Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323030343534.roa
File: 326131343a3763373a623030623a3a2f34382d3438203d3e20323030343534.roa (raw, json)
Hash identifier: 5RVrklxx6yxmIJnMWkPLireQOlLaSBSEbASvA8WC48M=
Subject key identifier: 2B:CB:8F:C0:AB:DE:82:69:86:51:5D:1E:F5:0D:4C:68:AB:C8:6D:DC
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 60EEFC4B71F6EF9E917848BE8F4CF6BB5115E3CD
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323030343534.roa
Signing time: Sun 17 Mar 2024 20:43:40 +0000
ROA not before: Sun 17 Mar 2024 20:38:40 +0000
ROA not after: Sun 16 Mar 2025 20:43:40 +0000
asID: 200454
IP address blocks: 2a14:7c7:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ee:fc:4b:71:f6:ef:9e:91:78:48:be:8f:4c:f6:bb:51:15:e3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 17 20:38:40 2024 GMT
Not After : Mar 16 20:43:40 2025 GMT
Subject: CN=2BCB8FC0ABDE826986515D1EF50D4C68ABC86DDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:bd:a4:41:8f:85:a6:48:7e:4e:f7:23:9e:d3:
12:72:26:fa:63:f8:f8:c3:5a:2b:44:20:0a:0e:1d:
83:81:85:53:54:c6:9d:4b:3e:d5:bb:88:f0:31:5f:
eb:7b:57:65:d8:b0:eb:b4:e9:d9:0b:7c:55:2c:74:
73:83:ee:ae:fc:72:f5:c6:98:73:e6:9d:d8:80:e9:
d1:34:c9:a6:46:c3:42:2c:c8:36:d2:57:45:53:b1:
53:b1:c7:8b:17:4b:e1:74:d9:6f:99:ff:f4:a0:27:
0d:64:2e:2a:9a:54:a4:8a:8e:ce:63:fd:9a:6b:e7:
ad:ae:f2:05:1e:83:9d:cf:6e:b7:de:ab:1b:a2:b3:
aa:e6:79:c1:21:2b:b7:96:5d:22:22:2c:70:5c:d2:
39:05:3c:66:9f:b7:1b:f7:3e:39:42:e4:45:33:5c:
af:a5:f6:59:6a:d8:ef:a1:ce:8d:a9:12:8b:ca:8f:
b6:66:b6:7e:b1:20:83:f6:7c:6b:b5:e2:91:a2:e9:
08:83:9a:82:3a:c8:ab:3c:e4:b3:ab:c2:96:14:89:
2d:ac:59:9d:96:43:d1:0f:d7:de:82:4b:e4:23:a5:
79:7d:7d:94:61:78:dc:87:da:33:32:2a:eb:0a:48:
32:2a:fe:5e:75:02:1b:48:99:be:25:f5:2a:ad:30:
7d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CB:8F:C0:AB:DE:82:69:86:51:5D:1E:F5:0D:4C:68:AB:C8:6D:DC
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323030343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c7:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
90:e2:c7:ae:5e:80:9d:7e:00:05:80:5c:4e:8a:a5:df:1c:ed:
f0:f4:42:37:6d:ce:89:dd:69:63:58:87:b4:48:c1:fd:34:d7:
4f:21:b6:e7:48:89:dc:05:2f:f2:51:62:cb:60:14:a6:7b:07:
93:52:36:0d:5d:25:63:6d:b3:d3:6e:68:33:04:7f:6c:cd:c1:
0f:6f:1c:dc:ed:d7:4a:d9:52:a3:bb:77:56:2f:8e:94:e9:70:
36:dd:bb:ea:4e:00:3f:24:4e:01:54:fc:e3:09:3b:80:2b:e4:
7c:4f:2a:54:a2:ea:5e:28:84:41:e2:11:a5:03:6d:2d:8e:bb:
54:cb:23:62:b3:51:dd:9a:c2:ab:f8:69:16:6f:87:26:40:93:
ae:40:bb:7a:86:dc:7d:d2:e7:fe:d5:53:93:e9:1c:c7:f9:43:
cb:82:08:dd:36:fa:94:80:d4:41:df:87:74:20:11:29:78:85:
dc:d1:5d:a2:9f:07:4e:32:41:de:09:d3:1b:01:8a:27:10:68:
ed:3c:76:f4:d6:7a:07:f4:25:50:87:69:82:d5:eb:b3:9f:da:
eb:3d:a3:76:3c:05:0e:74:af:4b:e9:4d:0c:e5:13:49:96:ee:
8b:0e:64:8c:e0:88:61:a3:d2:e3:dc:84:c5:ac:7c:49:de:eb:
56:7c:97:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:20:59 2025 by rpki-client