Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763363a623030623a3a2f34382d3438203d3e20323132313439.roa
File: 326131343a3763363a623030623a3a2f34382d3438203d3e20323132313439.roa (raw, json)
Hash identifier: V2Xazd6nYZXnywxfIoeGoGMHHXsdh/oz6ZrVtu8IwVM=
Subject key identifier: 8C:D2:F0:FF:7A:07:64:09:5F:53:EE:73:95:CB:EC:22:CA:62:92:09
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 68D2C536B828FAEE3F97EFCCC5014385E169D762
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763363a623030623a3a2f34382d3438203d3e20323132313439.roa
Signing time: Wed 21 Feb 2024 15:38:07 +0000
ROA not before: Wed 21 Feb 2024 15:33:07 +0000
ROA not after: Wed 19 Feb 2025 15:38:07 +0000
asID: 212149
IP address blocks: 2a14:7c6:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d2:c5:36:b8:28:fa:ee:3f:97:ef:cc:c5:01:43:85:e1:69:d7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Feb 21 15:33:07 2024 GMT
Not After : Feb 19 15:38:07 2025 GMT
Subject: CN=8CD2F0FF7A0764095F53EE7395CBEC22CA629209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b8:cf:b6:c0:a0:53:24:e9:d5:76:4a:df:47:
2e:9e:6d:a7:1a:e9:76:c8:28:cd:09:4a:7f:d1:a1:
89:f1:e3:8d:4c:bb:49:65:a1:de:42:0d:44:23:2b:
31:89:85:3e:b2:28:c2:08:3f:89:ab:f4:c7:e8:df:
62:9a:03:70:77:55:b4:6b:6d:ad:ba:25:43:80:d0:
b5:39:5f:55:f7:58:68:5b:37:4c:4f:fe:01:d6:0f:
74:17:53:d4:f9:e4:1f:4d:71:39:01:38:69:0b:9d:
86:76:1f:d9:33:f2:d3:c6:fd:e3:2d:dd:45:e8:24:
a6:70:66:a0:68:cd:72:e6:0f:dc:e8:6c:80:6b:63:
4c:eb:c1:35:cb:f5:37:7d:77:97:f1:b0:cd:67:cc:
e1:95:df:7e:e2:5c:52:0a:7e:aa:5e:0b:9a:b8:be:
7d:ee:34:54:96:ed:fd:70:60:ef:a5:42:25:ca:02:
39:dc:87:44:e8:61:b4:ca:bf:73:68:ac:dd:8b:9e:
cd:ed:fc:5b:6f:54:d5:8c:48:ce:15:07:5f:99:79:
a0:5d:bf:85:50:57:9f:e8:d7:1f:3d:76:54:81:73:
d5:8a:eb:95:03:ba:cf:1f:9f:68:af:84:4d:c4:4f:
e3:30:91:b3:a1:27:82:19:4d:d4:af:9d:f2:6f:3b:
20:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D2:F0:FF:7A:07:64:09:5F:53:EE:73:95:CB:EC:22:CA:62:92:09
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763363a623030623a3a2f34382d3438203d3e20323132313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c6:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
2d:8e:c0:7e:43:25:5d:c9:5f:20:4c:76:6e:67:3c:85:60:7e:
ad:31:d8:cf:ac:a1:ae:47:63:95:e3:79:30:8a:f8:76:98:49:
43:de:1e:86:17:4c:73:01:87:d1:f6:be:22:cd:06:c1:7c:32:
7e:cd:83:be:95:c0:6a:a8:a8:ff:65:bc:f0:10:f7:17:d1:cd:
57:f2:ec:9a:a6:b9:40:c1:f7:a7:db:b7:e0:74:8f:dc:29:10:
fc:31:5c:35:78:e6:1d:0b:e7:18:25:a9:4f:cb:a6:89:75:85:
9d:0c:8f:ce:9e:5e:11:91:a8:ad:30:3b:02:cf:cb:47:ec:35:
29:ae:58:7f:82:3e:5d:81:1a:96:98:d7:9c:5d:21:d2:68:cd:
a6:32:13:5d:86:d8:16:ca:e9:07:ea:72:87:47:42:67:f9:f1:
6c:f0:4a:37:30:6e:bd:b3:1d:dc:02:ea:5d:29:66:ef:59:4f:
f9:9e:b8:e4:fe:cd:4a:fb:f0:f7:6e:d7:91:50:b3:25:49:25:
1e:45:01:7c:ca:fe:44:04:6d:4d:0f:6d:3f:17:9a:7f:86:e0:
62:b8:d9:56:63:a4:73:13:01:92:0f:70:08:f2:5d:41:36:b1:
b3:27:64:06:c1:6d:23:55:97:35:8f:1d:4c:86:61:3e:74:9e:
c9:9b:d4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:03:50 2025 by rpki-client