Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/LWhiGfitNgO-cR3pwDgrYI4GHEw.roa
File: LWhiGfitNgO-cR3pwDgrYI4GHEw.roa (raw, json)
Hash identifier: rF/uoo5lp4rPnDyAVMWEEXV8T7kfy3TWrQvGxZFrDL4=
Subject key identifier: 2D:68:62:19:F8:AD:36:03:BE:71:1D:E9:C0:38:2B:60:8E:06:1C:4C
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A4B197D25A0FD591E56F14E79D0ED
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/LWhiGfitNgO-cR3pwDgrYI4GHEw.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136620
IP address blocks: 2a06:82c2:2::/48 maxlen: 48
2a06:82c2:d::/48 maxlen: 48
2a06:82c2:e::/48 maxlen: 48
2a06:82c2:f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4b:19:7d:25:a0:fd:59:1e:56:f1:4e:79:d0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d686219f8ad3603be711de9c0382b608e061c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:60:55:c8:ef:25:4a:9a:47:0e:27:51:66:
c9:1f:77:da:84:78:99:95:a2:3a:dd:18:2c:95:5a:
ae:df:c3:dc:12:79:aa:1e:86:9e:77:48:71:7b:35:
0b:f2:88:83:b7:78:5e:8a:f9:12:b0:e3:88:15:ac:
49:20:32:5a:26:c3:68:ca:7d:0a:5c:05:18:d4:e2:
e8:d9:6a:00:14:ec:9f:5f:98:57:d6:c8:11:2e:40:
4b:26:d9:58:ad:23:27:73:57:59:30:f8:3b:1d:e7:
f0:46:81:56:fc:3e:c7:39:e1:ed:12:88:58:6e:94:
2b:3b:65:ee:e6:f4:4b:f7:da:4f:72:93:8d:a5:77:
86:99:e7:55:df:67:cd:c1:07:61:97:f5:a2:52:bb:
8d:54:2a:9a:3e:8f:e4:c7:72:14:b3:82:e9:43:f3:
35:10:fc:8f:af:f1:5f:3c:8c:14:5a:7f:4a:47:46:
bd:04:b9:b9:3d:d7:88:e2:ab:4e:6e:b9:1c:c5:bc:
41:ae:cc:33:1c:f7:e3:89:73:3c:71:7d:cb:6c:a9:
e2:3d:56:18:ae:93:87:fa:46:4c:48:7b:d5:6e:b0:
0d:37:45:01:d5:b9:89:76:5e:af:21:de:54:b8:c4:
d1:bc:e0:a9:d7:f4:23:51:ae:a3:03:7e:88:e9:05:
64:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:68:62:19:F8:AD:36:03:BE:71:1D:E9:C0:38:2B:60:8E:06:1C:4C
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/LWhiGfitNgO-cR3pwDgrYI4GHEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:82c2:2::/48
2a06:82c2:d::-2a06:82c2:f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
75:c4:30:71:ce:19:ab:b5:97:ba:ac:3c:18:cb:c8:72:c8:04:
56:46:bb:26:f0:ab:a9:aa:7b:df:e6:fa:b1:ac:e3:c8:c4:14:
ae:0c:d7:c5:c3:d6:15:ce:1a:f9:15:1e:c8:e8:53:df:43:8b:
bc:e0:60:c8:80:4a:1b:e3:82:8b:dd:ab:d7:30:9d:33:11:c9:
95:e2:6c:09:42:d7:8a:e0:03:aa:c3:ad:b4:e2:1a:1a:0b:ec:
68:c5:fa:5a:cf:d6:66:c0:75:d3:05:b4:98:45:37:a1:1a:d4:
91:9a:78:7e:f5:bc:91:ea:b0:d5:00:03:a9:f2:ee:e2:ee:92:
21:bb:26:46:84:1b:67:d4:cf:03:eb:42:39:69:21:28:53:fe:
da:f8:62:17:f6:6d:36:39:e4:68:bc:a6:40:30:61:d0:3f:76:
8c:d3:63:29:a4:78:2d:00:90:c8:d3:f0:25:d1:8e:b6:54:00:
62:bd:bf:b1:68:50:0b:6f:3f:cf:7b:93:53:af:97:79:2c:05:
23:2a:f3:97:d3:e7:1a:57:b6:ce:a1:17:29:d8:cc:ae:23:dd:
30:cc:9c:f0:68:c5:ee:d7:49:60:4d:e6:9f:ca:b5:ff:89:ca:
37:d5:8d:cb:68:83:8f:11:d0:1e:df:92:ac:78:cb:1d:8b:7d:
71:0c:21:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:41:16 2025 by rpki-client