Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/uBFD0rcLbE0goidrDHf9TCYPL1Q.roa
File: uBFD0rcLbE0goidrDHf9TCYPL1Q.roa (raw, json)
Hash identifier: +HGXLejX7+5rHFGW+FYlAVorS706FYSd4MdU0AlRWME=
Subject key identifier: B8:11:43:D2:B7:0B:6C:4D:20:A2:27:6B:0C:77:FD:4C:26:0F:2F:54
Certificate issuer: /CN=b760d60d705eeedf3f54c02fd11e7c18de904d2f
Certificate serial: 703A9E
Authority key identifier: B7:60:D6:0D:70:5E:EE:DF:3F:54:C0:2F:D1:1E:7C:18:DE:90:4D:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DWDXBe7t8_VMAv0R58GN6QTS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/uBFD0rcLbE0goidrDHf9TCYPL1Q.roa
Signing time: Sat 01 Jan 2022 02:56:46 +0000
ROA not before: Sat 01 Jan 2022 02:56:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204790
IP address blocks: 2a12:280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7355038 (0x703a9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760d60d705eeedf3f54c02fd11e7c18de904d2f
Validity
Not Before: Jan 1 02:56:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b81143d2b70b6c4d20a2276b0c77fd4c260f2f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9e:fa:77:da:2a:da:53:f8:bc:d8:67:7e:9d:
38:a4:ed:8c:b8:b4:43:b9:b1:58:d4:3a:36:56:a4:
93:3f:a6:8c:3d:47:90:88:d3:a4:c2:1c:74:c4:38:
07:90:58:d7:86:f5:9c:cb:c6:f3:da:ad:d7:49:78:
f3:91:bb:f1:33:6a:4e:1e:fc:1b:f2:5f:d8:fb:3f:
3b:6d:80:5a:14:f2:fc:18:15:1f:ad:7a:75:6a:67:
ad:e1:d5:3e:75:5f:07:77:55:19:1c:88:8a:e3:45:
ff:bf:41:22:e2:25:cb:0a:b3:08:fb:54:9b:b9:14:
68:25:9f:ea:dc:ef:fc:4a:80:eb:95:d7:99:85:e4:
7b:cd:d5:49:e5:81:02:48:11:ea:66:17:2f:44:5b:
4f:bb:8d:e4:1d:6c:4e:78:a8:ab:9e:59:1c:e5:18:
73:ee:e0:26:a8:27:27:6a:c5:7e:cd:ae:1a:6b:72:
89:9b:80:82:e6:23:27:5e:ea:d9:7d:a8:85:d8:88:
d7:d6:fd:19:15:ec:83:99:cc:8b:da:a1:d5:87:bf:
0d:dd:35:ba:93:6d:08:b0:dc:6b:46:22:5b:93:4d:
28:b7:90:d3:59:4c:0d:43:46:ce:73:b4:60:d1:c1:
5e:75:99:0a:45:39:32:25:e4:5c:8b:e0:5d:95:3a:
f5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:11:43:D2:B7:0B:6C:4D:20:A2:27:6B:0C:77:FD:4C:26:0F:2F:54
X509v3 Authority Key Identifier:
keyid:B7:60:D6:0D:70:5E:EE:DF:3F:54:C0:2F:D1:1E:7C:18:DE:90:4D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DWDXBe7t8_VMAv0R58GN6QTS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/uBFD0rcLbE0goidrDHf9TCYPL1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/t2DWDXBe7t8_VMAv0R58GN6QTS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:280::/29
Signature Algorithm: sha256WithRSAEncryption
03:eb:69:f7:0a:f2:cf:86:c7:d8:39:a7:91:b8:8f:ef:10:1c:
9a:80:da:21:c6:44:fe:d9:a7:69:1e:da:35:2f:1f:95:8a:12:
84:d5:c5:ad:98:b6:fe:ed:96:af:4a:4c:cc:03:8f:ed:11:03:
b4:e5:03:71:4d:cd:96:ae:27:57:63:33:18:e1:5a:af:48:60:
4d:f2:79:04:fb:0d:07:9f:65:67:ab:7d:59:7b:8e:b9:87:11:
5b:15:85:55:cd:99:c5:05:4b:8e:9c:97:4d:b0:ce:e1:38:88:
6c:eb:ca:1f:8e:87:9d:3f:ba:4f:5c:8c:d6:af:4b:7e:d9:8e:
50:d5:6c:c8:8f:97:6e:a3:40:6c:c6:c2:b6:81:af:95:65:38:
32:7f:27:ec:3d:99:33:6d:46:b4:a7:0b:d5:3f:7c:79:e8:19:
c4:cb:f0:7a:38:0a:01:33:9b:cf:a4:84:0e:ce:a7:06:4c:6e:
0e:72:04:6b:75:d1:4f:38:5c:33:34:f5:fa:29:93:34:02:05:
40:ea:08:8c:77:2c:bf:14:bb:bb:ed:6a:a7:e5:5f:6d:4b:4e:
7c:2b:d1:f6:97:98:30:39:6a:0b:53:1e:2a:b7:8b:9e:99:9e:
06:58:14:01:2d:a5:8d:0b:93:c5:82:5c:0b:7f:c8:c1:ee:56:
b7:9b:fc:32
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIDcDqeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI3
NjBkNjBkNzA1ZWVlZGYzZjU0YzAyZmQxMWU3YzE4ZGU5MDRkMmYwHhcNMjIwMTAx
MDI1NjQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiODExNDNkMmI3MGI2
YzRkMjBhMjI3NmIwYzc3ZmQ0YzI2MGYyZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlp76d9oq2lP4vNhnfp04pO2MuLRDubFY1Do2VqSTP6aMPUeQ
iNOkwhx0xDgHkFjXhvWcy8bz2q3XSXjzkbvxM2pOHvwb8l/Y+z87bYBaFPL8GBUf
rXp1amet4dU+dV8Hd1UZHIiK40X/v0Ei4iXLCrMI+1SbuRRoJZ/q3O/8SoDrldeZ
heR7zdVJ5YECSBHqZhcvRFtPu43kHWxOeKirnlkc5Rhz7uAmqCcnasV+za4aa3KJ
m4CC5iMnXurZfaiF2IjX1v0ZFeyDmcyL2qHVh78N3TW6k20IsNxrRiJbk00ot5DT
WUwNQ0bOc7Rg0cFedZkKRTkyJeRci+BdlTr1YQIDAQABo4ICCjCCAgYwHQYDVR0O
BBYEFLgRQ9K3C2xNIKInawx3/UwmDy9UMB8GA1UdIwQYMBaAFLdg1g1wXu7fP1TA
L9EefBjekE0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
dDJEV0RYQmU3dDhfVk1BdjBSNThHTjZRVFM4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jNi81ZGExZGMtZjRiNS00NTI4LThjYWYtNDU0ZjQ5OWUzMTA3LzEv
dUJGRDByY0xiRTBnb2lkckRIZjlUQ1lQTDFRLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81
ZGExZGMtZjRiNS00NTI4LThjYWYtNDU0ZjQ5OWUzMTA3LzEvdDJEV0RYQmU3dDhf
Vk1BdjBSNThHTjZRVFM4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAG
CCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhICgDANBgkqhkiG9w0BAQsFAAOC
AQEAA+tp9wryz4bH2DmnkbiP7xAcmoDaIcZE/tmnaR7aNS8flYoShNXFrZi2/u2W
r0pMzAOP7REDtOUDcU3Nlq4nV2MzGOFar0hgTfJ5BPsNB59lZ6t9WXuOuYcRWxWF
Vc2ZxQVLjpyXTbDO4TiIbOvKH46HnT+6T1yM1q9LftmOUNVsyI+XbqNAbMbCtoGv
lWU4Mn8n7D2ZM21GtKcL1T98eegZxMvwejgKATObz6SEDs6nBkxuDnIEa3XRTzhc
MzT1+imTNAIFQOoIjHcsvxS7u+1qp+VfbUtOfCvR9peYMDlqC1MeKreLnpmeBlgU
AS2ljQuTxYJcC3/Iwe5Wt5v8Mg==
-----END CERTIFICATE-----
Generated at Mon May 12 15:47:03 2025 by rpki-client