Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LuRsSMEnKCJFjJSa41UhkqokURE.roa
File: LuRsSMEnKCJFjJSa41UhkqokURE.roa (raw, json)
Hash identifier: u4qhHrQtIItpLe5alBouZpGRzBekif2lHl4BtuINzR0=
Subject key identifier: 2E:E4:6C:48:C1:27:28:22:45:8C:94:9A:E3:55:21:92:AA:24:51:11
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194F88BDB0FF03F7F16344B8EB037302A27
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LuRsSMEnKCJFjJSa41UhkqokURE.roa
Signing time: Wed 12 Feb 2025 05:05:02 +0000
ROA not before: Wed 12 Feb 2025 05:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:f88b:4154/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f8:8b:db:0f:f0:3f:7f:16:34:4b:8e:b0:37:30:2a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Feb 12 05:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ee46c48c1272822458c949ae3552192aa245111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:8d:72:1c:25:2e:7e:8a:db:c4:1f:99:8e:
f7:11:a6:77:d8:5e:72:fd:6a:4c:57:4e:fb:ee:a6:
5b:be:ed:b5:ce:6e:43:27:1a:3d:15:ce:4a:4f:bf:
f1:04:80:20:0a:c8:ec:3b:6e:1a:16:0a:36:c1:ca:
e4:e7:90:68:2b:a2:0d:97:b5:de:48:d4:90:32:7e:
85:04:78:f6:84:6a:73:b3:84:6d:76:68:e9:7d:dc:
37:ee:64:05:38:3a:af:3c:ea:ed:19:89:44:54:bb:
9d:08:28:83:ad:66:9e:e4:d2:f7:65:8f:76:4d:2d:
fb:c0:71:1c:45:9c:1a:94:f3:30:7e:c5:65:c7:88:
c4:0a:4a:bb:6d:9d:d5:3b:4e:97:7f:bc:95:5a:ba:
71:b0:cc:84:1d:fc:5d:d1:ac:f9:57:3e:13:e5:d3:
05:a0:79:69:81:2a:fe:a1:ef:1f:d6:9e:22:40:3c:
1a:76:2e:5b:ee:de:cc:a0:7e:ca:73:41:ac:61:65:
01:17:21:0f:5d:04:39:a9:50:53:2c:ba:13:5b:ca:
7f:c9:ea:aa:f5:9c:02:21:d6:08:bd:b4:ef:06:16:
01:1a:7f:33:40:63:e3:92:76:3e:05:f9:9f:c1:a8:
cb:8f:32:0d:a9:e9:10:1f:4c:80:7e:a5:1f:1d:82:
c6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E4:6C:48:C1:27:28:22:45:8C:94:9A:E3:55:21:92:AA:24:51:11
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LuRsSMEnKCJFjJSa41UhkqokURE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:f88b:4154/128
Signature Algorithm: sha256WithRSAEncryption
6d:ce:7b:8e:14:12:cb:8b:24:ff:b1:38:b8:a1:92:0a:4c:14:
c1:37:9d:5e:d7:06:20:11:51:59:0c:0f:41:94:04:c1:1b:98:
65:70:ab:05:1e:30:47:59:cf:d4:c3:57:67:d5:26:ec:50:99:
90:65:d4:8b:73:d1:ff:f8:f7:60:33:8a:7f:3a:1f:96:ae:43:
63:99:23:d7:2a:0a:a6:c6:ff:7d:4d:00:dc:75:8d:66:dc:e3:
53:6e:70:17:96:9a:9a:6a:cd:ad:37:a3:22:d3:c7:7a:f4:6e:
17:d1:7f:ea:9f:7c:50:c5:70:a8:02:5b:d5:10:53:2a:29:e8:
27:ea:64:60:13:3b:df:b6:1a:d8:8c:30:c7:5a:16:35:55:c2:
79:0c:9d:58:29:b0:7f:db:26:8e:1c:e2:37:fa:b9:df:4d:f3:
c9:7c:f3:f7:55:e9:b6:ce:0d:3a:a1:c9:02:ce:c2:83:f2:d4:
89:f5:36:4f:72:27:70:e4:7f:5f:68:9a:8f:3b:95:20:72:5d:
0b:11:ac:1a:93:14:fe:70:31:76:32:c6:ee:63:37:7f:3f:00:
02:ec:32:4a:6e:a1:b2:04:1b:eb:9e:37:d3:cd:41:a7:60:0a:
3b:62:3b:66:a6:3f:76:b7:9e:dc:38:d3:26:5a:b6:f8:41:2b:
44:3c:2b:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:06:09 2025 by rpki-client