Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/7LitmnPr7P35hUML3LByHYUtWSs.roa
File: 7LitmnPr7P35hUML3LByHYUtWSs.roa (raw, json)
Hash identifier: u2sP5pM1SE6fhwY8zRRGrI3fKrXT9BfwAHT62VTant8=
Subject key identifier: EC:B8:AD:9A:73:EB:EC:FD:F9:85:43:0B:DC:B0:72:1D:85:2D:59:2B
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: 0186F29AA8748162C3F0C97D00E9EF2FEC17
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/7LitmnPr7P35hUML3LByHYUtWSs.roa
Signing time: Sat 18 Mar 2023 02:44:27 +0000
ROA not before: Sat 18 Mar 2023 02:44:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400587
IP address blocks: 2a0e:1c80:17::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f2:9a:a8:74:81:62:c3:f0:c9:7d:00:e9:ef:2f:ec:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Mar 18 02:44:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecb8ad9a73ebecfdf985430bdcb0721d852d592b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:33:fb:66:9f:f8:73:0e:c4:2b:88:eb:04:
55:e0:6f:e6:bd:11:d8:6c:c0:8d:de:a5:aa:f6:43:
81:44:81:88:3e:6c:a3:9f:29:ac:4d:83:69:37:24:
2f:3c:fa:92:c1:6a:07:20:0b:42:a5:a6:11:9c:21:
ac:18:12:68:b6:04:c6:25:51:f0:f3:8b:e0:ca:c3:
51:c7:77:cc:fc:46:b8:bf:a8:59:b0:1e:83:a7:45:
d4:84:97:c1:28:a0:04:9a:30:15:fa:60:05:e5:02:
ac:8c:cc:05:cc:1e:f7:7b:33:e3:1d:08:b2:a1:d8:
d7:2c:4a:ab:4c:67:73:6f:a0:a1:48:78:08:91:c2:
c6:4a:c1:56:ba:25:01:ee:8a:d6:d3:75:28:a1:8c:
51:a6:8a:eb:4d:b7:66:41:a5:c1:e6:84:44:dd:1d:
3f:a9:a6:44:29:04:1e:b0:0c:57:75:cd:9b:96:ad:
e6:e0:0c:b1:fc:fd:6e:e4:89:83:08:62:06:91:8b:
bd:46:38:40:5c:bb:11:22:b3:42:57:93:1e:de:35:
4e:70:f8:ac:2d:97:d2:fd:f2:80:f8:a0:d0:6a:0e:
22:2a:b9:27:fe:b6:65:96:b4:00:bf:61:a3:42:87:
34:f7:31:45:16:a1:8c:21:34:b0:0c:59:bf:4b:bc:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B8:AD:9A:73:EB:EC:FD:F9:85:43:0B:DC:B0:72:1D:85:2D:59:2B
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/7LitmnPr7P35hUML3LByHYUtWSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:17::/48
Signature Algorithm: sha256WithRSAEncryption
38:79:97:eb:da:57:5c:9b:4a:98:fb:c9:34:23:2c:80:cd:5a:
40:70:34:71:a7:4a:1c:d3:25:b2:dd:87:92:c6:63:42:06:9e:
64:a8:1c:a6:33:0f:f9:4b:f9:97:af:92:f6:d2:e7:cb:43:8f:
a1:3e:8e:9e:05:5e:51:aa:d2:5b:02:12:15:65:c2:e5:f1:32:
5f:5b:6d:8c:54:e7:87:89:27:3c:3c:e3:c7:ef:da:81:ab:81:
44:5a:9a:21:23:97:c0:11:8e:1d:66:97:e9:ed:f5:b4:28:f1:
d3:0d:da:e7:6e:1d:7f:ed:10:08:e8:57:b9:b8:58:fa:6f:ce:
07:c8:63:b4:f1:1b:35:62:77:1f:6c:c0:6f:08:a8:f8:a0:3d:
96:49:10:a9:38:08:27:c3:66:78:e1:59:13:61:99:af:45:ea:
ab:97:cf:ac:5d:81:db:8f:ef:e1:0a:96:0a:e1:6b:1f:21:a7:
ac:c6:d4:3a:1e:f9:16:08:b8:6f:e9:07:43:86:38:9f:23:24:
99:e7:be:9f:f1:1c:44:61:0c:a7:6e:00:4f:0a:2d:c3:ed:59:
ae:6c:ae:f3:86:53:3e:a1:93:f1:62:4c:68:8e:3e:cf:04:80:
3f:4f:e3:5c:08:d0:1e:4a:3e:ef:aa:82:ab:e8:32:14:7c:25:
61:54:a9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:12:34 2025 by rpki-client