Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763333a623030623a3a2f34382d3438203d3e20323132313439.roa
File: 326131343a3763333a623030623a3a2f34382d3438203d3e20323132313439.roa (raw, json)
Hash identifier: QuuCeO+tS6InK7ylRz5HTI+olh4RcX+xHaT8T2+rNpk=
Subject key identifier: A7:E0:7C:BD:D1:C7:07:70:4C:D2:0F:B1:00:10:1D:9D:AE:15:6A:83
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 2358B57B3AADE718A96859669A1FE33CB99E6188
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763333a623030623a3a2f34382d3438203d3e20323132313439.roa
Signing time: Wed 21 Feb 2024 15:37:36 +0000
ROA not before: Wed 21 Feb 2024 15:32:36 +0000
ROA not after: Wed 19 Feb 2025 15:37:36 +0000
asID: 212149
IP address blocks: 2a14:7c3:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:58:b5:7b:3a:ad:e7:18:a9:68:59:66:9a:1f:e3:3c:b9:9e:61:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Feb 21 15:32:36 2024 GMT
Not After : Feb 19 15:37:36 2025 GMT
Subject: CN=A7E07CBDD1C707704CD20FB100101D9DAE156A83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:4e:c6:d7:fc:6e:69:ad:c5:e4:55:15:cc:
f0:b1:2c:67:d5:5f:f0:6a:24:cb:6e:f8:0c:cd:db:
87:47:59:ea:c9:26:45:20:9d:c6:ff:22:49:f6:f0:
c8:e1:71:67:42:0d:93:cb:0d:cb:81:68:e3:1c:23:
bc:f4:d1:da:58:00:39:f3:5a:ed:c4:0f:be:34:bb:
2e:6c:b8:a4:06:59:fd:c9:77:77:0d:fc:58:d6:65:
49:4b:56:32:99:1c:54:56:e4:27:be:61:61:b0:57:
da:d5:6f:75:b8:9d:7c:b5:0f:b4:5b:bb:6e:8f:8f:
7e:fd:ca:32:3a:42:b0:ac:51:de:b9:0b:99:35:e1:
54:34:67:1f:0e:56:21:79:6f:64:07:b6:f0:fa:e8:
a6:25:b3:40:68:86:08:63:bf:13:80:4e:fe:13:0c:
bb:92:95:26:90:4f:91:24:82:ad:66:f0:d8:27:87:
3b:0a:e5:6f:55:bf:b2:fd:38:03:74:4d:ad:0d:3e:
2b:53:70:68:af:9f:f9:e9:71:90:b1:7a:cd:f6:64:
0e:33:42:37:e0:f2:f6:7c:f5:9b:0d:cd:d8:2b:2f:
78:e0:38:e5:3e:a3:11:6c:ec:df:2b:d6:75:49:74:
c0:29:83:7f:65:6f:51:0d:88:3b:36:ea:b7:fb:68:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E0:7C:BD:D1:C7:07:70:4C:D2:0F:B1:00:10:1D:9D:AE:15:6A:83
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763333a623030623a3a2f34382d3438203d3e20323132313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c3:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
3c:f1:cb:d3:72:86:03:35:76:10:74:08:5b:16:fe:e4:92:dd:
10:5a:35:f8:cb:42:bf:f6:09:a2:14:db:50:cf:93:4b:0d:8a:
07:ae:65:47:8a:26:7f:83:24:7b:af:fe:03:b5:9c:63:2b:c0:
68:a3:d1:f9:16:a6:fc:0f:d5:2b:2f:f4:db:b0:c4:52:3c:40:
a3:09:4e:c3:6e:a2:d5:9b:9f:d7:b3:ba:57:f9:1e:3e:52:2c:
ee:2b:df:c6:06:31:f5:a6:83:57:e6:c9:47:cf:02:17:55:1a:
64:3b:57:20:b6:30:31:7d:48:fb:8a:1f:ad:52:81:14:dc:5c:
a7:f0:7c:4e:c2:25:a2:4b:32:b3:78:1e:1a:8a:aa:29:c0:ef:
b0:89:96:60:1e:06:1a:49:a5:a4:5d:ce:ea:47:1f:ec:62:e4:
ce:1c:a2:fc:2c:56:b6:fa:cf:46:87:72:d1:2f:59:0d:16:bd:
ee:c7:b6:7a:6d:6b:5e:d1:f7:a4:6c:0f:97:ad:f2:e8:3a:be:
a7:78:9a:c6:01:b2:df:01:87:ad:67:e7:55:93:31:04:a0:c2:
43:11:ac:01:04:ca:ee:b4:92:dd:00:2c:2c:5e:b4:ce:eb:84:
45:6a:f5:66:fc:88:5b:dd:55:cf:c7:78:6e:7f:33:30:ac:85:
1b:e9:c3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:20:20 2025 by rpki-client