Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/LeLgJwGr1MR3W3NE33dCf6uaBs4.roa
File: LeLgJwGr1MR3W3NE33dCf6uaBs4.roa (raw, json)
Hash identifier: Lz/GL+kozzcf25kN9WESY/yw/Ybku5tKLLKD4GsfUOk=
Subject key identifier: 2D:E2:E0:27:01:AB:D4:C4:77:5B:73:44:DF:77:42:7F:AB:9A:06:CE
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 0194282719118318F6CB7DA38E0F10C51F0C
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/LeLgJwGr1MR3W3NE33dCf6uaBs4.roa
Signing time: Thu 02 Jan 2025 17:53:58 +0000
ROA not before: Thu 02 Jan 2025 17:53:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147224
IP address blocks: 2a0e:46c4:2c42::/48 maxlen: 48
2a0e:46c4:2c43::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:19:11:83:18:f6:cb:7d:a3:8e:0f:10:c5:1f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 2 17:53:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2de2e02701abd4c4775b7344df77427fab9a06ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:22:63:b3:61:81:1a:e6:f9:63:3e:5e:f0:
5a:2e:00:1a:b4:ef:8a:ec:61:63:c4:a7:79:65:72:
1c:a7:f6:a0:22:79:f5:42:02:33:68:7b:f0:ae:1e:
a6:79:49:3e:06:3d:ba:87:2a:a2:8e:b5:65:19:2d:
0d:a5:3b:3f:96:25:5e:42:15:29:e3:9a:3f:c9:8f:
f1:31:d6:78:7e:7b:94:ea:8b:88:ca:04:47:66:f4:
84:c7:9a:f7:26:8e:c5:c4:6f:07:82:ae:a5:1b:9f:
74:31:23:6a:1e:40:bf:e6:c1:e6:b6:1b:e7:99:b3:
4e:32:d4:e3:55:dc:a6:70:e8:9f:3a:f9:73:73:26:
c7:3d:12:28:f7:5d:19:33:78:48:5c:f7:a9:3d:ad:
4e:8c:0b:00:88:78:5c:96:ba:b7:73:1c:c8:00:25:
ba:bb:1b:94:87:df:85:b7:ba:35:c4:02:d4:2e:d1:
33:c1:cd:64:c4:c4:4a:01:d1:0a:2c:28:07:c5:00:
01:1e:d8:63:84:60:05:97:b6:ac:81:87:43:d5:df:
4f:b7:39:24:d9:77:56:f6:29:9b:93:c3:36:77:bf:
aa:d3:09:b0:7a:32:d3:95:26:6e:99:be:a7:75:a9:
a7:80:41:25:5f:c6:f3:ec:71:b6:b5:92:10:8b:ba:
36:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E2:E0:27:01:AB:D4:C4:77:5B:73:44:DF:77:42:7F:AB:9A:06:CE
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/LeLgJwGr1MR3W3NE33dCf6uaBs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:2c42::/47
Signature Algorithm: sha256WithRSAEncryption
25:56:ed:8a:56:ae:ff:9f:d7:9b:97:49:46:4b:d0:7d:66:6a:
39:80:54:08:54:59:37:ca:0f:07:79:36:a3:83:2f:6a:ff:91:
00:70:a4:ef:00:51:9f:38:6e:36:52:ec:7d:c6:24:3b:82:39:
bf:fb:6c:99:99:6b:82:8f:b3:46:f4:44:d4:f1:3c:c0:d7:fa:
ba:9f:7d:ce:9f:c5:6b:96:80:9c:31:94:7d:9a:a3:4d:6a:85:
63:6d:c5:b6:de:90:d3:dc:ce:6b:c5:77:19:c2:8d:a2:2e:2f:
23:82:89:48:af:98:f0:87:b6:12:e1:c3:af:47:7d:74:08:25:
77:c8:f1:bb:d6:6d:7b:37:f2:4f:ed:f5:e0:fc:ad:b7:2e:9b:
ef:74:fa:a3:00:8a:61:80:f1:2e:f0:a1:b7:1e:17:c5:e5:9e:
0b:7c:a0:ff:e1:1f:38:9f:7f:ac:03:06:e1:20:d7:29:7a:5d:
20:14:7a:ea:5b:7e:4b:d6:08:6c:5e:f6:5c:7f:8c:da:3a:6f:
f1:1a:a2:de:4b:db:3e:8a:61:d0:63:83:fa:f6:cd:36:a0:dd:
7a:a2:46:ec:cd:1d:ae:86:06:92:ec:b4:e8:93:e6:56:10:5b:
0f:bd:ba:a7:13:75:e7:79:db:5b:a9:e8:cd:6a:bb:d9:98:5e:
90:16:17:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:59 2025 by rpki-client