Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LEVUlClSHVNo1mNKEctQirHWI6E.roa
File: LEVUlClSHVNo1mNKEctQirHWI6E.roa (raw, json)
Hash identifier: SJ+VlIdqADkacl+yZdDIMZg1Ksh+eISI2SEGcOT6Nek=
Subject key identifier: 2C:45:54:94:29:52:1D:53:68:D6:63:4A:11:CB:50:8A:B1:D6:23:A1
Certificate issuer: /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Certificate serial: 019538535E8FE80AE2A14B3F78C4F760EFC3
Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LEVUlClSHVNo1mNKEctQirHWI6E.roa
Signing time: Mon 24 Feb 2025 14:19:02 +0000
ROA not before: Mon 24 Feb 2025 14:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a00:dc80::/33 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:53:5e:8f:e8:0a:e2:a1:4b:3f:78:c4:f7:60:ef:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Validity
Not Before: Feb 24 14:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c45549429521d5368d6634a11cb508ab1d623a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:34:82:74:e9:73:1b:47:5a:9e:ce:b0:50:ac:
95:0d:3f:20:88:81:d9:c8:47:4a:3e:62:a3:97:de:
45:d1:18:73:7d:27:38:23:2b:1e:f2:e7:a2:c1:e0:
17:df:c9:d3:ce:59:68:dc:61:3c:d2:98:46:7c:d0:
10:a6:c9:db:47:e7:62:2c:38:be:26:8e:3b:e6:9d:
7b:a5:f2:fe:3e:3b:c1:65:4a:b0:87:c1:bb:09:4c:
fa:ba:84:a5:43:64:f6:96:c9:c8:70:af:d9:f2:5d:
30:f7:73:cc:2b:2f:4d:73:6a:3c:81:65:76:96:ec:
44:f2:12:7f:fa:39:b7:01:7e:d5:54:d6:3b:89:71:
73:36:09:5d:3e:ca:ec:2d:59:6f:a9:cd:e4:ce:f3:
c3:43:dd:12:87:33:b3:5b:ec:2f:7d:76:40:a7:aa:
95:11:c5:2e:f6:ad:50:25:6c:c8:90:68:91:f7:5e:
33:4d:c7:96:e5:3f:39:4d:5b:48:26:b2:5f:23:60:
95:4e:db:3a:ca:bd:3f:5b:33:7e:20:0e:08:f6:03:
52:b4:ec:1f:0e:14:5b:dc:8d:b4:a8:de:7a:c5:7c:
38:ec:af:3b:74:f3:ba:d4:e7:46:99:4c:ca:b4:02:
94:7a:1c:2e:a3:79:4f:14:c3:64:f7:6c:6c:85:35:
62:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:45:54:94:29:52:1D:53:68:D6:63:4A:11:CB:50:8A:B1:D6:23:A1
X509v3 Authority Key Identifier:
keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LEVUlClSHVNo1mNKEctQirHWI6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dc80::/33
Signature Algorithm: sha256WithRSAEncryption
41:55:b6:25:45:52:60:d1:58:a5:60:1c:44:fb:f3:dc:d9:17:
79:1a:e3:9d:90:7b:2b:c5:9c:a5:9b:df:d6:f9:57:8e:d3:0f:
e1:47:41:57:76:cf:29:3b:d0:c9:f0:dd:0e:6c:3a:2b:e8:1a:
90:c4:5c:cc:b3:7b:71:48:77:29:bf:b0:e2:6e:11:9a:5a:3a:
d3:9d:cc:96:40:b8:c3:31:d4:9d:55:90:0c:de:eb:3b:b9:20:
b5:00:3d:f4:28:26:8f:87:04:9e:81:99:ef:ad:e1:7a:31:e9:
2e:c4:27:36:b0:5e:f7:1e:74:3e:5e:ac:27:b9:24:5a:a9:a4:
c9:f6:02:61:20:ac:fc:7c:ec:d6:19:a9:d9:ba:14:21:ae:a7:
ac:73:77:b8:1b:35:a7:08:da:8f:24:c9:1b:7c:29:5b:c0:56:
cb:93:c5:b4:5f:32:38:17:63:87:92:a2:d4:e5:17:65:04:08:
a5:49:e8:85:59:d7:92:a0:8d:06:eb:23:4f:33:b4:3c:a7:b5:
46:5f:f1:4f:2a:95:39:58:10:ad:c2:59:b0:3b:0b:e4:b1:8d:
87:23:20:0c:99:54:26:65:59:3f:2c:97:a8:f5:af:dd:92:08:
d2:13:02:c0:e7:fc:c7:14:f7:c4:5c:5f:13:f8:b0:7f:bb:06:
ec:ad:ca:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:17:27 2025 by rpki-client