Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LZjcauWPQFNs9jXRh-xwrxtCMQI.roa
File: LZjcauWPQFNs9jXRh-xwrxtCMQI.roa (raw, json)
Hash identifier: otZH35zkvWImg1cP0xWg/gcbWrOgOBWbV/dT9Y8W7x4=
Subject key identifier: 2D:98:DC:6A:E5:8F:40:53:6C:F6:35:D1:87:EC:70:AF:1B:42:31:02
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019184B94F8B7933470E7D7E3AE68325AB06
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LZjcauWPQFNs9jXRh-xwrxtCMQI.roa
Signing time: Sat 24 Aug 2024 14:10:22 +0000
ROA not before: Sat 24 Aug 2024 14:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:84:b9:4f:8b:79:33:47:0e:7d:7e:3a:e6:83:25:ab:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 24 14:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d98dc6ae58f40536cf635d187ec70af1b423102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:52:5e:35:38:f3:6d:29:5f:10:3e:43:36:
33:fe:91:43:5a:8a:75:82:59:40:ff:4e:51:d8:5d:
21:2a:0d:f3:d6:01:73:a9:ca:60:5c:8b:7c:c7:d8:
90:1d:03:2c:e4:12:5c:5d:fa:ed:d0:88:4c:67:8e:
e8:77:f7:8f:45:4e:cf:0f:ba:9c:5d:c9:d5:ca:7b:
49:c1:ef:55:a3:76:2b:b1:fa:fb:b7:3e:2f:f9:81:
07:30:cc:7e:97:60:cd:11:68:c2:9d:a4:f2:3c:8d:
aa:ab:9f:0a:20:e6:25:03:71:fd:6f:0e:d0:eb:00:
2b:37:f5:b6:e2:6e:38:9a:2f:57:00:a4:bf:77:e6:
73:6c:9e:e7:7b:45:23:95:6c:03:d3:b4:1e:66:73:
59:c7:38:62:f3:df:1a:18:82:b2:22:59:5b:54:8d:
f2:84:16:b6:b8:c3:97:b1:05:de:a5:57:c1:ee:aa:
e9:e8:68:50:78:97:26:7f:9c:15:85:8c:e8:96:d4:
b1:c0:fc:68:29:ec:0e:71:3e:85:3b:3e:c1:d1:23:
4c:1c:8c:01:eb:eb:1c:e0:b6:46:bf:40:b2:e6:43:
76:f5:ac:50:e1:29:47:ce:c3:f7:54:22:f7:45:b0:
fc:a6:3d:0a:55:62:ef:e6:5a:ca:5d:01:58:c1:5a:
ac:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:98:DC:6A:E5:8F:40:53:6C:F6:35:D1:87:EC:70:AF:1B:42:31:02
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LZjcauWPQFNs9jXRh-xwrxtCMQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
3e:0d:88:7f:90:df:66:ca:57:f9:90:62:99:7a:a4:ba:5c:1c:
ae:4b:58:9d:df:70:14:1a:f4:00:76:6a:4e:d4:ce:c6:c3:60:
fc:7b:86:b6:1c:69:05:53:d6:e6:47:5d:73:44:c0:7d:3c:38:
ac:24:0f:5d:a4:3a:28:21:c1:cf:88:01:9b:a0:c9:96:21:8a:
ac:82:1e:6d:90:11:4f:e2:b6:73:c3:30:8f:c5:ea:b8:b2:c9:
78:c1:98:51:15:00:b6:e9:50:fe:f4:ee:50:58:2f:ea:1c:4a:
08:df:19:e7:4e:02:9e:23:be:87:03:2e:0c:93:c6:df:91:5d:
d7:16:bd:d9:b7:eb:e8:61:8e:96:f0:99:96:1e:32:b3:96:e0:
2b:3f:db:a4:ea:3b:0c:cf:15:c2:27:3c:81:9d:af:fe:33:87:
85:88:3b:ff:1b:c8:06:ee:8d:3c:db:c8:3e:ac:26:1b:76:6b:
5a:d0:96:cd:2d:a6:21:c1:0e:7e:0d:f3:46:66:ad:0b:e3:ce:
4f:70:27:09:18:d4:d6:13:1c:d1:dd:a3:4e:c6:70:50:94:3a:
b8:cf:4d:d5:06:8a:b4:89:d0:da:b2:3f:c7:19:f7:81:47:bb:
3b:e0:16:c8:f5:87:0c:7b:67:59:3b:c6:c6:19:3d:92:2a:5e:
d9:45:e5:c6
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZGEuU+LeTNHDn1+OuaDJasGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODI0MTQxMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDk4ZGM2YWU1OGY0MDUzNmNmNjM1ZDE4N2VjNzBhZjFiNDIzMTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvppSXjU4820pXxA+QzYz/pFDWop1
gllA/05R2F0hKg3z1gFzqcpgXIt8x9iQHQMs5BJcXfrt0IhMZ47od/ePRU7PD7qc
XcnVyntJwe9Vo3Yrsfr7tz4v+YEHMMx+l2DNEWjCnaTyPI2qq58KIOYlA3H9bw7Q
6wArN/W24m44mi9XAKS/d+ZzbJ7ne0UjlWwD07QeZnNZxzhi898aGIKyIllbVI3y
hBa2uMOXsQXepVfB7qrp6GhQeJcmf5wVhYzoltSxwPxoKewOcT6FOz7B0SNMHIwB
6+sc4LZGv0Cy5kN29axQ4SlHzsP3VCL3RbD8pj0KVWLv5lrKXQFYwVqstwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFC2Y3Grlj0BTbPY10YfscK8bQjECMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvTFpqY2F1V1BRRk5zOWpYUmgteHdyeHRDTVFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAPg2If5DfZspX+ZBimXqkulwc
rktYnd9wFBr0AHZqTtTOxsNg/HuGthxpBVPW5kddc0TAfTw4rCQPXaQ6KCHBz4gB
m6DJliGKrIIebZART+K2c8Mwj8XquLLJeMGYURUAtulQ/vTuUFgv6hxKCN8Z504C
niO+hwMuDJPG35Fd1xa92bfr6GGOlvCZlh4ys5bgKz/bpOo7DM8Vwic8gZ2v/jOH
hYg7/xvIBu6NPNvIPqwmG3ZrWtCWzS2mIcEOfg3zRmatC+POT3AnCRjU1hMc0d2j
TsZwUJQ6uM9N1QaKtInQ2rI/xxn3gUe7O+AWyPWHDHtnWTvGxhk9kipe2UXlxg==
-----END CERTIFICATE-----
Generated at Sun Aug 25 15:42:47 2024 by rpki-client on console.sobornost.net