Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/lvMLf7xsVUcJHvty2mpux3NFpFI.roa
File: lvMLf7xsVUcJHvty2mpux3NFpFI.roa (raw, json)
Hash identifier: 4xGardRLaCLg6CJ9Cpe/RglWg3sQUwoAh/5UqABjeFw=
Subject key identifier: 96:F3:0B:7F:BC:6C:55:47:09:1E:FB:72:DA:6A:6E:C7:73:45:A4:52
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C60EA9374D3261433A905B9F987E6
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/lvMLf7xsVUcJHvty2mpux3NFpFI.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208453
IP address blocks: 2a12:bec0:2d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:60:ea:93:74:d3:26:14:33:a9:05:b9:f9:87:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96f30b7fbc6c5547091efb72da6a6ec77345a452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:56:d8:b8:bb:9f:d0:2b:4b:31:09:dd:73:3e:
e6:2a:2d:1e:c3:07:0c:c3:82:a4:69:38:b7:58:94:
df:b7:9e:cf:8b:82:7c:92:c5:d5:2b:cb:ba:56:aa:
9b:23:08:13:4d:46:6a:82:7f:af:33:c4:68:43:02:
30:f0:6a:0e:82:40:a4:f8:87:91:3e:bc:3a:de:1e:
bf:db:00:11:9f:27:dd:34:c8:a8:56:a4:cf:2d:e6:
22:df:85:b3:8e:04:56:cc:28:02:61:c2:9c:af:21:
a4:1f:4a:34:58:94:09:62:a6:75:a9:e8:a9:6b:de:
45:8d:4c:37:c1:76:a2:4c:12:f4:14:cd:13:3f:d4:
c4:f5:c1:40:88:ac:78:69:91:b4:0a:cd:6f:a0:ce:
46:8d:85:6d:b4:2b:5d:18:0a:7a:0a:6a:f8:34:66:
b4:cb:1a:6c:1c:e5:f8:88:7f:5c:33:57:eb:39:67:
27:57:70:dc:b9:d7:9e:a4:6f:8b:9e:4b:bb:8a:4c:
08:6b:d2:35:8e:1a:b5:70:5c:f1:4f:e4:06:b1:b3:
8c:77:59:63:2c:71:1c:7e:86:0e:6d:87:a4:ea:29:
8d:60:f7:d7:4d:50:30:eb:60:c1:a7:8f:f7:a7:35:
2a:1d:43:89:d4:4d:1a:e3:02:a3:67:fc:ef:29:61:
65:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F3:0B:7F:BC:6C:55:47:09:1E:FB:72:DA:6A:6E:C7:73:45:A4:52
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/lvMLf7xsVUcJHvty2mpux3NFpFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:2d0::/44
Signature Algorithm: sha256WithRSAEncryption
43:87:1d:be:68:8d:be:0e:b0:b1:92:5e:f2:b0:bf:3e:ab:bd:
4a:3d:18:61:89:b9:b6:b3:50:39:c1:50:7a:68:8d:3c:9f:3b:
59:18:09:5a:89:ec:e6:f3:60:1e:9c:f6:22:fb:22:63:c3:0e:
48:79:2b:be:ea:c8:82:00:09:54:e3:92:75:13:c1:b2:67:26:
83:32:3a:7b:63:71:50:b2:c1:57:c0:a7:5d:57:3f:30:49:48:
90:cd:84:0b:86:03:ea:ed:3d:d4:01:46:94:9d:e8:10:91:8b:
58:bb:d3:f7:31:6e:00:8e:42:0a:d8:63:16:00:b3:eb:58:bb:
76:85:6c:66:8a:93:6a:09:6f:ac:7c:96:59:23:72:8a:3d:13:
d5:78:3a:fa:30:0b:18:99:2e:93:7a:f2:3a:9a:9a:6a:7e:bd:
0a:6b:f4:c7:3f:57:6a:28:ef:63:45:f6:99:37:54:57:83:ef:
1d:a1:63:96:ff:f9:64:0e:55:31:1c:ce:10:e6:7b:60:f7:d5:
f0:00:d9:e5:3f:97:27:43:4b:02:e7:6c:12:07:aa:d1:fc:f6:
5a:e4:20:6d:9f:3a:0f:57:b1:c9:5d:bc:3b:00:af:5e:57:5c:
8e:e8:0d:0f:9d:40:26:67:7a:9f:4d:83:f7:fd:f9:8c:dd:63:
db:24:17:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:55:21 2025 by rpki-client