Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Lxvv8rym8EZBc_i-BGMlJXCHz0s.roa
File: Lxvv8rym8EZBc_i-BGMlJXCHz0s.roa (raw, json)
Hash identifier: 5pLAuoOqcCjtbk4jnCF0kwXBuWsCKGJLCNaNN6rt3MY=
Subject key identifier: 2F:1B:EF:F2:BC:A6:F0:46:41:73:F8:BE:04:63:25:25:70:87:CF:4B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019581A9700E9EBC31D6276B9E5D158DCABC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Lxvv8rym8EZBc_i-BGMlJXCHz0s.roa
Signing time: Mon 10 Mar 2025 20:05:19 +0000
ROA not before: Mon 10 Mar 2025 20:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:81a8:bfa9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:81:a9:70:0e:9e:bc:31:d6:27:6b:9e:5d:15:8d:ca:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 10 20:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f1beff2bca6f0464173f8be046325257087cf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8e:5d:43:ab:1d:d8:ac:66:f7:dc:b7:57:d4:
bf:75:c2:dd:c0:51:7a:b3:3d:c3:aa:2d:86:48:8a:
12:be:c9:d3:90:ee:cb:63:ca:77:08:5a:d2:0a:ff:
94:f6:71:63:f4:da:b0:34:43:94:6c:ed:b5:89:d3:
de:cd:c4:52:d9:a9:56:86:86:8f:95:ab:c5:f8:c9:
ab:de:b6:1d:7f:f2:89:2a:c3:d4:f6:21:64:3c:c7:
be:a8:2c:b8:80:3a:de:33:5d:27:2f:06:4e:81:05:
22:5c:84:e2:58:4d:7c:6f:d0:9d:4c:b7:04:60:ab:
54:aa:5d:a9:a0:da:40:3c:3b:de:42:ff:29:93:f0:
c9:9d:b7:6e:b6:cc:7b:df:9a:ec:f3:ae:68:10:b0:
f6:fe:d6:82:d9:47:db:b1:5b:e0:89:9a:ae:46:74:
41:cb:27:9a:89:e7:7d:e3:e5:88:1d:82:d9:eb:77:
de:3d:5b:ea:83:b5:07:49:61:8a:59:02:f9:4c:62:
41:54:1c:38:6f:11:f9:21:aa:1f:d7:f6:c2:be:74:
61:4f:93:3a:67:bc:f3:02:00:57:fe:f1:0d:7b:1d:
2a:37:7c:52:e2:8d:a6:bb:d2:a8:34:95:b6:17:82:
0e:b5:9e:b8:5e:23:4a:b0:cf:96:84:8b:95:fe:2e:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1B:EF:F2:BC:A6:F0:46:41:73:F8:BE:04:63:25:25:70:87:CF:4B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Lxvv8rym8EZBc_i-BGMlJXCHz0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:81a8:bfa9/128
Signature Algorithm: sha256WithRSAEncryption
19:7e:4f:ac:f2:d7:3c:06:49:93:f6:c5:3a:07:44:e2:64:cb:
ca:9a:1b:6b:ec:9e:83:b9:1e:4d:88:6d:0a:2e:cb:6f:a8:53:
f3:7a:af:3f:9c:c3:9e:54:88:7a:40:b8:8f:71:62:6c:ee:e7:
e1:1c:33:3d:fa:05:25:f3:46:91:a3:b5:bd:86:73:8a:70:7b:
7c:21:fa:ae:77:91:d4:30:68:5e:8a:e8:c2:98:a7:ba:d3:49:
95:ab:56:4a:2c:d0:54:78:f5:cf:b3:7b:78:75:75:94:95:7e:
13:c7:8b:90:3d:f7:7b:fa:f1:c2:dd:37:63:45:f5:c9:49:69:
5f:18:f4:57:77:f3:35:63:6b:a6:68:f1:f6:f3:28:41:ba:0a:
3c:86:1f:3c:75:43:7b:b1:06:86:15:ef:28:ba:7a:bc:55:82:
b7:ca:39:f2:2a:bc:af:86:cc:23:c7:c4:69:bb:9e:f3:17:0a:
f7:89:fb:39:46:cf:3a:9c:dc:4b:60:3b:03:f5:05:88:d9:94:
00:09:09:6d:34:a2:ee:44:85:ad:de:a5:a2:2b:9e:1d:50:87:
3d:6d:c5:c1:c4:d9:71:b9:9d:98:42:5c:8f:f5:af:2b:3a:ba:
c9:f4:dd:91:25:98:02:cb:42:f4:1c:47:be:61:d2:2e:30:65:
5f:3d:3d:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:08:41 2025 by rpki-client