Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/2RAocjMUuMQXHSsPF4oKC7yJGk4.roa
File: 2RAocjMUuMQXHSsPF4oKC7yJGk4.roa (raw, json)
Hash identifier: f49lmvyacS1+8HsY8VTorW4VAYYTkbIMrd3yRfdDY3E=
Subject key identifier: D9:10:28:72:33:14:B8:C4:17:1D:2B:0F:17:8A:0A:0B:BC:89:1A:4E
Certificate issuer: /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial: 27F4EDE1
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/2RAocjMUuMQXHSsPF4oKC7yJGk4.roa
Signing time: Sat 01 Jan 2022 13:00:29 +0000
ROA not before: Sat 01 Jan 2022 13:00:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208157
IP address blocks: 2a00:7180:8000::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670363105 (0x27f4ede1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Validity
Not Before: Jan 1 13:00:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d91028723314b8c4171d2b0f178a0a0bbc891a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:65:d2:84:2c:79:8e:09:27:3d:fc:a6:59:11:
2a:0f:d3:04:9e:30:92:0b:e9:51:b4:dc:61:e6:f8:
ee:10:68:12:e8:0a:04:9f:94:87:b2:1f:45:01:45:
16:3a:86:0b:4e:15:9b:8c:23:b3:a3:62:a4:fe:7d:
43:62:90:fc:d6:e4:e0:08:e1:75:9d:ac:ab:5f:ee:
0b:9a:66:b5:ee:47:f0:74:5f:61:ab:6e:c1:67:1e:
f0:dd:67:69:29:54:e3:74:00:a7:c3:07:35:fb:af:
3c:ca:fb:27:68:79:6b:0a:07:0c:84:41:56:e0:eb:
92:55:70:8d:2a:0f:8d:b4:76:32:0b:5c:0d:b7:f9:
e2:22:4b:eb:0d:98:5b:02:68:35:66:2d:04:bc:67:
70:81:1e:64:f4:c8:c4:9e:88:62:9f:9f:38:91:c1:
ac:4d:9e:44:38:dc:60:45:ba:6b:d3:26:96:32:2b:
55:47:21:93:c9:33:bb:35:74:6d:c9:11:bb:ba:b0:
70:5e:ce:b0:74:e2:7b:9b:e0:37:73:6d:19:ae:2a:
a5:f8:c7:9d:73:ba:81:e9:73:33:a3:a4:53:1b:74:
2e:6f:d7:b6:13:d1:d6:0e:26:3e:1c:a6:24:1d:3e:
fd:58:6e:b5:9f:bd:02:9d:32:49:34:1b:d6:a5:e9:
b7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:10:28:72:33:14:B8:C4:17:1D:2B:0F:17:8A:0A:0B:BC:89:1A:4E
X509v3 Authority Key Identifier:
keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/2RAocjMUuMQXHSsPF4oKC7yJGk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8000::/46
Signature Algorithm: sha256WithRSAEncryption
3c:e1:15:ce:f2:e0:58:3b:54:ff:ae:c2:a7:c3:97:52:bb:d1:
38:49:0d:f0:21:cf:43:d7:5f:c9:d5:cd:66:30:f5:c7:62:9f:
42:7e:c2:29:77:73:ee:79:79:9d:45:c0:b6:f9:52:6c:d3:55:
fd:0f:da:d7:a4:cf:42:9d:f0:6d:c8:09:6e:81:84:4a:98:aa:
d6:72:96:c7:c4:2d:a1:81:f8:5e:62:8a:92:46:1e:50:4d:a3:
82:88:14:d6:b7:7c:c7:36:58:3b:79:de:94:f8:ea:16:03:aa:
cc:ea:9b:6c:df:1b:95:5a:cc:4c:49:ac:ba:9f:3b:1b:4a:0a:
1f:6f:c1:a8:13:82:fe:ae:1f:c9:3a:d5:36:32:a0:7d:18:4c:
bb:7b:ad:ad:49:a8:73:e6:3f:c7:ab:4a:76:e1:c1:cc:d4:e1:
5b:6f:08:72:c9:dd:04:18:0a:01:95:08:6d:ca:2d:82:01:ef:
3d:d1:7d:46:e8:b3:c1:16:18:ea:56:48:1f:00:53:1d:b4:99:
07:f2:13:10:cf:37:9a:a4:ff:12:b6:16:0d:d5:16:a3:37:f1:
be:5a:55:cd:61:11:9e:53:1f:a4:c6:ba:fb:d2:68:a1:68:21:
df:aa:a8:62:9b:25:83:f3:22:50:11:38:a2:2c:7e:7f:3c:2e:
67:ca:e3:9a
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEJ/Tt4TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTI5NTIzN2FiNDRiY2UzNWRkZmMyNjI3ZmQ0OWE4YzQ0NjEyNDQxMB4XDTIyMDEw
MTEzMDAyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDkxMDI4NzIzMzE0
YjhjNDE3MWQyYjBmMTc4YTBhMGJiYzg5MWE0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANdl0oQseY4JJz38plkRKg/TBJ4wkgvpUbTcYeb47hBoEugK
BJ+Uh7IfRQFFFjqGC04Vm4wjs6NipP59Q2KQ/Nbk4AjhdZ2sq1/uC5pmte5H8HRf
YatuwWce8N1naSlU43QAp8MHNfuvPMr7J2h5awoHDIRBVuDrklVwjSoPjbR2Mgtc
Dbf54iJL6w2YWwJoNWYtBLxncIEeZPTIxJ6IYp+fOJHBrE2eRDjcYEW6a9MmljIr
VUchk8kzuzV0bckRu7qwcF7OsHTie5vgN3NtGa4qpfjHnXO6gelzM6OkUxt0Lm/X
thPR1g4mPhymJB0+/VhutZ+9Ap0ySTQb1qXpt3MCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTZEChyMxS4xBcdKw8XigoLvIkaTjAfBgNVHSMEGDAWgBSlKVI3q0S8413f
wmJ/1JqMRGEkQTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BTbFNONnRFdk9OZDM4SmlmOVNhakVSaEpFRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmIvMDk1MWQ3LTNmNjctNGJkNC05MDRkLWM5NGZlYWE2Y2I3OS8x
LzJSQW9jak1VdU1RWEhTc1BGNG9LQzd5SkdrNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIv
MDk1MWQ3LTNmNjctNGJkNC05MDRkLWM5NGZlYWE2Y2I3OS8xL3BTbFNONnRFdk9O
ZDM4SmlmOVNhakVSaEpFRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioAcYCAADANBgkqhkiG9w0BAQsF
AAOCAQEAPOEVzvLgWDtU/67Cp8OXUrvROEkN8CHPQ9dfydXNZjD1x2KfQn7CKXdz
7nl5nUXAtvlSbNNV/Q/a16TPQp3wbcgJboGESpiq1nKWx8QtoYH4XmKKkkYeUE2j
gogU1rd8xzZYO3nelPjqFgOqzOqbbN8blVrMTEmsup87G0oKH2/BqBOC/q4fyTrV
NjKgfRhMu3utrUmoc+Y/x6tKduHBzNThW28IcsndBBgKAZUIbcotggHvPdF9Ruiz
wRYY6lZIHwBTHbSZB/ITEM83mqT/ErYWDdUWozfxvlpVzWERnlMfpMa6+9JooWgh
36qoYpslg/MiUBE4oix+fzwuZ8rjmg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:07 2025 by rpki-client