Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/LlvH-5bVPwL8EGSKITh5hQ45hmY.roa
File: LlvH-5bVPwL8EGSKITh5hQ45hmY.roa (raw, json)
Hash identifier: E/asGCyprc5A0F7uSv0UC3529jcmFRF1rIpKkckQCY0=
Subject key identifier: 2E:5B:C7:FB:96:D5:3F:02:FC:10:64:8A:21:38:79:85:0E:39:86:66
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01968D05337A5FF8F5829EE0A39AC03C4DC1
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/LlvH-5bVPwL8EGSKITh5hQ45hmY.roa
Signing time: Thu 01 May 2025 18:04:10 +0000
ROA not before: Thu 01 May 2025 18:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:8d05:153d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:05:33:7a:5f:f8:f5:82:9e:e0:a3:9a:c0:3c:4d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 1 18:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e5bc7fb96d53f02fc10648a213879850e398666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:50:56:c8:ee:76:29:d4:8b:0f:fb:cd:f2:
56:ee:6c:cc:91:f0:94:52:17:62:a2:22:bb:33:e9:
7d:3c:51:61:eb:14:6b:94:2c:8c:07:c7:2d:ab:0a:
c4:59:5e:eb:34:ef:01:55:d4:41:ef:85:13:58:27:
ce:1c:ba:67:fe:44:1a:4b:5e:b1:49:58:aa:87:e8:
76:47:92:4d:c2:59:d4:6c:77:ce:0d:9f:d0:df:65:
0a:50:10:45:9a:be:e4:36:ec:e0:70:83:70:81:18:
db:f8:36:54:8b:3e:6f:c2:54:fe:a1:70:27:46:82:
f8:cc:16:d2:14:82:93:2f:c9:88:65:f7:f2:ba:9a:
f6:24:cb:d7:f8:5c:3c:9c:33:14:d8:78:e6:2e:b8:
f8:90:68:a4:d6:30:ae:d0:07:0f:e8:d6:d6:cc:c4:
59:2e:93:e1:c6:a4:1e:04:c3:73:b8:b6:08:b1:0d:
4d:b3:d8:ba:79:3d:8b:67:3b:3b:0b:27:c9:a0:1d:
6d:37:39:a2:4c:39:c3:01:48:5f:b0:6a:b9:13:4f:
01:05:49:3c:dd:02:76:e7:d1:24:fd:71:77:8a:f5:
11:ed:ed:2f:c7:48:a0:fd:93:ef:e9:db:69:03:27:
89:b2:a6:87:cd:2c:25:d6:33:51:e6:54:d9:5b:f0:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5B:C7:FB:96:D5:3F:02:FC:10:64:8A:21:38:79:85:0E:39:86:66
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/LlvH-5bVPwL8EGSKITh5hQ45hmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:8d05:153d/128
Signature Algorithm: sha256WithRSAEncryption
a8:a8:9e:a3:74:c9:a2:da:b9:43:b9:b0:18:24:13:72:38:dc:
01:88:0a:98:55:fd:d3:17:cb:d4:9d:41:2a:73:9b:fa:41:2a:
dd:40:25:0d:04:aa:d3:c9:32:50:52:76:fd:3f:8e:1e:27:cc:
e9:3e:bf:39:c1:31:ac:94:a5:09:14:0b:4b:82:45:ce:7d:6d:
f3:ae:47:ba:8f:ba:38:4f:1d:bd:b8:4c:53:51:46:f5:cc:8d:
56:b8:85:1b:7c:9d:b9:46:f5:c9:00:21:63:de:12:8f:69:d0:
67:a2:d2:30:57:54:ec:8a:63:41:82:fe:3a:7e:c8:fc:85:21:
83:b5:15:2a:0f:78:c4:d9:24:da:ba:7c:f0:ae:0d:51:fa:00:
57:f1:93:d2:d3:3d:f0:e2:14:83:44:5a:7c:78:63:d5:48:43:
96:79:7a:ac:19:37:98:79:71:50:7b:33:ec:bc:03:b5:ee:b3:
9e:40:7c:08:47:f0:47:47:06:b7:eb:52:37:b2:97:d0:b4:f6:
5c:84:9e:a0:99:db:0f:33:dd:2b:30:d3:5e:3b:a2:4e:bc:bf:
9d:90:e3:f9:4a:d6:5a:be:74:2c:ff:d8:81:ad:fd:17:ab:af:
c3:a2:bb:d8:49:8e:f9:d1:0b:f8:c1:60:7a:1e:fe:06:3b:1d:
6c:0f:65:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:03:51 2025 by rpki-client