Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323132313439.roa
File: 326131343a3763313a623030623a3a2f34382d3438203d3e20323132313439.roa (raw, json)
Hash identifier: PbtXcsLj9+qWeih4JQ1x+t4GVAP+37mBY53rtY1Q/tQ=
Subject key identifier: 08:5E:DB:4C:FD:DB:60:F9:F6:8E:3C:F1:92:DD:17:30:60:6C:7F:CD
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 2AB03F4B075EE8D79387B1032ABA6BF3682AC199
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323132313439.roa
Signing time: Wed 21 Feb 2024 15:37:20 +0000
ROA not before: Wed 21 Feb 2024 15:32:20 +0000
ROA not after: Wed 19 Feb 2025 15:37:20 +0000
asID: 212149
IP address blocks: 2a14:7c1:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:b0:3f:4b:07:5e:e8:d7:93:87:b1:03:2a:ba:6b:f3:68:2a:c1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Feb 21 15:32:20 2024 GMT
Not After : Feb 19 15:37:20 2025 GMT
Subject: CN=085EDB4CFDDB60F9F68E3CF192DD1730606C7FCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7f:82:a9:ad:18:cf:ee:7a:03:65:c8:47:7c:
76:ed:d3:ac:2f:40:70:c5:b7:0a:37:5c:54:77:56:
23:32:53:2f:d2:56:c5:9f:8a:28:0b:7c:af:49:b9:
b0:13:5c:20:b6:2f:fc:9a:c9:64:2a:aa:da:82:4c:
5e:a2:d7:69:35:63:b7:7c:16:35:25:c8:45:b7:c7:
c8:58:8a:03:27:5d:84:0e:d1:b5:82:9e:67:49:02:
b1:ec:d2:88:75:5b:48:98:9b:f3:4d:c7:34:e6:ac:
78:92:90:b1:7d:0c:b4:37:cb:64:88:3f:34:55:e7:
90:10:bd:81:2f:ae:ca:04:70:0d:2e:05:ff:a1:ef:
84:f8:2b:9c:43:3a:8f:5c:7b:0d:c2:5b:e0:24:06:
0b:7d:7c:02:ed:eb:8f:13:5f:ce:8f:51:16:27:4d:
04:54:82:f5:d2:76:1d:83:04:6e:ae:90:ea:4c:69:
65:75:60:91:ff:4c:6a:ad:67:c0:69:3b:e7:74:94:
7f:56:0e:88:5b:f3:39:2c:20:b1:81:97:a0:fe:e6:
47:28:c5:eb:71:ea:f1:b3:3b:ab:73:3c:9d:b7:f0:
a9:9e:f9:a4:41:13:a2:74:6e:d9:bb:6e:a2:29:c8:
c9:7f:54:90:0e:93:22:f7:f2:5a:f1:63:78:b9:9f:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5E:DB:4C:FD:DB:60:F9:F6:8E:3C:F1:92:DD:17:30:60:6C:7F:CD
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323132313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c1:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
60:86:34:6e:f9:da:5b:06:65:65:f6:3d:16:a5:6f:e9:6c:a5:
1c:2e:ea:71:52:44:92:e7:68:13:6a:49:57:3e:fc:1a:19:64:
d2:55:54:db:5e:18:ad:02:e1:5a:72:bb:8d:22:6d:00:fd:19:
d2:d7:62:c2:35:55:b3:00:4d:73:de:d6:02:33:67:1e:1a:e5:
08:5f:bc:7f:eb:03:89:d5:54:34:31:ae:70:83:db:de:16:83:
4f:4b:d6:be:e0:15:fa:6c:e6:5e:2d:5a:00:63:c3:b6:b4:80:
58:7a:b7:8b:a7:ea:93:e7:1b:21:d3:63:51:2a:be:ac:6d:02:
7a:75:c5:78:d9:70:b1:20:92:b6:3b:4b:0d:7e:57:6e:1c:cc:
01:86:7f:90:0d:88:99:40:13:69:c3:b7:4a:e8:e5:2f:b0:c5:
bc:fc:96:a4:78:22:17:25:c3:6b:83:92:e0:c5:dc:70:ba:70:
98:2f:fa:14:97:0c:8d:27:34:c3:42:ad:d7:86:8b:d0:8c:6f:
3b:25:85:86:54:6e:82:2a:c5:55:3b:e7:43:be:cb:73:02:58:
b5:1f:9b:c0:ab:70:47:3f:24:6e:77:6f:13:bf:df:2a:46:62:
31:e1:dd:24:89:3b:a4:fc:a6:4c:42:83:aa:5a:f4:34:78:18:
9e:d3:38:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:18:25 2025 by rpki-client