Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/lN7k-bHcYQxtWt8ovgsn5oN53jk.roa
File: lN7k-bHcYQxtWt8ovgsn5oN53jk.roa (raw, json)
Hash identifier: xa/d78gB2mC7Okk7zuBvlU4K7uPhqtuhkDkgaumRpO0=
Subject key identifier: 94:DE:E4:F9:B1:DC:61:0C:6D:5A:DF:28:BE:0B:27:E6:83:79:DE:39
Certificate issuer: /CN=23b78d77a05449b1756083d03f1fd2373a6125a6
Certificate serial: 0181DAD074BE503A8617823EECFED62924F8
Authority key identifier: 23:B7:8D:77:A0:54:49:B1:75:60:83:D0:3F:1F:D2:37:3A:61:25:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7eNd6BUSbF1YIPQPx_SNzphJaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/lN7k-bHcYQxtWt8ovgsn5oN53jk.roa
Signing time: Thu 07 Jul 2022 22:38:23 +0000
ROA not before: Thu 07 Jul 2022 22:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 701
IP address blocks: 2a12:4600::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:da:d0:74:be:50:3a:86:17:82:3e:ec:fe:d6:29:24:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b78d77a05449b1756083d03f1fd2373a6125a6
Validity
Not Before: Jul 7 22:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94dee4f9b1dc610c6d5adf28be0b27e68379de39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:00:d5:24:89:69:38:43:63:2c:ba:7a:27:46:
21:f7:e3:16:a5:d0:98:06:18:ac:2f:9c:c3:6f:dd:
6a:89:df:80:13:29:17:c0:bd:d9:a0:8d:c7:22:c6:
b0:2c:01:ea:7b:20:df:87:a6:2a:a7:89:ec:02:3c:
d8:4b:a5:f7:a4:4e:df:b7:be:f7:3a:e6:e3:c7:08:
2b:99:39:e6:60:e4:bd:26:df:8d:c4:aa:8f:f3:ba:
e3:10:0f:c9:0b:4b:44:a6:6b:d9:7c:fd:2b:85:c4:
90:0f:4c:92:f2:a7:9a:3b:11:0a:97:48:17:13:8f:
9b:73:6e:55:44:36:81:81:05:19:e0:39:f7:20:5b:
1b:b8:47:eb:e7:35:93:c4:f4:8b:08:87:24:c2:3a:
52:ad:bc:8d:a2:f9:4a:1f:8f:3d:ff:13:23:88:f1:
42:c4:60:34:a4:c8:94:d0:a0:10:8d:76:98:ea:fe:
0e:c2:00:3d:49:f3:04:07:06:b1:f9:0e:ba:60:f8:
d0:55:fc:c1:55:81:dd:03:80:55:2a:ff:f2:e2:e5:
cb:1a:3b:18:07:97:7b:de:3e:ec:77:0f:f7:e0:f1:
60:1f:fc:4d:e9:bb:6c:d7:fb:d7:66:af:69:1f:15:
f6:70:37:12:cd:7d:f0:05:cf:c8:27:f0:f0:b8:d9:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DE:E4:F9:B1:DC:61:0C:6D:5A:DF:28:BE:0B:27:E6:83:79:DE:39
X509v3 Authority Key Identifier:
keyid:23:B7:8D:77:A0:54:49:B1:75:60:83:D0:3F:1F:D2:37:3A:61:25:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7eNd6BUSbF1YIPQPx_SNzphJaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/lN7k-bHcYQxtWt8ovgsn5oN53jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/I7eNd6BUSbF1YIPQPx_SNzphJaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4600::/29
Signature Algorithm: sha256WithRSAEncryption
ad:cb:0f:57:c9:7b:7d:f7:fa:11:fc:f9:c5:96:12:ee:9b:0a:
01:ae:a6:de:c0:d5:e6:df:85:c9:6a:cc:b0:89:17:d3:81:30:
a6:38:12:99:bd:6c:79:0e:bd:12:92:e5:9f:49:11:24:c2:d0:
02:f5:44:d3:bd:93:8b:64:fe:49:cc:71:d8:f6:90:49:ba:73:
0d:f5:62:4b:e7:29:20:d7:71:ec:ca:31:6b:cf:ec:ad:d8:c4:
81:f1:4a:8e:0f:bf:37:3b:84:d7:34:46:c8:90:ee:fe:fb:9c:
28:b9:cc:a1:d2:a8:f0:48:80:f1:7a:3f:7c:6e:79:a6:12:6f:
37:78:b6:26:27:f0:3f:50:ed:99:ed:70:ae:ca:c8:60:5b:bd:
5f:47:57:d0:28:6a:ac:f5:77:70:c2:0e:15:8d:28:1e:7f:6c:
a5:a4:ba:28:28:48:9d:34:ff:75:e7:f8:d0:2e:81:e2:c6:2c:
de:de:6c:ce:c0:a1:74:ed:0f:86:c8:87:fd:d4:89:6d:45:9c:
c4:4c:2c:d9:a1:79:28:99:af:87:83:d8:7d:fe:12:db:26:51:
47:05:24:31:fc:b7:39:08:d7:e7:60:c9:d0:03:aa:7c:b0:60:
bc:a6:29:45:05:5e:cc:81:da:8e:59:00:3d:6d:00:90:e4:fb:
3f:b7:dd:9b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYHa0HS+UDqGF4I+7P7WKST4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYjc4ZDc3YTA1NDQ5YjE3NTYwODNkMDNmMWZkMjM3M2E2
MTI1YTYwHhcNMjIwNzA3MjIzODIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGRlZTRmOWIxZGM2MTBjNmQ1YWRmMjhiZTBiMjdlNjgzNzlkZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkADVJIlpOENjLLp6J0Yh9+MWpdCY
BhisL5zDb91qid+AEykXwL3ZoI3HIsawLAHqeyDfh6Yqp4nsAjzYS6X3pE7ft773
OubjxwgrmTnmYOS9Jt+NxKqP87rjEA/JC0tEpmvZfP0rhcSQD0yS8qeaOxEKl0gX
E4+bc25VRDaBgQUZ4Dn3IFsbuEfr5zWTxPSLCIckwjpSrbyNovlKH489/xMjiPFC
xGA0pMiU0KAQjXaY6v4OwgA9SfMEBwax+Q66YPjQVfzBVYHdA4BVKv/y4uXLGjsY
B5d73j7sdw/34PFgH/xN6bts1/vXZq9pHxX2cDcSzX3wBc/IJ/DwuNnMhwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJTe5Pmx3GEMbVrfKL4LJ+aDed45MB8GA1UdIwQY
MBaAFCO3jXegVEmxdWCD0D8f0jc6YSWmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTdlTmQ2QlVTYkYxWUlQUVB4X1NOenBoSmFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xNzc1NjQtMDM5YS00NzQyLTgzMDEt
NmNiNjg2MzI4MjQwLzEvbE43ay1iSGNZUXh0V3Q4b3Znc241b041M2prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8xNzc1NjQtMDM5YS00NzQyLTgzMDEtNmNiNjg2MzI4MjQw
LzEvSTdlTmQ2QlVTYkYxWUlQUVB4X1NOenBoSmFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhJGADAN
BgkqhkiG9w0BAQsFAAOCAQEArcsPV8l7fff6Efz5xZYS7psKAa6m3sDV5t+FyWrM
sIkX04EwpjgSmb1seQ69EpLln0kRJMLQAvVE072Ti2T+Scxx2PaQSbpzDfViS+cp
INdx7Moxa8/srdjEgfFKjg+/NzuE1zRGyJDu/vucKLnModKo8EiA8Xo/fG55phJv
N3i2JifwP1Dtme1wrsrIYFu9X0dX0ChqrPV3cMIOFY0oHn9spaS6KChInTT/def4
0C6B4sYs3t5szsChdO0PhsiH/dSJbUWcxEws2aF5KJmvh4PYff4S2yZRRwUkMfy3
OQjX52DJ0AOqfLBgvKYpRQVezIHajlkAPW0AkOT7P7fdmw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:06 2024 by rpki-client on console-ams.rpki-client.org