Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/lxk11cFnrewNOlkxopTKZz55KI4.roa
File: lxk11cFnrewNOlkxopTKZz55KI4.roa (raw, json)
Hash identifier: Cin33zHfeyFWDE1Q8FszdDllOEn50yPlnRJF9WTJPnM=
Subject key identifier: 97:19:35:D5:C1:67:AD:EC:0D:3A:59:31:A2:94:CA:67:3E:79:28:8E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01915F9C1B92DAF183555F9F2B21D5C7F526
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/lxk11cFnrewNOlkxopTKZz55KI4.roa
Signing time: Sat 17 Aug 2024 09:12:31 +0000
ROA not before: Sat 17 Aug 2024 09:12:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5f:9c:1b:92:da:f1:83:55:5f:9f:2b:21:d5:c7:f5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 17 09:12:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=971935d5c167adec0d3a5931a294ca673e79288e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:37:cb:51:32:4c:cb:0b:fe:ad:98:76:ca:
73:2d:2c:de:4a:84:aa:ab:68:e1:26:b4:9e:e6:14:
1f:71:0c:3c:b0:47:32:e8:84:98:44:cc:9f:13:c9:
27:5f:ad:38:bb:f0:23:40:88:32:7f:28:ba:8e:c6:
d3:0d:70:a1:28:9d:76:ab:b0:73:d5:17:b8:c9:83:
9e:44:53:eb:87:7c:74:4b:9f:09:3e:c3:0b:25:53:
b8:db:a2:49:84:b6:cd:6f:2b:cb:87:13:b1:4f:de:
88:2a:c9:2b:f3:4b:6f:41:2e:4a:82:cf:78:56:89:
30:5f:3a:dc:66:e6:71:de:46:8f:2a:1d:70:f7:22:
bc:e8:a6:be:37:65:88:67:de:8b:cb:63:4f:cc:3d:
5b:5d:8d:2d:9d:66:8e:55:2b:a4:12:93:bc:ec:ca:
83:ac:0c:9b:d2:90:b3:d1:46:a3:52:fa:08:1b:7f:
6a:16:a7:fa:bd:30:94:78:91:d9:24:f5:07:9e:7d:
d1:63:b4:ab:e2:c1:5b:a0:d8:a9:7d:73:ff:98:55:
0a:14:de:b0:a6:5e:66:2b:69:59:b3:8f:6c:19:ee:
6b:fe:32:07:4d:f3:b6:b6:3f:fa:45:9d:23:d7:f2:
9d:9a:7c:87:1b:18:44:7e:e3:ea:c0:32:3a:a0:d4:
7c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:19:35:D5:C1:67:AD:EC:0D:3A:59:31:A2:94:CA:67:3E:79:28:8E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/lxk11cFnrewNOlkxopTKZz55KI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
7b:18:4a:71:7f:f1:3e:36:58:96:fd:fd:84:95:79:13:a7:eb:
da:6c:2f:53:1d:be:36:76:df:7f:e3:06:56:01:45:bd:f1:5e:
d8:a3:47:65:54:4b:94:f3:2f:6a:d6:d5:03:32:24:38:2b:6b:
6a:c6:c5:fd:ab:c1:23:e6:f0:ff:3a:5c:cc:10:74:4e:a8:74:
80:d9:9b:a9:d6:47:b6:ef:4e:a3:98:e0:d6:5f:d8:5e:c1:e0:
4c:e4:5b:ed:0a:b1:7f:23:50:95:e0:6f:5a:58:e6:9a:15:df:
b2:f7:71:15:a5:ff:c8:8e:24:c4:d6:ce:3f:1d:20:74:55:de:
2f:36:05:ad:7b:b1:89:44:de:bf:bc:af:65:b6:d5:e1:3b:00:
48:00:a6:96:fb:06:24:27:cf:20:51:80:29:91:e0:b2:ad:27:
7f:95:b4:a9:b5:2d:a0:f8:91:6f:04:a9:b1:e0:3e:04:be:c2:
59:20:7b:38:83:f6:a9:4d:d4:5b:84:ee:8a:ae:4e:e5:32:79:
6a:7c:48:62:16:d2:e1:96:d9:33:51:14:06:46:b7:7f:3b:c0:
a9:7c:e0:a2:b9:67:1d:f3:6c:93:01:4a:b9:93:d7:ac:09:1e:
99:c4:bf:f6:eb:3f:05:c9:ab:8f:ff:48:2a:47:9a:63:a4:f3:
b2:33:72:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:33 2025 by rpki-client