Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/6bb996-960c-4659-973a-6ad7f28f6374/1/lagEv5NFr0ps4Y2Gko0GC1ey67Y.roa
File: lagEv5NFr0ps4Y2Gko0GC1ey67Y.roa (raw, json)
Hash identifier: 99K/rgePgYMOAYFhbkLSvh7cSdwLjpvdxpcHTKum/l0=
Subject key identifier: 95:A8:04:BF:93:45:AF:4A:6C:E1:8D:86:92:8D:06:0B:57:B2:EB:B6
Certificate issuer: /CN=202991b3a0d06f9a5f96d8e77da9f36d9851b6ca
Certificate serial: 0652E59D
Authority key identifier: 20:29:91:B3:A0:D0:6F:9A:5F:96:D8:E7:7D:A9:F3:6D:98:51:B6:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICmRs6DQb5pfltjnfanzbZhRtso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/6bb996-960c-4659-973a-6ad7f28f6374/1/lagEv5NFr0ps4Y2Gko0GC1ey67Y.roa
Signing time: Sat 01 Jan 2022 13:05:17 +0000
ROA not before: Sat 01 Jan 2022 13:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207487
IP address blocks: 2001:678:c18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106096029 (0x652e59d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202991b3a0d06f9a5f96d8e77da9f36d9851b6ca
Validity
Not Before: Jan 1 13:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95a804bf9345af4a6ce18d86928d060b57b2ebb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:fe:f3:d0:53:82:26:51:d3:c4:b6:20:55:
91:25:ea:3a:3d:5e:44:ee:69:2e:34:3c:8a:03:eb:
ef:d1:f9:8b:ce:ba:f3:60:c0:9a:df:42:6d:99:26:
04:ab:93:08:b9:22:89:8c:f4:a5:a8:e3:85:d6:10:
24:aa:31:e7:d6:32:79:f7:a6:95:a6:39:f1:ee:7f:
7a:19:f2:0a:98:6e:24:2b:08:c3:f7:f2:e4:6e:e0:
cd:f7:f7:07:f2:81:ba:e7:a4:0c:86:20:e5:a9:63:
1e:33:8a:7a:61:58:9b:79:95:d8:fc:25:2a:a5:19:
32:92:54:3a:4d:b2:d3:d2:7b:53:5a:fc:86:0f:62:
cf:e5:e1:ea:04:19:40:08:13:b9:da:ea:0e:7f:fa:
28:66:a7:38:a0:53:19:b2:06:5a:19:7e:9e:22:50:
ff:d1:aa:75:c2:32:9e:c5:b3:a8:b4:68:fd:13:76:
98:97:da:54:f1:60:04:42:47:bb:c0:70:d0:da:9f:
cb:ec:94:70:ef:0f:b2:15:0b:89:ea:0a:d4:dd:88:
b1:d8:10:28:a8:25:60:2c:5e:98:22:3a:51:26:83:
1d:82:3c:25:39:91:c2:65:f3:c9:f8:34:e7:e2:b5:
7f:07:84:20:42:a4:dd:12:d0:17:63:3e:40:68:92:
6d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A8:04:BF:93:45:AF:4A:6C:E1:8D:86:92:8D:06:0B:57:B2:EB:B6
X509v3 Authority Key Identifier:
keyid:20:29:91:B3:A0:D0:6F:9A:5F:96:D8:E7:7D:A9:F3:6D:98:51:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICmRs6DQb5pfltjnfanzbZhRtso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6bb996-960c-4659-973a-6ad7f28f6374/1/lagEv5NFr0ps4Y2Gko0GC1ey67Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6bb996-960c-4659-973a-6ad7f28f6374/1/ICmRs6DQb5pfltjnfanzbZhRtso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c18::/48
Signature Algorithm: sha256WithRSAEncryption
a1:65:0c:56:58:b5:4e:bb:e1:77:29:25:61:64:0a:47:ca:4e:
bf:1b:30:c6:08:ed:4c:3e:65:55:4f:04:55:e7:3b:50:6f:9a:
d4:41:50:91:c5:ed:01:56:f4:5a:51:a7:9e:bd:ff:f1:30:ba:
77:2a:8c:db:ec:1c:88:df:bc:1f:d2:81:86:a6:f8:58:ec:37:
e2:4e:31:aa:71:26:9d:9c:65:56:af:84:45:b2:ca:26:4c:a0:
c4:e5:1c:11:16:5d:76:fc:a0:84:0d:0b:57:58:a4:99:a8:dd:
94:61:1a:f4:bc:b7:d6:85:40:dc:2f:78:6e:06:96:82:df:93:
1c:18:eb:88:c9:30:24:d6:3f:3d:18:02:85:92:ad:a8:73:20:
1b:22:d4:3a:25:66:d2:90:d3:01:0a:a2:84:d7:8f:5f:c8:1e:
41:da:5c:5e:1b:cf:7d:61:23:45:0b:49:f7:71:d0:37:db:c9:
b8:eb:1c:a7:c0:5e:ee:27:a8:3c:18:32:f3:b2:54:c2:c1:89:
ca:5b:5a:32:2f:df:2b:9c:95:af:34:e9:3f:f3:ec:0f:58:a6:
3b:c4:d1:87:61:fe:18:d0:84:69:ad:44:c0:88:93:07:c7:97:
b3:9c:07:81:ed:f1:6d:34:d8:e7:be:c0:1e:e4:d0:ba:71:8e:
c2:f8:d7:9a
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBlLlnTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MDI5OTFiM2EwZDA2ZjlhNWY5NmQ4ZTc3ZGE5ZjM2ZDk4NTFiNmNhMB4XDTIyMDEw
MTEzMDUxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTVhODA0YmY5MzQ1
YWY0YTZjZTE4ZDg2OTI4ZDA2MGI1N2IyZWJiNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALqO/vPQU4ImUdPEtiBVkSXqOj1eRO5pLjQ8igPr79H5i866
82DAmt9CbZkmBKuTCLkiiYz0pajjhdYQJKox59YyefemlaY58e5/ehnyCphuJCsI
w/fy5G7gzff3B/KBuuekDIYg5aljHjOKemFYm3mV2PwlKqUZMpJUOk2y09J7U1r8
hg9iz+Xh6gQZQAgTudrqDn/6KGanOKBTGbIGWhl+niJQ/9GqdcIynsWzqLRo/RN2
mJfaVPFgBEJHu8Bw0Nqfy+yUcO8PshULieoK1N2IsdgQKKglYCxemCI6USaDHYI8
JTmRwmXzyfg05+K1fweEIEKk3RLQF2M+QGiSbeECAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSVqAS/k0WvSmzhjYaSjQYLV7LrtjAfBgNVHSMEGDAWgBQgKZGzoNBvml+W
2Od9qfNtmFG2yjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lDbVJzNkRRYjVwZmx0am5mYW56YlpoUnRzby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODQvNmJiOTk2LTk2MGMtNDY1OS05NzNhLTZhZDdmMjhmNjM3NC8x
L2xhZ0V2NU5GcjBwczRZMkdrbzBHQzFleTY3WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQv
NmJiOTk2LTk2MGMtNDY1OS05NzNhLTZhZDdmMjhmNjM3NC8xL0lDbVJzNkRRYjVw
Zmx0am5mYW56YlpoUnRzby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngMGDANBgkqhkiG9w0BAQsF
AAOCAQEAoWUMVli1TrvhdyklYWQKR8pOvxswxgjtTD5lVU8EVec7UG+a1EFQkcXt
AVb0WlGnnr3/8TC6dyqM2+wciN+8H9KBhqb4WOw34k4xqnEmnZxlVq+ERbLKJkyg
xOUcERZddvyghA0LV1ikmajdlGEa9Ly31oVA3C94bgaWgt+THBjriMkwJNY/PRgC
hZKtqHMgGyLUOiVm0pDTAQqihNePX8geQdpcXhvPfWEjRQtJ93HQN9vJuOscp8Be
7ieoPBgy87JUwsGJyltaMi/fK5yVrzTpP/PsD1imO8TRh2H+GNCEaa1EwIiTB8eX
s5wHge3xbTTY577AHuTQunGOwvjXmg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:02 2025 by rpki-client