Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/LO_AdzfatF4C9sIs1o52EbzmDNE.roa
File: LO_AdzfatF4C9sIs1o52EbzmDNE.roa (raw, json)
Hash identifier: bUjCYFRihUcJ3W4Hnr4B5vT5UkBAyoxGKHKJzbwXNm0=
Subject key identifier: 2C:EF:C0:77:37:DA:B4:5E:02:F6:C2:2C:D6:8E:76:11:BC:E6:0C:D1
Certificate issuer: /CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
Certificate serial: 0194258EE1ACB34118832B788E03E705D162
Authority key identifier: 57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/LO_AdzfatF4C9sIs1o52EbzmDNE.roa
Signing time: Thu 02 Jan 2025 05:48:28 +0000
ROA not before: Thu 02 Jan 2025 05:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 2001:67c:17e4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e1:ac:b3:41:18:83:2b:78:8e:03:e7:05:d1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
Validity
Not Before: Jan 2 05:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cefc07737dab45e02f6c22cd68e7611bce60cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:ba:53:59:0a:ef:a6:6b:5e:76:20:39:c2:
a5:72:2e:ea:f5:64:d8:f3:c1:4d:3c:1b:5f:6e:44:
e9:77:dc:87:d4:0f:29:ea:e4:04:53:ef:86:e4:7a:
0d:09:33:a9:57:ff:6f:b2:be:1e:85:19:37:47:bc:
47:67:8b:c3:73:49:4b:ba:89:d5:fd:51:60:f1:d0:
9c:4a:94:2b:c2:41:3a:3c:a0:4f:c8:92:d3:8d:5e:
16:a4:39:a5:65:dc:b5:36:fb:61:c1:0d:85:c6:78:
0c:c4:c4:d5:d4:e9:1d:94:63:f9:4c:f7:e1:7d:d9:
64:7e:fd:d1:ab:00:b7:16:5f:ba:79:e7:35:b8:40:
51:ec:4c:f3:62:46:87:8c:49:69:3e:cd:92:c4:f8:
93:ac:61:39:47:2e:3d:71:a3:56:0e:32:69:09:eb:
94:4d:b4:58:3e:db:12:d9:2c:e7:ca:34:e9:d1:23:
49:30:e8:c3:c0:52:29:9b:9a:2d:37:61:06:21:3e:
d9:19:25:40:9c:e8:58:bc:1c:eb:3c:e3:ef:60:e6:
e9:c6:e8:3f:62:3f:dd:bd:18:71:00:52:d5:55:82:
bb:5a:c4:92:d0:a8:4c:64:92:f1:2d:84:3a:46:cd:
23:16:39:65:23:82:c1:5c:c4:46:5f:a5:35:0d:e3:
da:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EF:C0:77:37:DA:B4:5E:02:F6:C2:2C:D6:8E:76:11:BC:E6:0C:D1
X509v3 Authority Key Identifier:
keyid:57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/LO_AdzfatF4C9sIs1o52EbzmDNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:17e4::/48
Signature Algorithm: sha256WithRSAEncryption
0a:73:d5:d6:ba:bc:c9:8a:cc:b3:b2:e3:3b:27:51:2a:de:c4:
c7:21:17:12:47:01:2c:14:df:9c:db:fd:bd:ce:c7:49:de:7d:
2d:5f:42:34:b9:c7:40:30:d9:67:47:95:09:b7:c1:ca:57:97:
8d:cd:57:a2:4d:0b:89:fb:27:01:ff:95:4a:22:91:d8:38:c1:
de:f3:e5:98:e1:75:dc:cc:28:35:ff:5f:65:7b:f5:5c:d6:c3:
78:81:20:bb:97:dd:64:42:0d:40:22:80:68:cd:76:d8:7a:37:
4b:52:99:ac:33:5a:56:f5:bf:5c:11:e5:96:96:7c:05:ba:42:
a2:9f:1b:f2:ff:68:a1:36:d9:a3:12:cf:f0:27:c9:e5:bc:99:
4b:8f:b9:68:d0:53:d7:d9:c3:eb:3b:55:61:5a:93:9f:4c:1a:
2f:10:01:0c:31:38:94:82:42:a9:11:d7:f1:1a:cf:47:9f:1c:
58:bb:67:91:a1:60:83:2f:ba:ed:3c:65:f8:da:17:25:06:0c:
9b:de:4e:93:99:60:d1:11:64:90:b0:3c:67:42:a6:5c:b5:07:
1e:6a:c7:3f:f2:ce:27:f2:02:89:c0:60:87:1e:77:18:5a:0d:
84:44:7c:da:af:8a:bb:4f:ef:9b:7a:50:f0:ab:e0:b7:1a:90:
74:da:16:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:27:37 2025 by rpki-client