Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/lptkvzqZ3YAXA8erbwtu8Z-p7p0.roa
File: lptkvzqZ3YAXA8erbwtu8Z-p7p0.roa (raw, json)
Hash identifier: WUNdsd7uaJayOlmZESESWmlDWN7XrWQH54c9bPYnQ6I=
Subject key identifier: 96:9B:64:BF:3A:99:DD:80:17:03:C7:AB:6F:0B:6E:F1:9F:A9:EE:9D
Certificate issuer: /CN=6bc4b3b741bb5b5b61721ad306c71147c4df2bc1
Certificate serial: 019426D9192646D67F118981FDBD92F75B89
Authority key identifier: 6B:C4:B3:B7:41:BB:5B:5B:61:72:1A:D3:06:C7:11:47:C4:DF:2B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Szt0G7W1thchrTBscRR8TfK8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/lptkvzqZ3YAXA8erbwtu8Z-p7p0.roa
Signing time: Thu 02 Jan 2025 11:49:09 +0000
ROA not before: Thu 02 Jan 2025 11:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209933
IP address blocks: 2001:678:888::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:19:26:46:d6:7f:11:89:81:fd:bd:92:f7:5b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc4b3b741bb5b5b61721ad306c71147c4df2bc1
Validity
Not Before: Jan 2 11:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=969b64bf3a99dd801703c7ab6f0b6ef19fa9ee9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:e4:14:92:15:9d:e8:fa:37:17:7c:92:e7:
e4:6c:c0:d8:cd:8a:d5:52:2a:2d:7c:9f:08:ce:a4:
4c:e0:77:ce:8c:c6:4b:34:52:46:85:9c:61:cc:eb:
a8:e3:ba:8c:84:5e:27:97:60:80:e9:dd:1f:da:e8:
c0:3e:b9:31:00:74:4e:57:4f:db:c0:3a:85:0f:0b:
b1:51:8a:21:a2:13:1d:ee:b3:58:84:7c:73:c1:a5:
1c:4c:24:83:64:15:62:6e:89:a5:56:91:c9:4b:69:
5a:40:f0:c3:f3:54:b5:50:f9:3c:9f:ca:c7:7c:b1:
11:8d:24:6e:4d:2d:17:2e:b5:39:93:88:d4:55:fe:
92:78:96:61:4b:6c:f4:0f:eb:13:8d:d5:64:15:49:
2d:cf:eb:df:37:a1:15:51:44:36:51:bd:13:17:22:
8d:c0:6d:4d:3d:e6:c5:7c:9e:d0:8d:19:c0:e0:c8:
9a:e6:f0:7b:72:37:e8:c7:0a:ed:f9:52:a9:50:35:
bf:df:d5:64:79:9e:71:f4:06:48:93:9a:dc:74:e0:
8c:a5:59:bb:80:93:a2:5f:06:14:73:da:2c:16:25:
08:70:e0:35:e0:2e:82:32:4d:e9:f0:90:3b:89:e0:
49:58:83:60:9d:f8:51:b0:c6:f4:08:00:d0:b8:de:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9B:64:BF:3A:99:DD:80:17:03:C7:AB:6F:0B:6E:F1:9F:A9:EE:9D
X509v3 Authority Key Identifier:
keyid:6B:C4:B3:B7:41:BB:5B:5B:61:72:1A:D3:06:C7:11:47:C4:DF:2B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Szt0G7W1thchrTBscRR8TfK8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/lptkvzqZ3YAXA8erbwtu8Z-p7p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:888::/48
Signature Algorithm: sha256WithRSAEncryption
c2:1b:26:ad:3c:c9:59:6e:d9:ec:98:cf:4c:fa:b7:1f:00:a4:
20:33:1d:25:4d:c1:b9:2d:60:4f:10:92:08:4d:13:81:23:71:
cf:21:ac:f4:b5:1a:be:e1:6f:05:5e:ee:ba:b8:2b:93:a0:10:
d8:80:11:89:0d:eb:3b:4a:d1:64:18:c3:04:97:02:f2:6f:d0:
b9:39:24:f4:a3:9e:bf:9a:01:0d:fd:c6:8d:23:9e:74:26:ae:
ab:e5:9c:5a:13:0c:7d:60:82:ba:9b:84:94:af:7f:bf:c4:e7:
2a:70:42:12:7f:d5:e2:52:19:bd:73:f7:23:a8:8e:e3:58:12:
fc:4d:04:fa:f6:37:08:78:25:a5:c6:38:88:03:d3:d5:54:0c:
c8:3a:2f:f7:3c:cb:1f:55:02:a0:b7:f0:db:d7:b3:c7:5a:40:
9d:da:00:26:0f:15:5b:1d:a4:e0:b3:15:a7:d7:4a:fb:6f:d5:
2a:fd:43:d3:e3:49:a4:f3:e3:ec:a6:7b:2f:ca:26:2d:64:36:
33:8b:e6:e7:93:65:86:1e:74:0e:d2:27:39:4b:84:a3:7f:1b:
09:b7:15:b4:d0:60:52:77:9a:7f:5a:34:7f:16:9a:0c:7c:36:
07:f2:db:e3:07:f5:9b:56:fe:7a:be:ba:ac:86:13:0c:d2:4c:
65:40:55:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:14 2025 by rpki-client