Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/lCxa72Agg2R6jEYDfAzArypdjys.roa
File: lCxa72Agg2R6jEYDfAzArypdjys.roa (raw, json)
Hash identifier: tlidECktbdVdXC6cXw2e5+/mXMxfwHCw0C91TNqjlOI=
Subject key identifier: 94:2C:5A:EF:60:20:83:64:7A:8C:46:03:7C:0C:C0:AF:2A:5D:8F:2B
Certificate issuer: /CN=dc980bb7e0718e3ce1f0a0ae268afe79af774f2f
Certificate serial: 018486AC3C8F67273E1D03398B3EF68CEAFB
Authority key identifier: DC:98:0B:B7:E0:71:8E:3C:E1:F0:A0:AE:26:8A:FE:79:AF:77:4F:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JgLt-Bxjjzh8KCuJor-ea93Ty8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/lCxa72Agg2R6jEYDfAzArypdjys.roa
Signing time: Thu 17 Nov 2022 17:39:05 +0000
ROA not before: Thu 17 Nov 2022 17:39:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:b140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:ac:3c:8f:67:27:3e:1d:03:39:8b:3e:f6:8c:ea:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc980bb7e0718e3ce1f0a0ae268afe79af774f2f
Validity
Not Before: Nov 17 17:39:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=942c5aef602083647a8c46037c0cc0af2a5d8f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3e:52:3d:c7:dc:86:d4:74:73:74:c7:32:63:
2b:32:cb:ee:41:07:13:9d:3f:94:8f:3f:9d:ae:15:
73:bc:47:74:7e:59:b7:3c:1d:65:40:bb:12:be:5a:
56:a6:3a:f9:b3:49:0b:7b:c1:33:37:04:5d:e4:d9:
a3:23:7f:a4:7a:46:28:36:a9:c0:b6:72:3a:00:85:
5e:a5:7e:f3:b3:b6:30:56:5e:0c:13:7f:83:26:e4:
21:03:a0:ca:58:8a:e2:a8:c4:3d:a2:f1:85:dd:87:
a2:45:a5:4a:0c:50:c6:b7:9a:a8:77:15:4b:64:0d:
42:40:ac:8b:4c:cd:10:86:d4:51:a9:3c:e3:87:c5:
49:30:f9:01:b6:ba:ee:35:73:47:64:68:97:06:22:
ef:3d:05:e2:cf:32:76:7b:c1:d1:b1:19:d4:53:ee:
c4:1a:3a:f7:be:f5:3e:86:b7:18:83:24:1b:d8:bd:
1f:fc:a7:b5:26:f3:25:aa:b6:19:4f:75:32:48:2a:
a4:ff:1f:d4:44:a3:86:1e:ba:a8:82:22:69:5a:eb:
e7:d0:8b:82:ab:ef:73:71:10:7e:35:62:2e:ff:37:
07:ad:06:41:d2:12:21:7d:c3:11:66:6f:55:69:4f:
c9:bb:e2:e5:09:7b:bc:e4:52:9d:83:d7:c9:ce:97:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2C:5A:EF:60:20:83:64:7A:8C:46:03:7C:0C:C0:AF:2A:5D:8F:2B
X509v3 Authority Key Identifier:
keyid:DC:98:0B:B7:E0:71:8E:3C:E1:F0:A0:AE:26:8A:FE:79:AF:77:4F:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JgLt-Bxjjzh8KCuJor-ea93Ty8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/lCxa72Agg2R6jEYDfAzArypdjys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/3JgLt-Bxjjzh8KCuJor-ea93Ty8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:b140::/29
Signature Algorithm: sha256WithRSAEncryption
3e:ba:33:c5:a6:01:ba:70:2a:a8:bd:68:e3:78:2d:e6:7a:b8:
11:bd:42:f2:09:48:b2:f8:9f:a1:ee:67:0a:db:a8:13:d2:b5:
eb:26:23:bf:6c:1e:6e:4d:4f:21:79:80:e3:8a:b7:f4:42:23:
52:70:8e:04:cb:f0:ed:5a:13:2e:c6:78:a6:fd:14:92:56:55:
1e:22:4e:24:34:e9:4a:00:b0:73:09:62:4f:3a:5f:5c:42:82:
da:6c:11:2d:89:50:87:c0:35:54:45:b9:cd:8f:18:51:8c:7e:
5d:f0:0b:d0:21:71:57:13:c8:f9:e2:1c:9f:e6:d3:63:92:8d:
87:a4:bf:3d:a4:8d:7b:83:59:9c:48:11:4a:8e:ec:ab:0c:e7:
f9:0a:cb:71:6a:54:a4:d6:97:d1:de:be:3d:13:5a:fd:64:11:
02:cb:3b:15:21:c3:a2:fa:cc:9e:51:56:1d:98:d4:ed:6c:9c:
5c:ec:0b:c4:8c:6a:2d:0e:df:50:df:d8:38:7b:ff:ac:fe:ad:
a0:8b:96:3e:b6:cc:99:fd:03:d2:57:86:bd:a4:6b:8c:9d:bc:
a4:55:48:6b:9f:bf:2a:9f:0c:a4:60:64:21:6c:d9:99:ea:ae:
65:09:56:b0:59:3e:06:c2:2e:26:e5:49:86:7f:66:88:b5:e3:
ae:72:2e:92
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYSGrDyPZyc+HQM5iz72jOr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTgwYmI3ZTA3MThlM2NlMWYwYTBhZTI2OGFmZTc5YWY3
NzRmMmYwHhcNMjIxMTE3MTczOTA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDJjNWFlZjYwMjA4MzY0N2E4YzQ2MDM3YzBjYzBhZjJhNWQ4ZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz5SPcfchtR0c3THMmMrMsvuQQcT
nT+Ujz+drhVzvEd0flm3PB1lQLsSvlpWpjr5s0kLe8EzNwRd5NmjI3+kekYoNqnA
tnI6AIVepX7zs7YwVl4ME3+DJuQhA6DKWIriqMQ9ovGF3YeiRaVKDFDGt5qodxVL
ZA1CQKyLTM0QhtRRqTzjh8VJMPkBtrruNXNHZGiXBiLvPQXizzJ2e8HRsRnUU+7E
Gjr3vvU+hrcYgyQb2L0f/Ke1JvMlqrYZT3UySCqk/x/URKOGHrqogiJpWuvn0IuC
q+9zcRB+NWIu/zcHrQZB0hIhfcMRZm9VaU/Ju+LlCXu85FKdg9fJzpfeLQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJQsWu9gIINkeoxGA3wMwK8qXY8rMB8GA1UdIwQY
MBaAFNyYC7fgcY484fCgriaK/nmvd08vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pnTHQtQnhqanpoOEtDdUpvci1lYTkzVHk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9iNWY3OTgtZjUxOC00Zjk1LWFkNWUt
OWRkNTVlMWZmODkyLzEvbEN4YTcyQWdnMlI2akVZRGZBekFyeXBkanlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9iNWY3OTgtZjUxOC00Zjk1LWFkNWUtOWRkNTVlMWZmODky
LzEvM0pnTHQtQnhqanpoOEtDdUpvci1lYTkzVHk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhGxQDAN
BgkqhkiG9w0BAQsFAAOCAQEAProzxaYBunAqqL1o43gt5nq4Eb1C8glIsvifoe5n
CtuoE9K16yYjv2webk1PIXmA44q39EIjUnCOBMvw7VoTLsZ4pv0UklZVHiJOJDTp
SgCwcwliTzpfXEKC2mwRLYlQh8A1VEW5zY8YUYx+XfAL0CFxVxPI+eIcn+bTY5KN
h6S/PaSNe4NZnEgRSo7sqwzn+QrLcWpUpNaX0d6+PRNa/WQRAss7FSHDovrMnlFW
HZjU7WycXOwLxIxqLQ7fUN/YOHv/rP6toIuWPrbMmf0D0leGvaRrjJ28pFVIa5+/
Kp8MpGBkIWzZmequZQlWsFk+BsIuJuVJhn9miLXjrnIukg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:23 2024 by rpki-client on console-ams.rpki-client.org