Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ef2d9b6c-a420-4452-8141-33a81fd0a0bb/1/323030313a3637633a6438303a3a2f34382d3438203d3e20323034303132.roa
File: 323030313a3637633a6438303a3a2f34382d3438203d3e20323034303132.roa (raw, json)
Hash identifier: 4dXY2EVyaiRBDsqp2Ej9SNGFQzc3YOtH+5lc/nJyqLQ=
Subject key identifier: 94:9A:E1:53:D9:81:51:A2:13:0D:88:91:00:BD:12:16:75:AD:8D:E3
Certificate issuer: /CN=27e35648a7d9e7ccd41ac0b14fdd7341d3545cdf
Certificate serial: 4C6D0C5E61AF50C9690E62656B38B714BB09B0A0
Authority key identifier: 27:E3:56:48:A7:D9:E7:CC:D4:1A:C0:B1:4F:DD:73:41:D3:54:5C:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-NWSKfZ58zUGsCxT91zQdNUXN8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ef2d9b6c-a420-4452-8141-33a81fd0a0bb/1/323030313a3637633a6438303a3a2f34382d3438203d3e20323034303132.roa
Signing time: Sun 29 Dec 2024 03:43:29 +0000
ROA not before: Sun 29 Dec 2024 03:38:29 +0000
ROA not after: Sun 28 Dec 2025 03:43:29 +0000
asID: 204012
IP address blocks: 2001:67c:d80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:6d:0c:5e:61:af:50:c9:69:0e:62:65:6b:38:b7:14:bb:09:b0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e35648a7d9e7ccd41ac0b14fdd7341d3545cdf
Validity
Not Before: Dec 29 03:38:29 2024 GMT
Not After : Dec 28 03:43:29 2025 GMT
Subject: CN=949AE153D98151A2130D889100BD121675AD8DE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:2b:73:d7:72:cb:f7:92:3a:ec:65:18:2d:
d1:9d:f8:7b:b3:da:b4:ad:7f:6b:f6:5e:6d:bc:45:
aa:b8:13:28:9a:8d:7b:b1:ea:55:97:1d:35:17:6b:
35:6a:7c:51:f8:00:41:44:9e:44:82:81:6e:00:b7:
eb:51:a7:5f:e9:9f:0e:3c:85:69:88:fd:44:24:c6:
4c:8e:e0:30:66:9a:b4:10:68:d3:3f:97:08:d9:ad:
c3:5f:77:42:1b:b0:12:88:6d:96:a1:f1:d2:c5:8d:
15:c1:70:83:5b:39:36:73:05:d7:b7:d1:87:f9:1c:
a4:f7:00:85:20:c0:ab:c1:3d:df:1b:e4:aa:ea:8d:
c9:25:22:95:58:20:80:c8:87:ea:e8:39:ff:8c:fb:
61:b0:b4:9d:7b:61:4b:7c:08:f7:ba:a2:af:1a:63:
14:3e:c6:a9:77:b8:df:10:0f:71:e1:fd:81:67:cc:
06:b2:92:e5:6b:11:b1:b6:ae:05:93:91:ad:e8:dc:
7c:29:40:3f:9c:74:60:4d:69:e9:b9:f8:a1:86:5d:
14:b1:83:02:f0:d1:4a:b3:f3:80:30:9d:d3:35:48:
3f:9c:5f:b7:64:f2:e1:21:1b:fb:6a:1f:8d:af:fc:
69:c5:ee:6c:49:b2:2a:59:c6:69:b0:b6:f4:07:41:
8d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9A:E1:53:D9:81:51:A2:13:0D:88:91:00:BD:12:16:75:AD:8D:E3
X509v3 Authority Key Identifier:
keyid:27:E3:56:48:A7:D9:E7:CC:D4:1A:C0:B1:4F:DD:73:41:D3:54:5C:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ef2d9b6c-a420-4452-8141-33a81fd0a0bb/1/27E35648A7D9E7CCD41AC0B14FDD7341D3545CDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-NWSKfZ58zUGsCxT91zQdNUXN8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ef2d9b6c-a420-4452-8141-33a81fd0a0bb/1/323030313a3637633a6438303a3a2f34382d3438203d3e20323034303132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d80::/48
Signature Algorithm: sha256WithRSAEncryption
4f:49:c6:72:11:6f:a6:fe:f7:86:ba:57:3a:81:d9:77:2a:c5:
9f:96:97:c9:ed:b4:c7:17:2d:0c:04:ac:89:50:c8:dc:cc:f7:
d6:95:8f:43:f7:fd:9c:19:fe:c4:2f:3d:b9:a7:fe:42:35:51:
04:7d:31:29:df:c2:a2:29:39:70:7d:90:16:75:31:b4:2c:72:
9a:ff:04:80:65:ea:c9:ad:9b:b5:e3:42:56:8f:25:0f:43:e0:
2a:9e:22:4e:2b:f5:11:ba:06:d1:ac:74:6f:d4:cd:79:8b:cb:
d4:c8:f4:2d:64:5f:26:85:27:3d:8a:b6:fc:4b:b6:b2:d7:ab:
67:60:24:a5:71:4e:25:61:1f:1a:e7:15:ed:2f:11:23:e1:1f:
6c:65:d6:04:2c:e6:d5:13:60:17:ac:b8:6f:6b:35:50:25:2d:
f1:d6:a3:61:83:e7:94:b3:2b:bf:6f:a4:9d:b8:49:24:b2:5d:
fc:14:e9:1f:25:69:1d:b3:ca:79:d3:cb:65:4a:f6:ec:8c:20:
45:90:e4:0c:82:e4:d8:86:77:fa:76:94:2e:77:36:fb:7c:d8:
42:46:f6:bd:71:d7:27:be:09:14:7f:c6:de:32:26:69:9f:34:
8d:b3:6f:c3:56:c5:0a:42:79:57:75:cb:8d:f6:8a:41:d1:c9:
7e:28:ac:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:28 2025 by rpki-client