Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/lek_NhY7cUKWSsfaS7qdGZXNfpM.roa
File: lek_NhY7cUKWSsfaS7qdGZXNfpM.roa (raw, json)
Hash identifier: uVu9msiAoLC+/JAR+TRZ9qmz63DAHfZn3rsAZZGpxxk=
Subject key identifier: 95:E9:3F:36:16:3B:71:42:96:4A:C7:DA:4B:BA:9D:19:95:CD:7E:93
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C5177A4DC451F084131FB2750105F
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/lek_NhY7cUKWSsfaS7qdGZXNfpM.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199175
IP address blocks: 2a12:bec0:2b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:51:77:a4:dc:45:1f:08:41:31:fb:27:50:10:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95e93f36163b7142964ac7da4bba9d1995cd7e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b4:cf:1e:82:47:5f:18:52:3a:6c:30:5c:04:
88:be:b1:f8:11:e4:09:e1:25:e2:81:80:c6:d6:6c:
c3:27:e8:f6:4b:79:e0:3d:b3:b2:48:22:86:35:7f:
de:78:63:5f:49:94:49:e6:8f:60:39:9d:5d:94:fd:
cf:57:20:4b:9d:5f:36:0a:6c:99:2a:1a:a7:9a:ce:
db:63:7c:b4:e2:e9:d2:87:8a:9c:73:26:4a:78:47:
a5:c7:2e:83:c5:2d:f8:dd:c7:be:d9:bf:95:38:be:
a2:80:e3:9c:2f:e0:b7:29:30:45:72:ef:98:fd:1c:
20:5b:0c:06:aa:7c:58:a6:d9:1a:0b:38:e4:d8:f7:
fc:35:d4:b6:eb:05:79:08:f2:e0:e9:49:35:d8:60:
27:ff:b8:0a:bc:e4:18:fc:f9:bd:96:93:6e:65:f9:
51:3b:7f:92:a5:19:20:9d:0a:46:ed:29:1a:ab:2e:
2b:8d:6d:86:27:d6:15:38:cd:a9:65:e8:fa:c7:f6:
9d:22:90:18:53:ac:51:b1:7e:19:24:41:aa:85:e6:
17:b1:6e:34:bb:c1:b5:3a:a7:a6:71:cb:67:37:11:
95:84:26:d2:23:bf:ea:35:64:10:3f:42:b6:a3:c0:
92:92:2a:ee:8e:e7:20:ad:2b:b1:4f:fa:ea:22:c2:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E9:3F:36:16:3B:71:42:96:4A:C7:DA:4B:BA:9D:19:95:CD:7E:93
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/lek_NhY7cUKWSsfaS7qdGZXNfpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:2b0::/44
Signature Algorithm: sha256WithRSAEncryption
94:a3:1b:73:34:54:24:83:ac:3d:a1:f2:d2:fc:71:4a:44:2e:
6b:a6:a4:80:99:4b:91:e4:3a:8c:79:74:6b:ba:f4:1a:07:1e:
a3:c1:80:db:fc:a4:b7:69:86:a0:99:0b:ed:0a:1e:f0:4e:a5:
6b:65:e8:09:b3:d9:62:05:7a:21:72:c8:0d:5a:a0:8a:52:33:
81:d2:c3:a8:ff:3d:bb:37:ef:a9:cc:45:44:e4:73:cc:6f:2d:
a3:23:48:df:c8:b2:35:96:ac:9b:5f:5f:d8:6a:11:55:ab:12:
f5:3f:b2:95:f7:b2:6b:c5:82:8b:61:f7:9b:5f:bc:9a:aa:37:
03:42:89:db:60:45:0c:75:e9:29:75:ac:82:42:41:dd:7b:3e:
9c:d2:30:cb:fe:be:76:6d:54:69:8d:ee:8a:35:eb:bd:1b:98:
6a:7e:43:64:26:84:c0:b0:dc:6a:73:dd:fc:25:3a:d2:f1:67:
91:77:a8:cd:0e:36:ec:02:cf:b8:5c:4d:3e:39:de:6b:b1:4b:
e9:22:02:ce:fa:6e:e2:07:75:dd:94:f3:69:da:c5:bc:01:5b:
ff:cf:2e:e0:52:31:63:dc:82:70:34:e9:02:46:dd:c3:22:aa:
e8:e5:ff:1a:11:1f:24:5f:fb:36:92:f3:dd:42:a1:2a:4d:0d:
4d:26:80:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:02 2025 by rpki-client