Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/LaZa0vkzZxh7j3FqEJ_TyN_Pu88.roa
File: LaZa0vkzZxh7j3FqEJ_TyN_Pu88.roa (raw, json)
Hash identifier: 4y9YM62QSfwn5KQSIkCNlz5ctixZPNwxsdLgCrMt9jE=
Subject key identifier: 2D:A6:5A:D2:F9:33:67:18:7B:8F:71:6A:10:9F:D3:C8:DF:CF:BB:CF
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C63843AA551FB0BA9C15FF0303B6E
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/LaZa0vkzZxh7j3FqEJ_TyN_Pu88.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213702
IP address blocks: 2a12:bec4:150::/44 maxlen: 44
2a12:bec4:1460::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:63:84:3a:a5:51:fb:0b:a9:c1:5f:f0:30:3b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2da65ad2f93367187b8f716a109fd3c8dfcfbbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:e8:98:35:4a:ea:fa:c7:14:ae:65:b9:6f:
a1:cd:6f:78:dd:0a:51:c3:aa:70:c6:ac:54:a6:19:
d6:fb:74:16:e9:08:90:2c:a6:04:ee:75:bb:70:6e:
26:4b:7b:8d:15:78:a5:15:9d:c2:62:26:d3:61:ce:
92:b8:f6:7f:97:01:c0:62:45:45:3e:a1:4c:52:f9:
85:e7:2c:b4:8d:f4:d6:fd:2b:53:b0:f5:2a:1e:6d:
2f:49:9b:be:8a:40:cb:06:45:a0:44:10:8e:01:4a:
b5:d5:58:c7:85:1b:a6:b9:5f:ba:55:d1:bc:af:f8:
06:e1:13:6f:10:50:14:08:4d:85:a0:dd:6c:88:0c:
c0:f4:c7:c5:4c:80:b9:0e:5a:d5:e7:b0:00:90:12:
10:69:61:17:66:cd:2c:28:b1:5b:25:ee:c7:06:0f:
c7:2d:5c:9c:58:1b:94:23:a9:c8:71:43:17:ba:a1:
0b:30:91:1e:0c:cf:76:f9:54:4a:e5:16:d0:96:3b:
27:2e:17:d2:bc:c5:37:13:1d:03:f1:f3:47:90:7d:
14:66:6c:0c:b3:8c:2c:c3:fb:d4:4a:22:79:7d:9d:
c1:14:43:5c:66:8a:01:06:f5:b2:86:6c:b6:ec:30:
17:4d:e7:ee:92:98:03:63:63:a8:78:0e:2c:60:c1:
d7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A6:5A:D2:F9:33:67:18:7B:8F:71:6A:10:9F:D3:C8:DF:CF:BB:CF
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/LaZa0vkzZxh7j3FqEJ_TyN_Pu88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:150::/44
2a12:bec4:1460::/44
Signature Algorithm: sha256WithRSAEncryption
c3:92:8f:e9:04:20:48:a1:e3:72:2c:75:67:35:e6:70:c8:7a:
0c:6a:33:14:68:1e:76:ee:8f:1c:47:48:a3:6d:5e:fc:49:38:
71:9b:6a:6c:54:70:0a:10:57:1f:e2:f4:73:3a:46:28:2e:e0:
ff:43:92:85:4d:c5:bf:3e:16:5a:1d:7e:2b:e6:59:33:59:e7:
78:c8:53:49:20:b6:96:24:60:3b:f1:34:61:d4:ba:60:ad:59:
30:75:32:f0:be:d7:9a:fa:73:72:25:76:ed:f9:4e:10:d1:be:
85:22:a6:19:34:2e:f8:1e:6f:2c:d6:40:25:35:ed:69:77:e8:
50:78:d6:19:f0:56:13:c6:2d:0d:31:a3:cd:bd:22:8a:23:1b:
31:6f:7a:1c:c0:02:0a:04:c8:55:e2:e2:ef:3a:0c:e2:ed:2a:
a8:73:00:66:6b:2c:8c:9f:6f:a3:61:64:fa:da:15:30:4e:f2:
8a:e4:b8:c3:c4:be:2e:5e:f2:49:25:81:03:68:38:f9:23:2f:
54:43:79:e3:45:e5:39:09:36:8e:76:67:31:40:28:ed:df:b6:
56:45:28:77:53:ac:0c:87:87:4f:0d:6e:68:64:df:69:04:72:
d0:6a:56:a7:ce:72:a3:23:c9:85:cf:71:5e:0c:8b:68:f4:67:
e8:fa:af:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:57:57 2025 by rpki-client