Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/lc16e6xfrKdSWBS_UNV6Wk0xFIw.roa
File: lc16e6xfrKdSWBS_UNV6Wk0xFIw.roa (raw, json)
Hash identifier: mTI1gaIoDIM3VaGRxudG2wVHgS1YQHMtfKMXkn1rt60=
Subject key identifier: 95:CD:7A:7B:AC:5F:AC:A7:52:58:14:BF:50:D5:7A:5A:4D:31:14:8C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019466DFD03E6FAC8B3F23E62153BCE6ED0D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/lc16e6xfrKdSWBS_UNV6Wk0xFIw.roa
Signing time: Tue 14 Jan 2025 22:12:11 +0000
ROA not before: Tue 14 Jan 2025 22:12:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:66:df:d0:3e:6f:ac:8b:3f:23:e6:21:53:bc:e6:ed:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 14 22:12:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95cd7a7bac5faca7525814bf50d57a5a4d31148c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:93:4f:bb:33:1f:26:4b:b5:ba:31:26:db:a2:
9f:24:38:c9:a5:6a:b0:7e:13:ea:42:0e:57:5b:5a:
44:61:22:98:f2:15:c0:6c:d2:bf:81:43:9e:4a:06:
a8:b7:41:a1:79:23:0c:08:53:be:f3:eb:41:3f:c6:
22:b1:69:49:12:bd:40:7d:fd:83:2e:e6:14:51:c0:
9b:1c:46:3a:0c:23:74:0e:70:78:dd:73:10:96:5c:
21:7a:96:1b:bc:a9:3e:31:cd:b1:bc:a3:35:c6:d4:
9b:46:77:6f:f2:c5:1f:be:2f:c1:06:f8:29:f4:07:
31:70:e2:91:34:84:7a:1c:c6:c0:da:1a:c0:a5:62:
e5:dd:7d:dc:10:2f:9a:62:bc:40:27:30:b7:7d:99:
66:19:2d:73:de:59:ba:92:80:92:c3:72:74:79:8a:
15:e2:aa:63:7c:10:35:30:7b:3d:ee:b2:ac:e0:ad:
ea:f0:02:fe:19:e3:ae:0f:21:3a:0b:02:4a:e6:d8:
cf:a0:87:e4:17:69:7c:40:6e:3b:5d:ae:16:cc:b4:
c6:ed:62:eb:d2:d4:ad:89:28:40:24:1e:d0:f4:9b:
37:0a:3d:33:cd:03:c5:bc:8f:a9:2c:84:5c:84:d8:
b0:44:49:33:13:d3:4f:48:b0:9b:a6:d6:64:24:ad:
ca:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CD:7A:7B:AC:5F:AC:A7:52:58:14:BF:50:D5:7A:5A:4D:31:14:8C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/lc16e6xfrKdSWBS_UNV6Wk0xFIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
11:25:ba:b6:db:20:fd:b9:b1:66:b7:fe:41:e2:c7:54:ae:0f:
48:ae:96:7e:1e:8c:b6:74:30:fe:44:48:f5:01:75:8a:85:ce:
2c:d1:c3:bf:c3:35:7b:f1:24:cc:5d:1f:88:ba:4a:55:7f:bd:
96:2f:44:5b:5e:ac:07:fa:01:cd:9c:82:e7:3e:88:68:07:62:
90:71:02:d5:bc:10:11:34:cb:c2:fe:a6:5d:b4:76:a1:4a:66:
45:eb:48:98:cd:a7:0d:93:fe:9f:e7:48:9c:2e:ae:85:64:a2:
05:3e:3f:9d:23:3f:58:7f:7a:b5:90:99:62:31:75:e3:05:4e:
e8:83:db:83:d2:3f:d1:65:9f:16:89:57:36:69:e9:21:3d:ec:
4f:3a:c4:0a:fb:6f:c1:b8:35:ab:d2:1e:79:02:c6:67:82:a2:
a3:56:c0:55:d0:c5:ad:aa:bb:22:6d:37:9d:ad:26:78:f1:34:
2c:6d:19:94:9a:a3:66:1d:34:0d:91:23:e1:da:68:09:c1:b2:
8e:66:7d:91:31:68:0a:1a:35:03:13:18:fa:d3:67:d9:7d:e3:
87:73:ee:46:85:8b:f0:6c:3c:45:ff:c9:62:e3:5b:af:a0:f8:
73:99:4d:ea:6b:c1:57:a1:40:c4:6e:f1:9f:79:a6:d4:c2:16:
ab:b3:aa:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:04:10 2025 by rpki-client