Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/dp7p_LFUl6f1Sil6qBZT56DVfKs.roa
File: dp7p_LFUl6f1Sil6qBZT56DVfKs.roa (raw, json)
Hash identifier: IMDRenz9qH3e2k02PXRI1c06YmwISB4uqlKiYVHNkNM=
Subject key identifier: 76:9E:E9:FC:B1:54:97:A7:F5:4A:29:7A:A8:16:53:E7:A0:D5:7C:AB
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018DEF8AD06E8B9203F1BC8B7902B3105B97
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/dp7p_LFUl6f1Sil6qBZT56DVfKs.roa
Signing time: Wed 28 Feb 2024 11:47:48 +0000
ROA not before: Wed 28 Feb 2024 11:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a12:9503::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:8a:d0:6e:8b:92:03:f1:bc:8b:79:02:b3:10:5b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Feb 28 11:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=769ee9fcb15497a7f54a297aa81653e7a0d57cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:7f:26:7e:1d:4e:7d:1c:70:b1:4c:89:e3:
f4:f7:2e:0d:57:c6:58:38:b1:12:44:55:5b:cc:c1:
70:e4:0c:38:23:43:db:5a:68:29:1c:1a:74:8f:bd:
e2:35:e1:a6:5c:0c:4c:33:6a:e5:f8:0e:29:94:53:
df:d7:c3:13:f6:b2:43:ce:fa:00:9a:82:f0:5f:49:
66:5e:63:7b:6e:b1:36:cb:71:07:ba:9c:22:0e:aa:
79:16:d3:68:97:50:89:0c:d5:95:52:d3:1f:21:d3:
6f:83:24:67:d3:0d:03:b4:fc:f9:46:54:0c:19:a0:
80:b3:22:5f:c4:38:bf:61:3b:cb:b6:34:da:ff:2b:
4c:c6:9b:e8:6e:fd:de:48:f4:eb:2a:72:ea:54:e3:
81:9e:a4:5b:7c:a4:84:d7:86:e4:22:9f:7f:c1:d1:
eb:09:df:36:de:e7:89:23:1d:d0:af:d4:08:aa:da:
d0:8d:39:48:46:ac:84:6e:42:5c:ab:26:0e:d9:e5:
63:95:1e:96:fa:f0:42:67:b0:35:d0:56:d1:bd:22:
d4:c6:70:f0:a0:12:30:13:ef:bb:4d:ff:11:03:f5:
e1:1b:5c:1a:59:52:7e:05:1f:87:e4:2e:f1:bb:75:
59:61:8a:a4:f8:6f:2b:e5:70:57:bb:cb:ea:a2:e9:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9E:E9:FC:B1:54:97:A7:F5:4A:29:7A:A8:16:53:E7:A0:D5:7C:AB
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/dp7p_LFUl6f1Sil6qBZT56DVfKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9503::/32
Signature Algorithm: sha256WithRSAEncryption
2a:06:ab:bc:4d:64:67:cc:88:1e:76:bc:ef:08:ce:ba:c1:67:
1e:b2:c0:cb:37:dc:d6:73:f6:30:80:3f:af:55:03:da:e4:08:
ca:0a:d5:8f:0d:3d:b3:f1:47:a5:cb:fc:21:a8:a8:bb:e5:44:
d9:38:fa:7e:a5:78:e3:21:c9:aa:03:88:e9:fe:c4:48:1c:5a:
30:85:3e:e4:02:f3:f5:86:c1:01:4c:53:9a:8a:8f:00:6d:04:
c7:1f:47:64:07:78:6d:a0:1a:53:b6:9a:28:a4:92:46:85:f5:
42:51:d6:47:3a:22:7b:f2:5c:51:c1:1c:cb:67:1d:eb:5c:6b:
a9:4a:e6:d8:49:76:58:b9:5c:d2:3d:05:78:c1:1b:63:23:7b:
7b:c0:f7:31:6a:d6:3a:63:e5:bd:6e:22:e6:b6:7a:90:b5:d0:
e9:4a:5d:bc:eb:65:77:25:6f:90:4c:00:a7:c8:42:42:58:5d:
f0:8f:87:be:7f:ee:b5:95:a6:21:72:1b:4a:fe:57:8a:a7:c6:
4e:7b:a0:a1:6d:83:bf:b3:3a:68:40:17:ff:2e:2e:5f:15:d6:
b3:5e:07:3c:bd:b5:1d:ab:29:01:7d:b6:76:38:74:2e:74:95:
fe:44:75:62:f8:7f:5d:fc:11:05:f8:07:8c:f1:7f:13:67:9e:
64:a2:2c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:24:09 2025 by rpki-client