Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/LYjRFZOzPR9vt9ZYdgg0h4a0pvY.roa
File: LYjRFZOzPR9vt9ZYdgg0h4a0pvY.roa (raw, json)
Hash identifier: XnPKnWRK1pavODiwpZUYKFFGh/Tf6YOFV0JuSoq3yMw=
Subject key identifier: 2D:88:D1:15:93:B3:3D:1F:6F:B7:D6:58:76:08:34:87:86:B4:A6:F6
Certificate issuer: /CN=1db853b861973fc506e64714cca796d15ccace51
Certificate serial: 0184C118D4CE2BB3F1B971CE874A867A2A1B
Authority key identifier: 1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/LYjRFZOzPR9vt9ZYdgg0h4a0pvY.roa
Signing time: Tue 29 Nov 2022 01:55:40 +0000
ROA not before: Tue 29 Nov 2022 01:55:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208646
IP address blocks: 2a0e:3bc0:2::/48 maxlen: 48
2a0e:3bc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c1:18:d4:ce:2b:b3:f1:b9:71:ce:87:4a:86:7a:2a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db853b861973fc506e64714cca796d15ccace51
Validity
Not Before: Nov 29 01:55:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d88d11593b33d1f6fb7d6587608348786b4a6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:05:13:c7:4a:11:dc:bd:23:ac:e6:9e:cf:21:
b3:31:0c:02:4a:cf:69:f5:a2:c0:ee:c6:f7:61:e8:
c2:f8:25:48:bc:22:91:0f:02:c4:a2:75:e6:1f:30:
6f:b4:4d:c6:b0:11:bc:db:15:f0:7b:a8:c1:09:3c:
c2:b2:0d:69:91:51:22:39:d3:47:df:41:04:86:57:
67:5f:07:e7:f8:7c:b0:26:18:d5:f6:fe:9d:be:04:
50:90:81:18:33:f0:e9:7a:4d:38:5f:9e:3a:02:74:
3c:ba:fe:1c:12:ad:ae:4c:2e:bc:eb:14:1c:55:34:
f3:b6:a2:49:e9:7b:bc:7f:d7:ae:5b:37:61:28:cc:
e1:d0:c6:ab:3a:87:2f:a2:24:98:c3:80:3c:28:43:
eb:c9:05:23:1a:93:d5:25:dc:b2:06:f3:2e:db:ee:
cb:8b:4c:ef:7e:8e:6e:60:4f:5d:77:56:fa:a9:6d:
51:79:cc:c7:27:b0:84:73:15:f0:aa:a6:c6:2a:99:
ce:44:c0:78:bc:db:c5:14:35:9a:7a:bf:b1:76:58:
93:8f:24:d9:34:05:6e:33:99:a5:1c:c2:89:65:6b:
f5:69:a3:63:bb:60:f5:c5:18:43:4c:fc:d3:70:a5:
53:d5:b0:e7:3b:f7:53:2f:88:a5:9f:50:92:81:f2:
12:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:88:D1:15:93:B3:3D:1F:6F:B7:D6:58:76:08:34:87:86:B4:A6:F6
X509v3 Authority Key Identifier:
keyid:1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/LYjRFZOzPR9vt9ZYdgg0h4a0pvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/HbhTuGGXP8UG5kcUzKeW0VzKzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3bc0::/29
Signature Algorithm: sha256WithRSAEncryption
1f:56:dc:d2:9b:63:e2:83:02:f2:20:de:46:2b:05:a6:26:f8:
0b:cc:98:03:3a:ea:b9:31:7c:8a:7e:c4:8b:05:22:5d:3b:0c:
e8:eb:48:2b:76:48:67:85:e0:af:a1:5c:6b:a9:eb:35:64:02:
43:03:93:ef:fd:c7:6a:78:e2:c3:0b:63:ad:3a:4a:5b:2e:9f:
34:ec:a2:26:3d:67:c7:97:df:5c:71:52:e3:83:42:45:e0:3d:
b9:46:15:e4:62:c3:02:3b:d2:c9:e2:a4:5f:9c:12:5d:a1:d7:
b0:27:1f:13:fc:eb:e9:db:5b:09:7b:f5:e6:9a:15:11:d6:4e:
3e:16:24:77:c8:4e:c2:e3:6e:90:83:5a:d7:32:fc:de:42:74:
45:10:3a:a9:e0:bb:8d:0c:45:d2:de:63:9f:6e:0f:1a:44:fa:
88:ec:5a:8e:c9:66:64:85:5a:06:fe:6f:d8:f8:cd:ae:1d:a5:
62:f8:3d:89:95:37:8e:5e:d7:6f:9d:5f:5c:b8:97:23:0b:13:
91:51:66:bc:a4:a6:b2:d2:6b:ea:ca:30:78:a8:30:fe:f3:ce:
74:93:b3:7a:6e:0a:a1:b3:45:0e:56:cd:70:39:a3:06:4b:07:
1f:54:cf:fd:69:58:a2:24:00:cc:bf:7e:de:be:35:23:c7:3d:
1d:51:6d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:37 2025 by rpki-client