Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/658206-b52b-45f0-ba5d-53e5a99b6708/1/2uBz4ss5leKNPklmKzqt1TYEq28.roa
File: 2uBz4ss5leKNPklmKzqt1TYEq28.roa (raw, json)
Hash identifier: zFRZCvIvsANbdTQPpVGqInBgJQeElyMafEqIOBRAn/w=
Subject key identifier: DA:E0:73:E2:CB:39:95:E2:8D:3E:49:66:2B:3A:AD:D5:36:04:AB:6F
Certificate issuer: /CN=0a7a1277ef1d56415498c712a943f53006b6cd17
Certificate serial: 0A0BBDCB
Authority key identifier: 0A:7A:12:77:EF:1D:56:41:54:98:C7:12:A9:43:F5:30:06:B6:CD:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnoSd-8dVkFUmMcSqUP1MAa2zRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/658206-b52b-45f0-ba5d-53e5a99b6708/1/2uBz4ss5leKNPklmKzqt1TYEq28.roa
Signing time: Sat 01 Jan 2022 08:02:36 +0000
ROA not before: Sat 01 Jan 2022 08:02:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49238
IP address blocks: 2a06:aa87:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168541643 (0xa0bbdcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7a1277ef1d56415498c712a943f53006b6cd17
Validity
Not Before: Jan 1 08:02:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dae073e2cb3995e28d3e49662b3aadd53604ab6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:bb:2a:e7:9f:6e:d1:cd:69:34:e7:f1:7c:
79:1d:f2:68:33:86:d1:14:2f:8a:52:f2:cc:c3:76:
48:11:2d:8f:92:b6:09:f7:46:1e:08:d3:50:11:64:
a7:26:fe:cc:32:ef:ab:94:e7:b3:fb:70:78:00:e2:
0d:5a:44:23:9d:ea:47:c9:82:2c:2d:8e:29:81:9e:
e6:50:71:3f:22:be:b0:42:38:c9:97:a4:55:79:60:
a1:f4:37:39:99:51:f4:6e:7e:63:c5:45:d1:95:81:
21:8e:74:7b:c7:08:80:83:cd:7d:59:b2:12:e4:d4:
e4:42:d2:64:18:c6:46:2a:8a:62:15:b9:a5:fd:2d:
8e:a9:f1:b2:19:ee:a1:1f:8e:67:f1:23:eb:2e:1f:
4a:18:c7:d9:72:60:8d:14:2d:db:9d:6f:f8:64:b5:
c7:32:02:eb:df:9b:eb:05:4f:7e:9f:2b:8b:62:6c:
a7:34:41:2c:c9:ca:13:db:5a:3d:9c:2c:14:38:02:
46:46:9f:3e:17:12:ae:17:6e:ea:b3:96:94:19:dc:
dd:fd:14:ae:bb:a7:a5:35:a5:44:b0:9b:38:f0:b1:
89:f8:2c:2c:e8:ce:a9:51:c6:d6:5f:1b:3b:31:e6:
2a:e6:2e:0b:81:52:fe:19:06:8f:f2:9b:4f:02:3d:
4d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E0:73:E2:CB:39:95:E2:8D:3E:49:66:2B:3A:AD:D5:36:04:AB:6F
X509v3 Authority Key Identifier:
keyid:0A:7A:12:77:EF:1D:56:41:54:98:C7:12:A9:43:F5:30:06:B6:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnoSd-8dVkFUmMcSqUP1MAa2zRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/658206-b52b-45f0-ba5d-53e5a99b6708/1/2uBz4ss5leKNPklmKzqt1TYEq28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/658206-b52b-45f0-ba5d-53e5a99b6708/1/CnoSd-8dVkFUmMcSqUP1MAa2zRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:aa87:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
99:75:15:e0:a3:09:ca:90:fe:4e:ce:58:9c:52:dc:b4:67:7f:
09:f5:0a:3a:f9:f2:73:b6:09:4b:f2:44:01:25:8b:3a:26:b8:
03:38:42:60:73:49:1d:5a:64:05:50:d5:25:cf:1e:95:8e:d1:
ca:82:7d:8d:cf:5f:8c:47:34:13:7f:aa:27:8a:c1:9f:9c:6a:
4f:c5:09:cd:53:ff:9e:b7:71:e6:7e:9f:ac:55:c4:0c:e0:25:
93:e6:ef:3c:da:72:67:fe:aa:89:57:23:0e:37:91:7f:ef:74:
94:0f:d5:bc:5d:34:63:10:c7:3f:ba:7f:f0:4b:1c:c5:ce:bf:
ff:92:1d:33:50:80:c8:40:42:c4:5c:37:4b:9b:59:95:34:a2:
43:d0:7e:a1:5d:cb:52:b2:e4:ad:62:a2:c4:f3:be:b6:dd:6f:
c1:63:d3:ab:01:a9:e0:40:5e:4c:14:3c:b1:c0:f7:05:58:2f:
91:d4:60:c8:f5:00:04:7a:38:28:5b:76:59:b1:9f:ef:41:a7:
40:95:01:6c:50:4c:6d:48:a2:06:20:a6:3e:f8:64:89:a0:94:
9b:27:c3:e6:94:72:ba:cb:f0:74:dc:83:9c:40:3f:9f:5b:28:
34:de:8e:ed:a4:79:bf:bf:ab:e4:c9:42:7e:a7:81:26:f7:eb:
c4:15:6d:d5
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECgu9yzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YTdhMTI3N2VmMWQ1NjQxNTQ5OGM3MTJhOTQzZjUzMDA2YjZjZDE3MB4XDTIyMDEw
MTA4MDIzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGFlMDczZTJjYjM5
OTVlMjhkM2U0OTY2MmIzYWFkZDUzNjA0YWI2ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJJluyrnn27RzWk05/F8eR3yaDOG0RQvilLyzMN2SBEtj5K2
CfdGHgjTUBFkpyb+zDLvq5Tns/tweADiDVpEI53qR8mCLC2OKYGe5lBxPyK+sEI4
yZekVXlgofQ3OZlR9G5+Y8VF0ZWBIY50e8cIgIPNfVmyEuTU5ELSZBjGRiqKYhW5
pf0tjqnxshnuoR+OZ/Ej6y4fShjH2XJgjRQt251v+GS1xzIC69+b6wVPfp8ri2Js
pzRBLMnKE9taPZwsFDgCRkafPhcSrhdu6rOWlBnc3f0UrrunpTWlRLCbOPCxifgs
LOjOqVHG1l8bOzHmKuYuC4FS/hkGj/KbTwI9TecCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTa4HPiyzmV4o0+SWYrOq3VNgSrbzAfBgNVHSMEGDAWgBQKehJ37x1WQVSY
xxKpQ/UwBrbNFzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Nub1NkLThkVmtGVW1NY1NxVVAxTUFhMnpSYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmYvNjU4MjA2LWI1MmItNDVmMC1iYTVkLTUzZTVhOTliNjcwOC8x
LzJ1Qno0c3M1bGVLTlBrbG1LenF0MVRZRXEyOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYv
NjU4MjA2LWI1MmItNDVmMC1iYTVkLTUzZTVhOTliNjcwOC8xL0Nub1NkLThkVmtG
VW1NY1NxVVAxTUFhMnpSYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoGqof//zANBgkqhkiG9w0BAQsF
AAOCAQEAmXUV4KMJypD+Ts5YnFLctGd/CfUKOvnyc7YJS/JEASWLOia4AzhCYHNJ
HVpkBVDVJc8elY7RyoJ9jc9fjEc0E3+qJ4rBn5xqT8UJzVP/nrdx5n6frFXEDOAl
k+bvPNpyZ/6qiVcjDjeRf+90lA/VvF00YxDHP7p/8Escxc6//5IdM1CAyEBCxFw3
S5tZlTSiQ9B+oV3LUrLkrWKixPO+tt1vwWPTqwGp4EBeTBQ8scD3BVgvkdRgyPUA
BHo4KFt2WbGf70GnQJUBbFBMbUiiBiCmPvhkiaCUmyfD5pRyusvwdNyDnEA/n1so
NN6O7aR5v7+r5MlCfqeBJvfrxBVt1Q==
-----END CERTIFICATE-----
Generated at Wed Mar 12 13:52:07 2025 by rpki-client