Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/lJKzT4vHn4_RNrGZ7RT83InY1Uo.roa
File: lJKzT4vHn4_RNrGZ7RT83InY1Uo.roa (raw, json)
Hash identifier: 1M7WfjegVNptr4D+2mX5sIz0gMGS0MMNadIY7FGYqNo=
Subject key identifier: 94:92:B3:4F:8B:C7:9F:8F:D1:36:B1:99:ED:14:FC:DC:89:D8:D5:4A
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 019424453FBEBA9A8988205C409F2484681E
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/lJKzT4vHn4_RNrGZ7RT83InY1Uo.roa
Signing time: Wed 01 Jan 2025 23:48:25 +0000
ROA not before: Wed 01 Jan 2025 23:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39335
IP address blocks: 2a0b:6b82::/32 maxlen: 32
2a0b:6b87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:3f:be:ba:9a:89:88:20:5c:40:9f:24:84:68:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jan 1 23:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9492b34f8bc79f8fd136b199ed14fcdc89d8d54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:27:23:59:b5:04:46:de:66:f5:92:72:c0:de:
6d:ae:d8:a7:e1:2e:4f:ae:b1:d8:93:68:e7:a9:8f:
11:ec:ea:fc:e1:92:62:56:b1:fb:bf:01:53:b3:0d:
a5:4c:20:d1:c7:93:d4:3b:0f:12:48:6b:de:4b:30:
30:81:26:12:d5:1e:08:7c:59:3c:43:c2:39:54:7f:
ae:8f:13:64:79:ae:ce:d3:db:4c:7c:60:59:7d:ca:
59:02:9d:3a:8f:aa:0a:fd:71:86:b2:98:c5:7e:e8:
a3:ba:e6:e9:ea:d0:09:72:a4:f8:3d:65:27:df:0c:
c1:fb:43:99:55:c4:bf:ba:e0:67:c9:d1:63:3f:1e:
53:da:23:57:ca:e1:c9:cd:0e:cf:87:c4:c7:95:6a:
70:94:9f:41:24:3d:98:7a:68:11:96:e1:bf:38:88:
9b:63:7e:11:4e:0a:9b:3b:23:73:d9:6c:54:d8:fc:
2a:40:06:32:57:84:59:45:99:5a:60:bd:87:4a:9f:
81:94:cd:63:6f:e2:26:a0:a4:ea:d4:ce:e0:49:ee:
ce:12:29:b6:a8:d1:6c:8f:a9:41:fe:1b:2b:7a:21:
91:f2:a8:84:c3:d3:52:d5:67:d7:a4:10:6e:68:ef:
8d:c6:e7:6d:c1:3c:62:65:b9:48:8e:dc:68:8d:16:
f5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:92:B3:4F:8B:C7:9F:8F:D1:36:B1:99:ED:14:FC:DC:89:D8:D5:4A
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/lJKzT4vHn4_RNrGZ7RT83InY1Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6b82::/32
2a0b:6b87::/32
Signature Algorithm: sha256WithRSAEncryption
45:78:18:be:14:22:7c:68:3a:18:c2:2f:9b:f7:db:cc:7b:6d:
73:93:e3:65:0b:e8:c4:74:53:bd:f1:0f:7d:14:59:8b:4d:8a:
30:73:56:0d:bd:fe:7a:94:e5:98:ee:2c:74:08:a1:56:98:f9:
53:34:dd:88:51:58:9e:81:4f:88:4f:87:b6:ff:7d:db:6b:82:
fd:3a:1d:9c:31:c8:aa:d0:79:c3:bb:d3:57:ec:88:6e:f2:08:
32:3d:87:f9:40:ec:ef:91:70:a9:53:e4:61:a6:9a:6e:4a:a6:
67:ec:0a:b8:c9:38:df:0c:fd:24:5f:1e:ca:b8:d3:ec:2b:0d:
98:fe:36:51:d0:0d:4c:16:74:bb:af:ac:da:a8:44:b7:11:c7:
f8:9a:28:5c:ba:01:9f:14:0b:cd:09:e7:cc:74:51:1b:16:db:
9b:40:fc:af:b0:a0:02:92:54:37:4e:69:eb:74:86:95:d6:4c:
fb:59:83:89:64:21:f8:2e:7e:a1:b8:7e:c2:de:a7:65:df:a0:
42:55:ad:9f:1c:92:31:c2:62:cd:39:76:2e:64:51:19:8c:2b:
ec:91:e8:a6:56:0a:22:63:42:d0:ed:02:95:08:ac:40:b8:c1:
fd:d0:34:97:95:b5:f4:de:4e:57:65:19:91:29:0f:11:43:22:
aa:94:7c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:57:57 2025 by rpki-client