Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/Lp3xs_NqDzs1xbHpIoUGukzmy_4.roa
File: Lp3xs_NqDzs1xbHpIoUGukzmy_4.roa (raw, json)
Hash identifier: nFsdDwpHhD6GQ3oPNu1oaeo0dVNHBrjV+Q6f0AITk4o=
Subject key identifier: 2E:9D:F1:B3:F3:6A:0F:3B:35:C5:B1:E9:22:85:06:BA:4C:E6:CB:FE
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019425FDC58F4A11FAC3D643A41BFCCB5CEE
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/Lp3xs_NqDzs1xbHpIoUGukzmy_4.roa
Signing time: Thu 02 Jan 2025 07:49:35 +0000
ROA not before: Thu 02 Jan 2025 07:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213065
IP address blocks: 2a07:3502:1122::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c5:8f:4a:11:fa:c3:d6:43:a4:1b:fc:cb:5c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e9df1b3f36a0f3b35c5b1e9228506ba4ce6cbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:6f:bd:bd:96:c9:b0:31:1b:a2:dd:3c:d6:
f3:1a:17:c6:e3:41:0b:22:3e:2f:6c:55:b2:24:bb:
09:6b:75:ff:82:3e:a7:c5:8f:20:ab:98:7b:c2:bd:
a6:7d:16:a3:32:59:20:03:13:a2:b2:ca:a1:bb:17:
5e:44:0e:51:12:27:37:b0:4b:4d:d2:1d:36:2c:5c:
d3:b1:c3:52:c0:f9:70:20:46:1d:aa:84:2b:47:b1:
99:20:f2:b9:49:1c:b0:3a:b6:c5:2e:67:e7:73:7d:
36:dd:66:ce:e8:47:a8:68:04:cc:bc:db:79:fd:9b:
90:ed:b4:b0:eb:be:24:89:44:8a:e5:63:7f:54:f3:
62:5f:cc:db:1b:be:15:53:21:73:40:49:bd:48:94:
98:12:fe:a4:e9:8e:ed:ad:56:2f:2c:98:32:25:b5:
94:6a:f6:88:66:20:14:24:dd:89:15:9b:8e:c4:2f:
f0:5c:2c:7b:61:ae:a8:3b:79:c2:f4:43:f6:00:af:
34:d9:d7:ad:aa:9c:d4:bf:4b:8d:6d:cf:1d:e9:a6:
10:12:72:87:e5:14:15:31:9c:0f:cc:ea:98:33:07:
e0:2b:10:65:53:4a:eb:7f:cb:69:c7:d9:62:ca:16:
7c:0d:60:5f:3e:d5:08:10:8f:5f:8c:06:42:8b:eb:
f7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9D:F1:B3:F3:6A:0F:3B:35:C5:B1:E9:22:85:06:BA:4C:E6:CB:FE
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/Lp3xs_NqDzs1xbHpIoUGukzmy_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3502:1122::/47
Signature Algorithm: sha256WithRSAEncryption
76:97:e5:af:e2:37:58:87:b9:c5:67:f7:cc:c2:0b:06:8e:55:
07:e7:80:25:03:12:19:cf:26:b0:0d:88:31:0e:e0:0b:9f:59:
53:c8:b3:9c:33:21:14:37:ac:20:b5:18:35:7e:ca:db:b7:ee:
7b:6d:97:2d:84:1f:d7:15:09:91:61:35:e2:f5:f5:5f:e2:79:
9d:83:9e:d2:a3:d2:3e:f0:4f:04:fe:9b:d6:40:39:7a:fb:cd:
cb:a5:2f:34:6a:ab:b4:62:86:c8:9a:cd:41:5d:2b:e6:cc:37:
73:6c:f3:72:71:1d:c8:eb:a5:f0:92:bb:f4:40:66:a2:89:34:
5a:f1:aa:9f:34:43:a5:08:eb:83:06:9c:a9:10:9c:f6:2c:ed:
1e:0e:1b:da:36:32:10:ac:82:1b:61:ee:0a:52:ad:3e:4c:2a:
6f:77:1b:2f:08:be:45:8f:ff:4f:fa:b6:91:e2:59:3c:38:4f:
a2:dc:57:4d:59:55:e4:c7:88:6d:c2:fe:94:9f:c1:47:68:ed:
87:89:77:69:35:5a:cd:45:89:f8:5b:06:88:52:cb:10:4f:5c:
a1:87:14:96:72:30:7a:7d:b3:88:05:2d:b8:61:4f:88:ee:e1:
fd:80:b4:30:0d:39:86:4f:08:ea:31:7a:65:03:cc:ee:10:55:
da:23:de:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:20 2025 by rpki-client