Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/la-kWBYoovij7XT86WWpc4vjGgE.roa
File: la-kWBYoovij7XT86WWpc4vjGgE.roa (raw, json)
Hash identifier: p8IEL9BMFtEEMHfr3ACjEnrUsD/WgliPgh6NYJ0Xa2U=
Subject key identifier: 95:AF:A4:58:16:28:A2:F8:A3:ED:74:FC:E9:65:A9:73:8B:E3:1A:01
Certificate issuer: /CN=7a83b3271c02df32db3c51fc40a9538368834f0b
Certificate serial: 0182EF4E9BF042A6960796F12EFED2F1DBE8
Authority key identifier: 7A:83:B3:27:1C:02:DF:32:DB:3C:51:FC:40:A9:53:83:68:83:4F:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoOzJxwC3zLbPFH8QKlTg2iDTws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/la-kWBYoovij7XT86WWpc4vjGgE.roa
Signing time: Tue 30 Aug 2022 15:11:22 +0000
ROA not before: Tue 30 Aug 2022 15:11:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 80.76.32.0/24 maxlen: 24
80.76.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:4e:9b:f0:42:a6:96:07:96:f1:2e:fe:d2:f1:db:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a83b3271c02df32db3c51fc40a9538368834f0b
Validity
Not Before: Aug 30 15:11:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95afa4581628a2f8a3ed74fce965a9738be31a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:c4:8a:ab:9a:8a:97:8e:86:43:90:3a:73:
36:5c:35:8d:f1:42:db:cf:ea:d4:42:be:c2:af:0b:
e7:ff:8b:d7:9f:a6:97:64:05:e6:ea:0c:db:9b:c6:
94:8b:69:7b:fb:87:b3:c8:76:cb:6b:dc:3e:fd:e8:
eb:d7:82:7b:8e:d8:59:5a:ae:58:fd:a2:ce:84:dd:
6e:b0:aa:cc:0c:e5:de:7a:90:6c:42:98:97:29:c5:
cd:c8:e5:d0:f0:c8:eb:2e:cd:46:89:c9:ed:38:35:
92:f2:0b:e9:5f:6c:eb:14:50:ae:be:9d:1d:d0:b2:
69:e7:95:89:77:29:f3:0c:cb:c7:42:e7:d1:d2:2a:
a7:70:b3:71:60:a4:0e:f3:39:58:3f:98:16:f5:09:
5b:72:d8:2a:cc:23:67:10:96:7f:c7:7a:78:a7:1b:
41:a9:ac:b2:68:77:32:60:72:40:67:91:97:83:e6:
6b:35:db:12:95:f9:dd:5d:dd:ca:15:cb:bf:13:2d:
c0:0a:8f:2d:19:50:5f:08:30:1b:de:a5:b0:d6:dc:
99:2c:59:41:31:22:9d:92:7c:ee:80:24:bf:61:f6:
4f:b9:aa:c4:ec:aa:f2:7f:0e:7c:89:26:71:cb:93:
4a:60:d0:3b:e7:38:f7:c1:15:a9:26:80:d7:a5:1f:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AF:A4:58:16:28:A2:F8:A3:ED:74:FC:E9:65:A9:73:8B:E3:1A:01
X509v3 Authority Key Identifier:
keyid:7A:83:B3:27:1C:02:DF:32:DB:3C:51:FC:40:A9:53:83:68:83:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoOzJxwC3zLbPFH8QKlTg2iDTws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/la-kWBYoovij7XT86WWpc4vjGgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/eoOzJxwC3zLbPFH8QKlTg2iDTws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.32.0/24
80.76.34.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a3:76:58:e1:95:28:c6:c4:fe:4f:cb:74:79:8e:be:bd:6e:
ba:9b:2f:1e:f1:e0:0b:84:a6:03:fb:32:93:1a:ee:8b:9d:80:
56:5a:42:fe:35:c4:db:ad:ec:50:97:57:67:a6:ca:a0:be:e2:
69:03:3e:c2:59:b5:24:fb:05:f9:70:84:57:1f:7c:6f:42:9a:
6c:a2:92:9f:4d:75:79:86:86:8d:99:cd:38:34:fc:8e:28:d2:
4d:72:8f:14:9f:1a:6e:70:41:56:9b:c7:4f:ec:4a:5d:6c:19:
a0:39:8d:70:30:fd:e5:4a:7b:f4:17:92:0b:8d:33:90:7a:80:
5b:c0:18:3b:db:38:46:c6:ca:b8:3f:99:0c:f6:b4:11:f3:c7:
eb:6f:f4:81:ae:3c:de:91:c6:af:2e:e6:81:e6:4f:9a:be:c9:
2c:dc:5c:b8:41:26:47:b1:fa:09:23:0e:9b:a3:e2:ad:fb:2c:
38:54:61:e0:36:bc:f9:84:ef:56:5e:45:93:5c:ac:8a:e8:9c:
17:77:fb:e2:71:5a:42:04:b6:bb:5f:fc:79:b2:f2:bc:8d:5a:
a4:19:48:56:db:32:d8:23:49:3e:6e:f0:d4:74:fa:db:51:31:
32:4c:58:ff:0f:2a:1c:ae:24:6f:d0:63:4f:db:36:60:98:24:
a1:9b:60:b2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYLvTpvwQqaWB5bxLv7S8dvoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhODNiMzI3MWMwMmRmMzJkYjNjNTFmYzQwYTk1MzgzNjg4
MzRmMGIwHhcNMjIwODMwMTUxMTIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWFmYTQ1ODE2MjhhMmY4YTNlZDc0ZmNlOTY1YTk3MzhiZTMxYTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J3EiquaipeOhkOQOnM2XDWN8ULb
z+rUQr7Crwvn/4vXn6aXZAXm6gzbm8aUi2l7+4ezyHbLa9w+/ejr14J7jthZWq5Y
/aLOhN1usKrMDOXeepBsQpiXKcXNyOXQ8MjrLs1GicntODWS8gvpX2zrFFCuvp0d
0LJp55WJdynzDMvHQufR0iqncLNxYKQO8zlYP5gW9QlbctgqzCNnEJZ/x3p4pxtB
qayyaHcyYHJAZ5GXg+ZrNdsSlfndXd3KFcu/Ey3ACo8tGVBfCDAb3qWw1tyZLFlB
MSKdknzugCS/YfZPuarE7Kryfw58iSZxy5NKYNA75zj3wRWpJoDXpR+JowIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJWvpFgWKKL4o+10/OllqXOL4xoBMB8GA1UdIwQY
MBaAFHqDsyccAt8y2zxR/ECpU4Nog08LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW9Pekp4d0MzekxiUEZIOFFLbFRnMmlEVHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jYjAwMzItODU1Zi00NDIyLWI4MTMt
ODM2NmRmMGY0NDM4LzEvbGEta1dCWW9vdmlqN1hUODZXV3BjNHZqR2dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9jYjAwMzItODU1Zi00NDIyLWI4MTMtODM2NmRmMGY0NDM4
LzEvZW9Pekp4d0MzekxiUEZIOFFLbFRnMmlEVHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEwgAwQA
UEwiMA0GCSqGSIb3DQEBCwUAA4IBAQAqo3ZY4ZUoxsT+T8t0eY6+vW66my8e8eAL
hKYD+zKTGu6LnYBWWkL+NcTbrexQl1dnpsqgvuJpAz7CWbUk+wX5cIRXH3xvQpps
opKfTXV5hoaNmc04NPyOKNJNco8UnxpucEFWm8dP7EpdbBmgOY1wMP3lSnv0F5IL
jTOQeoBbwBg72zhGxsq4P5kM9rQR88frb/SBrjzekcavLuaB5k+avsks3Fy4QSZH
sfoJIw6bo+Kt+yw4VGHgNrz5hO9WXkWTXKyK6JwXd/vicVpCBLa7X/x5svK8jVqk
GUhW2zLYI0k+bvDUdPrbUTEyTFj/DyocriRv0GNP2zZgmCShm2Cy
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:59:40 2025 by rpki-client