Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LgOmod7Ae9ydJDQgjJ9Ror4LpzY.roa
File: LgOmod7Ae9ydJDQgjJ9Ror4LpzY.roa (raw, json)
Hash identifier: Atsvmi0q2xfowICUXPiqe0LnG2ViXKPC7WQKzbbaoEE=
Subject key identifier: 2E:03:A6:A1:DE:C0:7B:DC:9D:24:34:20:8C:9F:51:A2:BE:0B:A7:36
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01919E3D989F9901E1712294D5688E0850AE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LgOmod7Ae9ydJDQgjJ9Ror4LpzY.roa
Signing time: Thu 29 Aug 2024 13:05:22 +0000
ROA not before: Thu 29 Aug 2024 13:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:9e3c:d9f0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9e:3d:98:9f:99:01:e1:71:22:94:d5:68:8e:08:50:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 29 13:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e03a6a1dec07bdc9d2434208c9f51a2be0ba736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:64:9a:e9:e5:66:0e:7b:01:4e:16:2d:05:
5a:ea:42:c0:80:26:f3:a0:b2:fa:a8:17:02:e2:20:
be:3f:b8:3f:ce:2a:dc:af:4e:42:43:b4:de:a8:80:
ad:f5:71:28:69:37:0f:f6:a1:e2:56:0f:d3:7f:4b:
53:01:0b:6c:ab:a3:93:52:b7:29:40:e0:19:8c:44:
71:8d:49:5e:41:ec:bc:2f:f4:5a:9c:af:48:5d:09:
56:dc:84:3d:95:81:df:32:dd:46:3e:f6:5a:76:1a:
ec:07:15:7b:b8:7b:37:1e:ed:25:90:b9:7a:22:d3:
77:56:9c:69:6d:98:18:80:89:53:fa:ea:d5:c2:02:
45:66:16:c5:55:e2:52:44:df:c4:1b:50:5f:7d:f2:
26:52:69:46:c0:c9:35:5c:ce:96:b2:81:79:fb:6c:
b2:03:24:12:94:f5:21:a4:ec:2a:d2:c0:bd:30:a9:
11:c6:86:40:0b:c1:13:12:14:ff:2c:6f:50:4a:86:
bc:73:69:d3:80:72:08:12:90:23:61:39:cf:cd:92:
75:0b:89:1c:f3:f1:0f:08:23:97:3c:d8:fc:cc:7a:
d2:1e:29:69:06:2e:82:12:fa:ed:31:c7:e2:d7:4b:
ce:57:e6:e1:0c:50:97:a4:28:12:aa:0f:e1:ff:5c:
8d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:03:A6:A1:DE:C0:7B:DC:9D:24:34:20:8C:9F:51:A2:BE:0B:A7:36
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LgOmod7Ae9ydJDQgjJ9Ror4LpzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:9e3c:d9f0/128
Signature Algorithm: sha256WithRSAEncryption
71:75:81:32:ae:0a:ad:12:d2:42:6f:84:fa:a9:52:66:6d:86:
77:27:9e:3c:3b:f0:f2:2e:82:75:f0:d6:4b:44:0c:3b:25:5f:
c7:cf:8d:c8:37:6a:1b:16:4f:88:7f:0c:55:7b:06:dc:c8:3f:
22:08:18:30:3c:46:55:dc:2c:53:dc:f8:ce:65:c4:06:90:ee:
51:a4:d0:5f:f7:41:d1:d6:bf:19:64:58:02:ce:de:ff:9d:7d:
ef:04:1e:39:65:d3:53:6d:1c:8f:80:01:74:81:8e:69:d2:72:
aa:b5:6e:d9:75:8a:f3:7f:96:6d:f4:ef:e9:20:01:db:3e:10:
3c:ba:f1:e8:6e:3a:ba:6f:ef:04:cb:4d:6b:94:0a:2a:d9:ea:
72:a2:fc:4f:36:9e:ee:77:bc:70:11:68:09:2a:fc:0e:ee:a6:
76:28:a1:2c:fc:5e:d6:ba:d6:de:6f:b8:ad:1c:6b:c3:1a:b9:
1f:1c:65:e2:92:0b:43:cb:b1:4b:23:eb:ee:a9:04:c6:8c:68:
7b:09:77:76:a4:30:9e:41:9b:4c:11:35:04:6f:55:b9:16:da:
ec:52:f2:1a:99:e3:99:94:eb:36:70:7e:bc:ab:90:7d:97:95:
fb:56:bd:14:73:a6:95:ed:05:8c:ee:97:18:ec:5e:91:89:cd:
ce:ba:63:89
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZGePZifmQHhcSKU1WiOCFCuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODI5MTMwNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTAzYTZhMWRlYzA3YmRjOWQyNDM0MjA4YzlmNTFhMmJlMGJhNzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtlkmunlZg57AU4WLQVa6kLAgCbz
oLL6qBcC4iC+P7g/zircr05CQ7TeqICt9XEoaTcP9qHiVg/Tf0tTAQtsq6OTUrcp
QOAZjERxjUleQey8L/RanK9IXQlW3IQ9lYHfMt1GPvZadhrsBxV7uHs3Hu0lkLl6
ItN3VpxpbZgYgIlT+urVwgJFZhbFVeJSRN/EG1BfffImUmlGwMk1XM6WsoF5+2yy
AyQSlPUhpOwq0sC9MKkRxoZAC8ETEhT/LG9QSoa8c2nTgHIIEpAjYTnPzZJ1C4kc
8/EPCCOXPNj8zHrSHilpBi6CEvrtMcfi10vOV+bhDFCXpCgSqg/h/1yNMQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFC4DpqHewHvcnSQ0IIyfUaK+C6c2MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvTGdPbW9kN0FlOXlkSkRRZ2pKOVJvcjRMcHpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk
//8AAAGQ/fLzAgMRACABBnwAZP//AAABkZ482fAwDQYJKoZIhvcNAQELBQADggEB
AHF1gTKuCq0S0kJvhPqpUmZthncnnjw78PIugnXw1ktEDDslX8fPjcg3ahsWT4h/
DFV7BtzIPyIIGDA8RlXcLFPc+M5lxAaQ7lGk0F/3QdHWvxlkWALO3v+dfe8EHjll
01NtHI+AAXSBjmnScqq1btl1ivN/lm307+kgAds+EDy68ehuOrpv7wTLTWuUCirZ
6nKi/E82nu53vHARaAkq/A7upnYooSz8Xta61t5vuK0ca8MauR8cZeKSC0PLsUsj
6+6pBMaMaHsJd3akMJ5Bm0wRNQRvVbkW2uxS8hqZ45mU6zZwfryrkH2XlftWvRRz
ppXtBYzulxjsXpGJzc66Y4k=
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:30 2025 by rpki-client