Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/LD-JecaPcqqq0EAbchhA3r15W40.roa
File: LD-JecaPcqqq0EAbchhA3r15W40.roa (raw, json)
Hash identifier: KUWMI790ycc2cbHMuXRjOMf6pDBnohsTZHFooQwB+P0=
Subject key identifier: 2C:3F:89:79:C6:8F:72:AA:AA:D0:40:1B:72:18:40:DE:BD:79:5B:8D
Certificate issuer: /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial: 018C7805F8893811568CBAF9517A21A67B79
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/LD-JecaPcqqq0EAbchhA3r15W40.roa
Signing time: Sun 17 Dec 2023 13:45:06 +0000
ROA not before: Sun 17 Dec 2023 13:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216398
IP address blocks: 2a13:ef41:e000::/35 maxlen: 48
2a13:ef44:f007::/48 maxlen: 48
2a13:ef45::/32 maxlen: 48
2a13:ef44:f003::/48 maxlen: 48
2a13:ef44:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:78:05:f8:89:38:11:56:8c:ba:f9:51:7a:21:a6:7b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
Validity
Not Before: Dec 17 13:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c3f8979c68f72aaaad0401b721840debd795b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:82:74:ae:7b:47:d8:4e:d6:81:eb:af:2e:
e8:9a:f4:21:47:79:0d:61:35:11:35:e3:71:94:be:
4f:d7:b1:b6:ee:7a:76:d1:50:84:0a:f5:57:b0:2f:
68:cb:07:63:64:82:04:88:12:ad:08:da:6e:57:d0:
3e:0f:8d:d3:b9:b8:6f:97:ec:5f:25:17:be:0c:06:
fc:58:77:f7:32:56:18:f1:99:ab:02:44:b5:50:92:
ee:33:de:6c:fd:04:88:a1:70:c0:69:6f:de:c7:51:
d1:c4:c0:73:e3:6f:0d:f0:d9:ad:c8:48:4a:e9:de:
6a:98:81:df:b9:82:7f:25:4f:50:53:94:c3:f9:76:
39:6e:2f:4d:ed:8f:45:32:a2:7f:37:b6:3c:89:e8:
79:5a:ff:09:81:88:60:56:05:89:86:a9:96:51:11:
4b:c6:95:d5:bc:16:19:c4:56:6e:89:c2:d4:3a:c8:
e5:29:43:bd:a5:5f:56:4d:6a:ad:36:c0:61:fe:2c:
86:a2:66:ce:f5:d6:eb:2f:98:63:ac:8b:cf:af:79:
af:1a:eb:52:4f:c0:16:51:55:bf:b1:9d:ef:f6:58:
29:0a:6e:e3:ae:f6:29:b0:f9:8c:0b:cb:36:e8:82:
b1:85:f6:c2:a4:09:be:2b:16:9f:36:b6:23:d0:db:
ea:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3F:89:79:C6:8F:72:AA:AA:D0:40:1B:72:18:40:DE:BD:79:5B:8D
X509v3 Authority Key Identifier:
keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/LD-JecaPcqqq0EAbchhA3r15W40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef41:e000::/35
2a13:ef44:b00b::/48
2a13:ef44:f003::/48
2a13:ef44:f007::/48
2a13:ef45::/32
Signature Algorithm: sha256WithRSAEncryption
18:9f:3b:e9:8e:d2:06:e8:c9:97:db:c7:48:14:62:2a:51:f3:
3a:b9:e8:71:01:74:8b:fc:27:e1:a2:25:35:81:75:d1:cf:5c:
96:5c:9c:e5:0e:ee:b9:37:21:fd:5a:b0:28:b3:fc:99:eb:4b:
b4:71:d0:94:aa:ce:9a:c7:68:72:a8:9e:b6:4b:f0:d5:ec:d1:
56:5f:68:71:e8:bc:a4:7c:b2:9d:fc:dd:e6:df:64:82:19:36:
99:cb:c0:1b:a0:22:ef:96:99:78:db:c4:fe:00:38:e9:14:ba:
3e:5a:f9:46:49:b1:78:05:29:cb:a2:8b:ce:64:89:fb:17:34:
d0:da:a7:a9:50:de:ec:8d:c3:ea:8d:40:b0:3d:dd:a0:e4:e2:
90:c3:fc:04:bb:01:d5:9b:25:cb:d8:32:06:fa:d7:fc:73:c0:
5d:41:2f:6e:87:eb:b9:4d:b4:0d:f5:97:bc:09:3f:2e:00:77:
de:c4:d4:61:5c:89:6b:c2:69:1a:bb:fc:6c:0c:1d:b9:de:4f:
cc:95:0e:89:09:8a:c0:03:65:31:8e:cb:4d:a7:10:3e:32:53:
e9:de:8c:64:37:8c:75:4a:22:68:94:c9:ee:12:2b:d9:ff:ec:
72:c7:2a:d4:fd:1d:84:f1:1e:76:71:6c:8e:14:e2:7c:bc:35:
05:bf:24:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:37:54 2025 by rpki-client