:60:26:ae:f5:2a:59:d7:cc:
90:aa:d8:7c:8b:00:99:5d:57:d7:63:4e:08:35:6a:27:e6:65:
4e:49:86:0b:e5:ca:47:82:2a:fe:63:4c:cc:63:fe:6b:87:79:
78:d6:17:2f:48:4c:0b:60:66:a1:18:5c:59:9f:ad:d2:57:61:
71:51:3e:1d:e0:cf:67:b6:a4:da:f3:51:82:fd:43:c5:93:dc:
c2:61:c6:14:5a:99:ab:ff:e0:9a:a5:f5:1b:7d:46:17:e6:05:
68:05:41:a0:20:4e:af:0b:50:a3:4d:93:5a:77:ad:3c:e4:9a:
02:51:af:c2:8c:53:58:65:c7:4d:ab:94:3c:00:8e:11:b1:83:
6c:47:d4:95:fd:fc:45:10:15:f0:da:50:96:01:ab:5d:1b:92:
9b:37:46:da:31:94:cf:ec:e4:33:6d:96:ae:14:e6:09:a6:1f:
f5:f3:7d:33:1a:4c:ed:21:81:45:c8:26:69:17:cb:be:1d:58:
b9:c7:a5:9f:c4:08:65:c5:a9:e6:f7:2e:9f:51:17:fb:61:8e:
60:5a:81:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:34:14 2025 by rpki-client