Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/69a51d-92a1-48ad-b7e7-c4c879c6724c/1/LJZ5t4Monq4Xm1GEwsjkAHoxR6A.roa
File: LJZ5t4Monq4Xm1GEwsjkAHoxR6A.roa (raw, json)
Hash identifier: yfcoPhixAbsgVv398Zf8d1hroxb8/9BHSJPg1MDuFhQ=
Subject key identifier: 2C:96:79:B7:83:28:9E:AE:17:9B:51:84:C2:C8:E4:00:7A:31:47:A0
Certificate issuer: /CN=c96aeb75acbb5f212335ea6dccb0c36f367db4f8
Certificate serial: 08403E94
Authority key identifier: C9:6A:EB:75:AC:BB:5F:21:23:35:EA:6D:CC:B0:C3:6F:36:7D:B4:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWrrday7XyEjNeptzLDDbzZ9tPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/69a51d-92a1-48ad-b7e7-c4c879c6724c/1/LJZ5t4Monq4Xm1GEwsjkAHoxR6A.roa
Signing time: Sat 01 Jan 2022 08:01:20 +0000
ROA not before: Sat 01 Jan 2022 08:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208743
IP address blocks: 2001:678:710::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138428052 (0x8403e94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96aeb75acbb5f212335ea6dccb0c36f367db4f8
Validity
Not Before: Jan 1 08:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c9679b783289eae179b5184c2c8e4007a3147a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:15:fd:e4:f5:7a:3d:16:41:4b:87:9a:32:
b5:5d:dc:57:d2:8d:9b:a3:f2:9e:2a:d4:20:88:17:
db:36:97:20:8f:8a:38:69:ba:1b:aa:36:02:e5:0e:
ba:80:2b:60:fb:c3:76:4e:0b:13:8c:43:b7:a1:9d:
97:2e:bd:ac:15:58:2e:60:b8:3c:a4:74:01:36:5d:
18:95:e7:3f:84:27:70:0f:ae:1d:38:fb:5b:be:0e:
15:b9:59:8e:64:49:7e:80:b9:b2:fc:d6:b0:11:9b:
8c:b4:0e:c8:44:ed:3f:35:78:ab:16:42:49:85:a4:
af:d7:8f:83:bc:be:7f:16:93:40:d3:50:f9:3b:2a:
dc:ea:0b:6f:2d:41:b4:72:14:79:00:a0:89:b9:a5:
ee:5e:0d:94:a9:44:97:f2:3e:2d:3c:40:44:0a:0e:
2f:97:b8:9b:25:7b:cc:e3:27:fc:74:f5:c8:a6:a5:
f5:10:39:07:89:36:2f:93:8a:56:30:23:07:df:b0:
68:a4:87:6c:c8:2c:32:c7:aa:97:e2:eb:51:f2:23:
63:59:fb:eb:a5:5e:d6:ec:0f:e1:3f:18:19:aa:13:
1a:da:01:05:58:c3:9c:3e:7c:c1:02:0f:86:d8:8f:
14:2f:be:33:4d:ea:52:e2:53:49:9a:4f:79:71:d8:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:96:79:B7:83:28:9E:AE:17:9B:51:84:C2:C8:E4:00:7A:31:47:A0
X509v3 Authority Key Identifier:
keyid:C9:6A:EB:75:AC:BB:5F:21:23:35:EA:6D:CC:B0:C3:6F:36:7D:B4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWrrday7XyEjNeptzLDDbzZ9tPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/69a51d-92a1-48ad-b7e7-c4c879c6724c/1/LJZ5t4Monq4Xm1GEwsjkAHoxR6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/69a51d-92a1-48ad-b7e7-c4c879c6724c/1/yWrrday7XyEjNeptzLDDbzZ9tPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:710::/48
Signature Algorithm: sha256WithRSAEncryption
0e:f1:4c:fd:51:9d:16:18:1c:aa:fd:1f:4d:c1:18:66:f7:95:
4d:a5:61:84:f7:83:92:d6:26:12:6b:60:76:88:e2:c8:59:a5:
bf:0a:b5:e8:a5:f3:e4:58:d0:6d:90:b2:69:62:1d:29:1e:c2:
99:cc:08:d1:d6:98:65:2e:64:1b:fe:96:0d:d2:37:2c:77:a2:
54:47:2c:3a:b8:f2:12:54:4f:47:13:e8:8f:f6:60:8d:15:f6:
02:1f:0e:12:df:31:87:f8:57:3a:a5:d4:48:97:87:ff:93:79:
d8:75:c2:94:90:1f:01:44:8e:86:11:20:04:b4:a5:91:64:ba:
f4:03:6b:55:de:5f:25:c6:fd:42:f6:c1:3c:f5:52:f8:52:3f:
df:a4:f5:1d:30:77:a3:5a:9a:98:36:04:9a:6e:7f:25:e8:f9:
99:12:c8:eb:7d:05:4d:58:05:4b:0b:b7:2e:fc:21:32:a9:41:
01:32:2a:cc:bb:10:c1:af:f6:09:5f:14:c4:1c:ba:5c:a4:ce:
6b:92:c1:7b:8a:23:de:df:c5:5b:2c:f9:1e:9f:4f:31:95:00:
f6:cb:e4:35:e5:78:4d:22:ae:15:c7:33:9c:7e:21:ce:79:ef:
ef:7b:2c:47:db:86:07:53:cd:79:53:a7:4a:99:28:6d:89:b2:
8d:62:5b:0b
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECEA+lDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
OTZhZWI3NWFjYmI1ZjIxMjMzNWVhNmRjY2IwYzM2ZjM2N2RiNGY4MB4XDTIyMDEw
MTA4MDEyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmM5Njc5Yjc4MzI4
OWVhZTE3OWI1MTg0YzJjOGU0MDA3YTMxNDdhMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMFqFf3k9Xo9FkFLh5oytV3cV9KNm6PynirUIIgX2zaXII+K
OGm6G6o2AuUOuoArYPvDdk4LE4xDt6Gdly69rBVYLmC4PKR0ATZdGJXnP4QncA+u
HTj7W74OFblZjmRJfoC5svzWsBGbjLQOyETtPzV4qxZCSYWkr9ePg7y+fxaTQNNQ
+Tsq3OoLby1BtHIUeQCgibml7l4NlKlEl/I+LTxARAoOL5e4myV7zOMn/HT1yKal
9RA5B4k2L5OKVjAjB9+waKSHbMgsMseql+LrUfIjY1n766Ve1uwP4T8YGaoTGtoB
BVjDnD58wQIPhtiPFC++M03qUuJTSZpPeXHY8IcCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQslnm3gyierhebUYTCyOQAejFHoDAfBgNVHSMEGDAWgBTJaut1rLtfISM1
6m3MsMNvNn20+DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lXcnJkYXk3WHlFak5lcHR6TEREYnpaOXRQZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGUvNjlhNTFkLTkyYTEtNDhhZC1iN2U3LWM0Yzg3OWM2NzI0Yy8x
L0xKWjV0NE1vbnE0WG0xR0V3c2prQUhveFI2QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUv
NjlhNTFkLTkyYTEtNDhhZC1iN2U3LWM0Yzg3OWM2NzI0Yy8xL3lXcnJkYXk3WHlF
ak5lcHR6TEREYnpaOXRQZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngHEDANBgkqhkiG9w0BAQsF
AAOCAQEADvFM/VGdFhgcqv0fTcEYZveVTaVhhPeDktYmEmtgdojiyFmlvwq16KXz
5FjQbZCyaWIdKR7CmcwI0daYZS5kG/6WDdI3LHeiVEcsOrjyElRPRxPoj/ZgjRX2
Ah8OEt8xh/hXOqXUSJeH/5N52HXClJAfAUSOhhEgBLSlkWS69ANrVd5fJcb9QvbB
PPVS+FI/36T1HTB3o1qamDYEmm5/Jej5mRLI630FTVgFSwu3LvwhMqlBATIqzLsQ
wa/2CV8UxBy6XKTOa5LBe4oj3t/FWyz5Hp9PMZUA9svkNeV4TSKuFccznH4hznnv
73ssR9uGB1PNeVOnSpkobYmyjWJbCw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:07 2025 by rpki-client