Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/lc-xPbgG_zL5Kq9gpsS0JpfT6Lc.roa
File: lc-xPbgG_zL5Kq9gpsS0JpfT6Lc.roa (raw, json)
Hash identifier: 4jT1h/7boVWu3tR584lpUKLIw3/CptOkYBMCDXUfnL8=
Subject key identifier: 95:CF:B1:3D:B8:06:FF:32:F9:2A:AF:60:A6:C4:B4:26:97:D3:E8:B7
Certificate issuer: /CN=1db853b861973fc506e64714cca796d15ccace51
Certificate serial: 0185737A88E42DF1E364650B5317F6822416
Authority key identifier: 1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/lc-xPbgG_zL5Kq9gpsS0JpfT6Lc.roa
Signing time: Mon 02 Jan 2023 17:14:48 +0000
ROA not before: Mon 02 Jan 2023 17:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204982
IP address blocks: 2a0e:3bc0:fa00::/42 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:88:e4:2d:f1:e3:64:65:0b:53:17:f6:82:24:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db853b861973fc506e64714cca796d15ccace51
Validity
Not Before: Jan 2 17:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95cfb13db806ff32f92aaf60a6c4b42697d3e8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:60:79:b3:12:ae:5a:db:bb:1a:ba:10:05:
52:67:73:3f:14:af:fe:30:57:bd:01:24:bc:ba:bf:
51:0e:3c:67:6d:75:61:36:55:c9:a8:9c:6c:14:0f:
e4:23:81:61:b6:eb:92:35:38:b9:22:cd:ad:e7:57:
5b:67:ce:5f:53:3b:7a:f0:69:6d:e8:82:93:5f:25:
54:ef:5d:78:58:69:82:19:22:22:b8:c1:23:25:98:
98:3a:ca:f7:65:f8:cc:66:40:1c:7d:14:cc:ac:ac:
20:ff:40:bf:6c:60:da:0f:de:75:15:18:23:87:00:
76:f3:ee:7c:76:f6:53:53:4e:95:3a:69:8a:51:98:
62:17:ae:03:98:c8:42:f3:2c:64:20:4c:3a:d6:b7:
99:17:a3:40:f5:55:64:11:c7:b4:bb:e9:49:4f:98:
f3:9c:7d:08:1c:c1:f9:18:dd:a8:99:fb:18:29:cb:
13:68:6c:7e:a2:69:8f:b1:a2:65:c9:3b:99:a2:60:
c6:2d:88:00:ce:49:53:53:84:9d:7e:2c:2d:e4:b5:
97:a7:32:3e:f0:1a:7b:44:20:c7:65:cd:25:f0:b3:
b6:56:56:4a:d7:82:f0:ab:98:29:9c:d0:d9:3a:c3:
7c:b2:3b:79:30:03:9c:f7:1b:f6:3e:d9:6a:30:c4:
c5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CF:B1:3D:B8:06:FF:32:F9:2A:AF:60:A6:C4:B4:26:97:D3:E8:B7
X509v3 Authority Key Identifier:
keyid:1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/lc-xPbgG_zL5Kq9gpsS0JpfT6Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/HbhTuGGXP8UG5kcUzKeW0VzKzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3bc0:fa00::/42
Signature Algorithm: sha256WithRSAEncryption
88:dd:6a:3a:ca:72:52:3c:09:9e:50:07:49:3d:1d:dc:2d:55:
b4:e0:cf:3a:aa:8e:e4:6d:6c:ea:6b:63:fd:1e:db:1b:af:9d:
dd:4a:85:ed:c5:34:50:ec:ba:24:c6:5f:8e:8e:ed:19:fa:fb:
d8:0b:93:4e:30:1e:91:42:cd:b8:46:9e:48:03:16:df:10:4a:
b0:cf:69:c9:e1:56:3c:67:0a:18:51:88:06:21:3b:1f:b0:13:
92:4b:cd:7d:ef:47:26:44:0a:39:2e:da:41:f4:12:32:57:6e:
91:04:07:62:cf:0f:96:5a:6a:30:eb:ad:2c:68:ab:0f:65:a7:
6d:b0:e6:97:44:b1:49:74:d6:11:65:b1:72:3e:e2:73:34:e3:
a4:ec:bd:10:dc:3c:92:fb:99:85:b2:9a:ef:d5:56:87:fc:d5:
f0:a2:1f:b4:21:9d:d8:2e:be:72:be:69:97:13:09:7e:5a:53:
9f:98:b5:1f:a2:17:de:2a:d6:c1:cf:6d:2d:cb:61:02:13:1c:
a0:19:81:3e:2a:86:44:52:35:a9:8b:21:6a:d5:1b:cb:04:f5:
7b:8b:97:64:f9:e6:8b:e6:a3:94:97:66:af:22:18:5f:82:80:
bd:c1:5a:9e:70:d6:db:7a:83:d7:a4:5f:04:ba:3f:2d:32:de:
f6:fe:5a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:33 2024 by rpki-client on console-ams.rpki-client.org