Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/LoWDwdmttke7uuwcPip61--j1QQ.roa
File: LoWDwdmttke7uuwcPip61--j1QQ.roa (raw, json)
Hash identifier: 9TYe1Ixg+3Z9qq+B1/JJ/nIHRvSktaK7e2M/oRNe0K8=
Subject key identifier: 2E:85:83:C1:D9:AD:B6:47:BB:BA:EC:1C:3E:2A:7A:D7:EF:A3:D5:04
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C77DBD852CF3AEC56B12CADD28DA5
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/LoWDwdmttke7uuwcPip61--j1QQ.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216102
IP address blocks: 2a12:bec0:560::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:77:db:d8:52:cf:3a:ec:56:b1:2c:ad:d2:8d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e8583c1d9adb647bbbaec1c3e2a7ad7efa3d504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:ed:5a:86:73:32:51:71:6f:84:61:03:79:
e0:6c:7b:55:7b:9c:76:0a:70:78:40:9c:55:e9:7f:
7b:4d:b0:88:b9:9f:71:04:93:50:30:27:31:4f:ff:
95:3b:26:bc:dd:da:d9:59:f1:7f:b6:0a:96:c9:dc:
64:82:86:01:97:40:1a:f0:c1:49:1b:8e:93:c5:31:
3e:07:7e:bb:0d:49:77:92:ae:fe:cd:2a:5c:d9:a1:
a5:00:b5:c0:b3:3e:b8:e7:e0:f0:80:d5:47:1c:20:
32:9f:75:36:26:58:28:3c:75:fd:a9:d5:19:64:c5:
e7:42:c2:7d:4c:10:3d:ea:ad:69:ae:d3:86:20:a0:
84:fc:22:ea:75:55:56:97:f1:1b:63:89:1a:31:96:
7d:39:8a:fd:c6:c2:9c:6a:9a:4a:cc:2a:42:95:3b:
7c:5e:b4:dd:29:ba:94:1a:8e:5d:d8:4e:d6:d9:91:
65:7a:d4:da:fa:31:ee:b4:54:12:91:f5:a9:ee:48:
f3:b7:24:72:c2:8f:ff:73:cf:0b:af:a7:84:01:93:
11:d1:fc:00:60:2e:48:01:d9:5b:c7:a5:0e:b4:26:
0c:5b:8b:90:37:42:e2:de:a5:e2:9c:0c:29:13:dd:
93:93:18:cb:9f:05:b5:fb:a8:37:1b:84:d5:99:7f:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:85:83:C1:D9:AD:B6:47:BB:BA:EC:1C:3E:2A:7A:D7:EF:A3:D5:04
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/LoWDwdmttke7uuwcPip61--j1QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:560::/44
Signature Algorithm: sha256WithRSAEncryption
4e:7a:b7:31:3b:d6:72:f6:91:5c:fa:5b:05:79:c4:fe:2d:36:
2e:19:14:57:c6:e9:a5:04:cf:1a:2d:71:27:39:0a:f2:ae:cb:
19:21:e6:8c:ef:31:91:82:a2:bd:83:07:91:cb:c9:3c:af:b7:
23:53:15:c9:3e:e0:cd:8f:6f:9c:3b:4c:16:40:86:f4:71:f7:
3e:1c:c8:bb:25:0c:10:36:c2:21:74:ec:60:bc:09:fe:f6:a6:
45:fd:fb:0a:26:09:93:a5:bf:cd:c7:ed:18:0c:6a:3b:17:fe:
1c:a6:a6:6f:0f:71:01:87:c3:3f:c3:69:68:cf:b7:df:30:d0:
d4:47:c7:2d:eb:e9:7d:ce:e4:cc:4e:dc:6b:8c:36:9b:ed:64:
95:63:d3:4f:e5:f0:5e:04:d7:53:ee:6d:0e:b7:4e:2a:38:36:
f2:b4:cf:1b:33:25:68:90:ee:23:6f:9a:d6:5f:d3:2d:bf:c9:
c1:18:94:58:0f:d2:3d:ef:8f:4e:51:10:a8:9f:52:c8:a2:84:
d6:91:23:e7:00:d2:bf:36:ba:a2:46:ce:07:37:45:f2:24:a7:
d2:3b:f5:52:97:5f:d9:19:d8:0e:93:2a:19:0d:6c:9f:5a:0e:
14:39:e3:66:bf:fa:a6:1e:65:91:da:04:b9:75:0d:52:39:b0:
b4:4c:23:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:55:14 2025 by rpki-client