Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a313030303a3a2f34302d3438203d3e203434333534.roa
File: 326131343a3763313a313030303a3a2f34302d3438203d3e203434333534.roa (raw, json)
Hash identifier: LNRYLIsk0DlZN4Dt0ZJGFZ5KPfhhjkh7YoTIfKgRiqs=
Subject key identifier: 04:32:0E:CB:70:F1:05:70:6E:30:56:E7:E4:EA:BC:CF:FA:E2:67:01
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 383A829CE7425C95A3D02575B4FD86806EAA1830
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a313030303a3a2f34302d3438203d3e203434333534.roa
Signing time: Sun 10 Mar 2024 12:49:58 +0000
ROA not before: Sun 10 Mar 2024 12:44:58 +0000
ROA not after: Sun 09 Mar 2025 12:49:58 +0000
asID: 44354
IP address blocks: 2a14:7c1:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:3a:82:9c:e7:42:5c:95:a3:d0:25:75:b4:fd:86:80:6e:aa:18:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 10 12:44:58 2024 GMT
Not After : Mar 9 12:49:58 2025 GMT
Subject: CN=04320ECB70F105706E3056E7E4EABCCFFAE26701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c5:ad:7b:db:de:40:f5:d1:e2:39:74:27:5a:
86:b9:7b:d3:7d:3c:97:71:e1:61:7d:ff:4d:c3:97:
b5:5d:d2:27:d4:99:c9:91:c0:24:4e:67:da:b1:d7:
00:fc:96:42:d4:e7:91:f4:55:9f:2f:bf:46:29:fb:
a6:de:ee:fc:12:a9:f7:b5:e3:8e:88:c7:04:b1:13:
f7:ad:d8:da:7b:94:f3:2f:81:2d:9c:32:03:39:ce:
fe:f1:22:11:8a:1d:f8:b3:a7:be:f4:bb:9c:7b:7d:
c8:03:24:dd:e2:c4:07:ff:2b:64:0f:5d:43:71:7f:
a1:eb:4b:7e:4f:80:2d:37:38:29:68:dc:ba:9f:84:
1c:0d:93:15:1c:67:0c:a4:5f:4f:0d:dd:31:59:19:
b5:10:22:93:44:b9:85:9b:1e:ee:8f:7e:c8:cf:88:
46:61:db:1b:ba:f3:f6:1d:7c:0b:76:7a:e4:2b:1d:
ae:a6:e0:76:bf:b4:fd:ec:a8:7d:32:1e:13:d7:f1:
0f:f0:d6:0e:e2:cd:19:35:4b:ce:73:78:c6:d6:b5:
63:ed:8c:12:48:ec:e2:4c:a2:75:48:55:ad:07:33:
dc:48:d7:f8:e2:1e:e7:b9:f9:ec:70:56:33:31:5a:
64:32:85:0b:90:c4:1a:89:89:03:62:ed:02:9b:dd:
60:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:32:0E:CB:70:F1:05:70:6E:30:56:E7:E4:EA:BC:CF:FA:E2:67:01
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a313030303a3a2f34302d3438203d3e203434333534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c1:1000::/40
Signature Algorithm: sha256WithRSAEncryption
98:8d:2d:25:9a:74:69:b7:70:63:30:13:93:c5:0a:af:b5:7f:
8a:88:c0:5a:b7:62:a8:b5:46:62:20:65:61:2f:2d:6a:e0:68:
09:3d:ee:9c:de:34:ea:6d:76:db:15:00:a6:48:88:ff:3a:c9:
c3:57:63:05:21:9b:8d:80:d2:80:c0:78:9b:23:ec:dc:a0:f0:
5c:0e:d5:bc:a4:20:5a:ca:06:d2:11:c9:3f:ad:a1:cd:bd:43:
fa:ae:7b:4c:4d:7e:e5:41:56:97:83:fa:c5:50:d2:89:4f:44:
bb:90:6e:86:89:70:5a:7f:9e:87:82:3e:65:34:99:b8:59:8f:
e0:8a:4b:73:c4:7c:63:38:ab:64:62:5b:44:9d:7d:17:37:99:
b7:c9:c8:28:4b:39:ad:fa:2e:ab:c7:f3:78:74:bb:bb:1a:01:
6d:c8:71:83:74:cb:5c:b0:aa:a4:f6:e8:b1:59:0b:db:ea:6c:
1c:00:f4:a7:05:bc:73:2c:42:d4:ad:0a:88:aa:15:99:6c:bb:
ec:cc:d8:83:b3:d7:c9:5e:f1:5f:13:82:fb:44:9f:c6:25:90:
65:84:bc:9e:74:25:2a:df:6b:f4:cf:cd:e3:29:1f:6a:e2:56:
ec:19:37:64:34:dd:5f:df:dc:85:87:78:f1:98:41:d8:4e:9e:
91:17:db:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:10:43 2025 by rpki-client