Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e203231373338.roa
File: 326131343a3763303a623030623a3a2f34382d3438203d3e203231373338.roa (raw, json)
Hash identifier: COME1A971tzG+J2GpQh+Vfwgru1dryEqdSKCJyc6fvA=
Subject key identifier: 7A:DA:F9:7E:76:DF:B0:7B:87:FD:26:EA:DF:82:CD:54:1C:F2:13:35
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 7F6A4D4B8249D33414C4BB8E3CFD3E35115CF808
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e203231373338.roa
Signing time: Sun 17 Mar 2024 20:46:03 +0000
ROA not before: Sun 17 Mar 2024 20:41:03 +0000
ROA not after: Sun 16 Mar 2025 20:46:03 +0000
asID: 21738
IP address blocks: 2a14:7c0:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:6a:4d:4b:82:49:d3:34:14:c4:bb:8e:3c:fd:3e:35:11:5c:f8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 17 20:41:03 2024 GMT
Not After : Mar 16 20:46:03 2025 GMT
Subject: CN=7ADAF97E76DFB07B87FD26EADF82CD541CF21335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d3:7f:48:1d:80:e8:c8:84:46:46:72:d0:f6:
b5:af:20:b3:6a:9e:83:9c:f4:f0:d3:5c:db:cd:bc:
c4:64:48:9c:cb:c6:68:c0:3c:12:18:b7:69:cc:e3:
fc:c9:0c:da:6c:92:08:26:81:cf:bd:25:e5:bd:b1:
18:8d:a1:46:dc:08:5b:30:4e:45:29:f1:6a:74:f3:
02:7c:61:80:06:43:78:7c:44:72:6a:df:b2:89:41:
42:f4:9c:2c:f5:19:a5:7a:14:0d:cc:d9:ee:3e:fd:
b3:e5:61:16:22:56:33:3c:8c:a8:6d:84:6d:91:2a:
93:d3:a8:2e:a8:8d:8c:62:78:eb:49:fd:d1:64:65:
0f:d2:51:15:29:90:e5:bf:4b:e2:80:b3:8e:14:f5:
26:ec:cb:01:4d:f4:aa:61:e1:72:f8:23:73:d6:14:
37:2c:30:28:ba:5c:6c:6c:37:29:1b:5e:8f:13:74:
6f:8a:e0:30:e8:1f:cc:e9:a8:3d:8a:3e:4c:b9:e2:
59:a8:58:66:7d:d6:ae:a4:46:e7:94:5e:a8:7d:9a:
14:cc:a8:54:ff:4c:cb:ca:9e:db:8f:51:bc:12:55:
a3:8a:b3:68:06:08:db:79:67:2a:84:46:f7:3c:67:
1f:fb:70:67:e5:9c:e8:fb:e7:f5:ed:21:47:80:7c:
8b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DA:F9:7E:76:DF:B0:7B:87:FD:26:EA:DF:82:CD:54:1C:F2:13:35
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e203231373338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
45:dd:29:6a:a1:ec:d8:76:ed:41:84:28:22:ac:8c:47:40:af:
e7:b9:3c:e0:14:82:58:b3:e7:ab:de:9c:06:9a:8d:64:37:a6:
c0:c0:d1:69:75:3d:5c:36:1d:98:92:3d:29:89:0d:c1:67:32:
fd:e6:76:a1:42:ab:86:be:2e:e5:c9:e8:80:69:fa:67:16:85:
b4:f9:0f:50:60:4b:70:1e:61:93:cb:b2:7b:94:48:60:9d:f0:
0c:a3:db:50:12:d5:ab:1b:64:9b:60:06:56:a4:3b:03:ec:72:
31:be:53:66:4c:3c:1c:01:3a:90:b7:3d:83:9f:ba:ce:8b:5b:
8e:33:99:59:6f:47:5b:72:f7:d4:b8:7a:35:52:e6:e9:84:8d:
54:12:34:1e:f1:3b:a5:8e:65:bb:ea:13:8a:56:f8:d4:e8:24:
03:d9:66:13:33:bd:60:98:df:95:24:7a:e2:74:0c:bf:ac:fd:
e9:ae:3a:db:f4:ec:ae:75:86:2a:a1:54:f1:d6:39:5a:f0:7b:
4c:72:fc:38:fb:d7:e6:cf:be:64:19:61:7b:da:08:67:0d:84:
2a:61:a8:52:a8:2a:15:cd:fc:90:47:1a:0a:90:9c:cb:b1:2b:
34:30:d7:b7:7f:8d:48:e9:30:d9:ff:9f:0d:38:e9:d7:e5:a7:
a4:e8:8a:19
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUf2pNS4JJ0zQUxLuOPP0+NRFc+AgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDAzMTcyMDQxMDNaFw0yNTAzMTYyMDQ2MDNaMDMxMTAvBgNV
BAMTKDdBREFGOTdFNzZERkIwN0I4N0ZEMjZFQURGODJDRDU0MUNGMjEzMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi039IHYDoyIRGRnLQ9rWvILNq
noOc9PDTXNvNvMRkSJzLxmjAPBIYt2nM4/zJDNpskggmgc+9JeW9sRiNoUbcCFsw
TkUp8Wp08wJ8YYAGQ3h8RHJq37KJQUL0nCz1GaV6FA3M2e4+/bPlYRYiVjM8jKht
hG2RKpPTqC6ojYxieOtJ/dFkZQ/SURUpkOW/S+KAs44U9SbsywFN9Kph4XL4I3PW
FDcsMCi6XGxsNykbXo8TdG+K4DDoH8zpqD2KPky54lmoWGZ91q6kRueUXqh9mhTM
qFT/TMvKntuPUbwSVaOKs2gGCNt5ZyqERvc8Zx/7cGflnOj75/XtIUeAfIuPAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUetr5fnbfsHuH/Sbq34LNVBzyEzUwHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzMDNh
NjIzMDMwNjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzczMzM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKhQHwLALMA0GCSqGSIb3DQEBCwUAA4IBAQBF3SlqoezYdu1BhCgirIxH
QK/nuTzgFIJYs+er3pwGmo1kN6bAwNFpdT1cNh2Ykj0piQ3BZzL95nahQquGvi7l
yeiAafpnFoW0+Q9QYEtwHmGTy7J7lEhgnfAMo9tQEtWrG2SbYAZWpDsD7HIxvlNm
TDwcATqQtz2Dn7rOi1uOM5lZb0dbcvfUuHo1UubphI1UEjQe8TuljmW76hOKVvjU
6CQD2WYTM71gmN+VJHridAy/rP3prjrb9OyudYYqoVTx1jla8HtMcvw4+9fmz75k
GWF72ghnDYQqYahSqCoVzfyQRxoKkJzLsSs0MNe3f41I6TDZ/58NOOnX5aek6IoZ
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:09:30 2025 by rpki-client