Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/tL5oGaOouG0pKIA4TIr965DjiFE.roa
File: tL5oGaOouG0pKIA4TIr965DjiFE.roa (raw, json)
Hash identifier: /J2h2uhNsko78Lvhys0uItjTNIergGlE9YPepZDvwAY=
Subject key identifier: B4:BE:68:19:A3:A8:B8:6D:29:28:80:38:4C:8A:FD:EB:90:E3:88:51
Certificate issuer: /CN=23b78d77a05449b1756083d03f1fd2373a6125a6
Certificate serial: 01856D9D4505E2E2F2400A012CEDCB955FE4
Authority key identifier: 23:B7:8D:77:A0:54:49:B1:75:60:83:D0:3F:1F:D2:37:3A:61:25:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7eNd6BUSbF1YIPQPx_SNzphJaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/tL5oGaOouG0pKIA4TIr965DjiFE.roa
Signing time: Sun 01 Jan 2023 13:55:01 +0000
ROA not before: Sun 01 Jan 2023 13:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:4600::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:45:05:e2:e2:f2:40:0a:01:2c:ed:cb:95:5f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b78d77a05449b1756083d03f1fd2373a6125a6
Validity
Not Before: Jan 1 13:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4be6819a3a8b86d292880384c8afdeb90e38851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:ed:49:4f:1b:79:b8:64:94:53:97:2d:ef:
0d:8c:ea:f3:3d:60:b5:c8:68:88:12:c8:36:e3:9f:
20:5b:61:16:e4:32:f8:46:f1:d8:47:e0:ee:38:90:
eb:41:be:24:eb:c7:15:bc:3c:46:00:af:89:07:8e:
bc:eb:13:82:56:51:8b:90:85:51:b1:58:d4:01:e4:
ac:20:73:be:e3:f7:a2:f3:aa:73:f1:ef:a2:a7:68:
7c:af:93:6a:c6:e5:cc:08:c4:b2:c3:f9:bd:0e:cc:
6b:3d:d0:fc:cc:96:7c:2f:0f:56:03:f6:d0:e8:b7:
4a:e1:77:40:92:da:fe:1e:c8:0e:47:53:ea:21:44:
80:5a:23:01:3b:79:16:f0:e7:b1:f6:62:62:05:68:
ff:c6:12:14:5c:75:40:56:9a:89:42:69:20:2b:d3:
1d:a4:73:33:13:19:5a:b2:c6:da:48:f1:cf:87:55:
1c:95:f7:e5:2b:6b:65:af:70:f9:34:50:57:4c:ae:
6d:90:35:d8:5b:97:88:a2:c3:fc:6f:cc:b3:92:aa:
5f:9b:f3:62:3a:7d:6b:42:c3:e2:cf:f3:db:82:f2:
09:6a:53:bf:e3:cc:43:e9:76:3f:6c:7a:23:dc:fb:
dd:d2:c0:de:0e:6b:46:5f:7e:47:22:56:af:e9:71:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BE:68:19:A3:A8:B8:6D:29:28:80:38:4C:8A:FD:EB:90:E3:88:51
X509v3 Authority Key Identifier:
keyid:23:B7:8D:77:A0:54:49:B1:75:60:83:D0:3F:1F:D2:37:3A:61:25:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7eNd6BUSbF1YIPQPx_SNzphJaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/tL5oGaOouG0pKIA4TIr965DjiFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/I7eNd6BUSbF1YIPQPx_SNzphJaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4600::/29
Signature Algorithm: sha256WithRSAEncryption
81:e0:6d:30:34:d1:a4:eb:87:73:92:07:84:35:e6:b1:82:ae:
04:2d:7a:8b:4f:cd:4f:12:59:90:63:6e:c3:c9:96:c9:cb:36:
6f:58:21:fa:64:20:49:8c:c1:c7:e9:56:21:4b:75:9c:bc:68:
ff:4d:81:8d:66:fd:3c:71:db:86:ce:92:31:47:b6:5d:7d:72:
5d:5c:7c:31:32:7e:df:78:39:2e:3d:f6:5f:24:28:de:18:27:
0e:be:13:93:82:71:90:6b:09:ea:9c:85:60:92:d7:52:d6:d5:
98:3c:30:e7:aa:e7:c4:52:d5:8b:14:7f:01:48:ee:0d:30:54:
68:db:8f:4a:e9:0b:fa:65:de:2d:f5:5f:9c:bc:85:e1:51:cb:
03:8c:84:17:ad:16:82:ec:8e:94:fa:bf:ce:8c:71:d1:db:2b:
07:a5:0e:64:21:26:38:f0:04:34:81:fe:a6:2b:77:8e:ee:3f:
da:b8:81:0c:db:c3:d2:42:ef:ef:06:29:5f:dc:9d:77:d5:40:
43:d7:a7:49:90:c8:59:ca:c0:7c:db:cf:c9:db:52:b0:74:a9:
b5:e2:9f:76:24:ac:80:49:c4:ab:fc:25:b0:82:f9:8d:e8:d2:
fa:15:02:7d:3a:82:a8:3e:2c:5f:50:0a:03:73:fa:e2:87:e8:
b9:bc:f1:2a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVtnUUF4uLyQAoBLO3LlV/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYjc4ZDc3YTA1NDQ5YjE3NTYwODNkMDNmMWZkMjM3M2E2
MTI1YTYwHhcNMjMwMTAxMTM1NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGJlNjgxOWEzYThiODZkMjkyODgwMzg0YzhhZmRlYjkwZTM4ODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLHtSU8bebhklFOXLe8NjOrzPWC1
yGiIEsg2458gW2EW5DL4RvHYR+DuOJDrQb4k68cVvDxGAK+JB4686xOCVlGLkIVR
sVjUAeSsIHO+4/ei86pz8e+ip2h8r5NqxuXMCMSyw/m9DsxrPdD8zJZ8Lw9WA/bQ
6LdK4XdAktr+HsgOR1PqIUSAWiMBO3kW8Oex9mJiBWj/xhIUXHVAVpqJQmkgK9Md
pHMzExlassbaSPHPh1UclfflK2tlr3D5NFBXTK5tkDXYW5eIosP8b8yzkqpfm/Ni
On1rQsPiz/PbgvIJalO/48xD6XY/bHoj3Pvd0sDeDmtGX35HIlav6XF0XQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLS+aBmjqLhtKSiAOEyK/euQ44hRMB8GA1UdIwQY
MBaAFCO3jXegVEmxdWCD0D8f0jc6YSWmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTdlTmQ2QlVTYkYxWUlQUVB4X1NOenBoSmFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xNzc1NjQtMDM5YS00NzQyLTgzMDEt
NmNiNjg2MzI4MjQwLzEvdEw1b0dhT291RzBwS0lBNFRJcjk2NURqaUZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8xNzc1NjQtMDM5YS00NzQyLTgzMDEtNmNiNjg2MzI4MjQw
LzEvSTdlTmQ2QlVTYkYxWUlQUVB4X1NOenBoSmFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhJGADAN
BgkqhkiG9w0BAQsFAAOCAQEAgeBtMDTRpOuHc5IHhDXmsYKuBC16i0/NTxJZkGNu
w8mWycs2b1gh+mQgSYzBx+lWIUt1nLxo/02BjWb9PHHbhs6SMUe2XX1yXVx8MTJ+
33g5Lj32XyQo3hgnDr4Tk4JxkGsJ6pyFYJLXUtbVmDww56rnxFLVixR/AUjuDTBU
aNuPSukL+mXeLfVfnLyF4VHLA4yEF60WguyOlPq/zoxx0dsrB6UOZCEmOPAENIH+
pit3ju4/2riBDNvD0kLv7wYpX9ydd9VAQ9enSZDIWcrAfNvPydtSsHSpteKfdiSs
gEnEq/wlsIL5jejS+hUCfTqCqD4sX1AKA3P64ofoubzxKg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:37 2024 by rpki-client on console-fra.rpki-client.org