Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/LjdJyg2i9vGZpm7VXPwBOMCSEiw.roa
File: LjdJyg2i9vGZpm7VXPwBOMCSEiw.roa (raw, json)
Hash identifier: MZ/fbmAB50oT4J+U1xzh08P+Raln/5z9YHMJGvIm1Zg=
Subject key identifier: 2E:37:49:CA:0D:A2:F6:F1:99:A6:6E:D5:5C:FC:01:38:C0:92:12:2C
Certificate issuer: /CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
Certificate serial: 01942444B28C05B21E407529227510460C27
Authority key identifier: 61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/LjdJyg2i9vGZpm7VXPwBOMCSEiw.roa
Signing time: Wed 01 Jan 2025 23:47:49 +0000
ROA not before: Wed 01 Jan 2025 23:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38938
IP address blocks: 2a04:8900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b2:8c:05:b2:1e:40:75:29:22:75:10:46:0c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
Validity
Not Before: Jan 1 23:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e3749ca0da2f6f199a66ed55cfc0138c092122c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:0c:d9:10:60:12:eb:df:e0:65:f8:d7:58:
f1:3e:ab:90:69:b1:00:42:63:7d:ae:7e:19:71:2e:
d5:75:ab:a7:22:80:2b:3f:71:ed:11:3a:40:64:5d:
5c:74:e3:fc:fe:2e:0c:99:6d:29:3b:6b:ee:8b:0b:
d4:ce:b8:c8:b8:2c:ae:00:55:61:29:69:3b:61:1e:
10:65:51:07:96:02:44:ba:05:c8:00:15:8b:f9:48:
6f:b5:c6:9f:90:b8:5f:4c:c3:dd:30:b1:84:be:5f:
0e:88:71:7c:07:96:50:18:21:6f:e2:30:67:9f:02:
25:cf:78:a3:16:64:68:ab:c1:7b:4a:29:5f:93:62:
be:52:99:a8:f4:b4:ed:cc:0f:a5:52:50:99:54:9b:
ed:f9:cb:bc:0a:b8:7a:2c:d0:9b:cd:24:a4:db:5d:
d5:64:28:3c:60:60:9a:bb:fc:ff:6a:e7:ec:1c:a7:
bd:84:89:dd:40:6c:c9:1c:d6:ad:0a:f9:00:3a:1f:
85:97:00:99:bf:bd:cd:55:82:ef:43:63:3c:cf:53:
00:8b:76:b6:66:70:86:d1:3c:26:f8:7d:a3:89:3a:
a9:68:41:0c:da:55:cc:42:72:a9:44:f7:ee:4e:c0:
8a:ec:8b:7c:a6:97:dc:f8:c6:c1:5c:7f:ff:8c:cc:
b6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:37:49:CA:0D:A2:F6:F1:99:A6:6E:D5:5C:FC:01:38:C0:92:12:2C
X509v3 Authority Key Identifier:
keyid:61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/LjdJyg2i9vGZpm7VXPwBOMCSEiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:8900::/29
Signature Algorithm: sha256WithRSAEncryption
98:0a:95:6c:71:10:cb:b3:08:58:20:0e:55:a2:0d:09:ea:f4:
2a:4d:59:3a:71:59:a1:e9:e9:3c:6d:aa:af:7f:43:bf:a9:02:
71:ef:bd:b9:98:f0:34:6a:bc:f8:9a:1f:ef:74:87:b0:8b:70:
62:be:d2:c2:32:52:e6:6e:c2:64:f6:22:8f:c6:5d:28:31:2f:
64:5d:64:49:a3:58:0d:74:c3:22:01:c7:d3:73:75:15:3a:a5:
49:fd:90:c5:82:3f:39:ee:fd:15:5a:3c:f5:43:a9:eb:4a:6a:
ca:3c:10:06:1d:9b:bf:37:3b:9e:ca:81:81:b7:24:72:7f:b1:
33:77:37:80:5b:16:ec:c4:92:bc:fd:a8:c7:55:50:74:dc:09:
4f:5c:2d:38:ac:5d:c7:b4:90:25:30:f4:b2:e2:50:bf:92:39:
b1:1e:b8:0e:9d:18:f5:6f:b8:6b:56:0d:9e:12:ce:e5:41:fb:
26:8c:27:12:e8:68:fd:10:04:24:6e:4a:90:5b:17:e4:59:02:
ee:24:c0:e2:2b:61:05:5c:5d:e1:70:cc:ea:47:7e:7f:01:1f:
25:07:32:f3:55:ef:af:41:71:d0:3b:59:34:dc:07:29:30:b8:
2e:f6:ac:32:34:1b:b0:d5:d7:78:28:45:24:49:d8:ce:4c:76:
79:34:5f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net