Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3130303a3a2f34302d3430203d3e20313439303230.roa
File: 326130623a346530373a3130303a3a2f34302d3430203d3e20313439303230.roa (raw, json)
Hash identifier: irOjcpVRVKtgTJGQf2rNS9pS9qL+LKBGKbM16V6sKRk=
Subject key identifier: D1:0A:D7:25:19:6A:50:79:BF:44:7D:49:E5:F5:22:7B:35:82:7A:E3
Certificate issuer: /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial: 3F0CDC7D4AE2D4A6ACE1CFB6DCE48804EBB7D867
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3130303a3a2f34302d3430203d3e20313439303230.roa
Signing time: Thu 13 Feb 2025 23:17:25 +0000
ROA not before: Thu 13 Feb 2025 23:12:25 +0000
ROA not after: Thu 12 Feb 2026 23:17:25 +0000
asID: 149020
IP address blocks: 2a0b:4e07:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:0c:dc:7d:4a:e2:d4:a6:ac:e1:cf:b6:dc:e4:88:04:eb:b7:d8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Validity
Not Before: Feb 13 23:12:25 2025 GMT
Not After : Feb 12 23:17:25 2026 GMT
Subject: CN=D10AD725196A5079BF447D49E5F5227B35827AE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:ae:5c:94:c9:48:7b:e9:e7:96:20:b1:1c:
29:94:d1:98:f3:2c:2d:e9:52:03:43:42:44:af:73:
b8:f3:be:93:d8:70:ef:6f:89:ae:72:f6:51:9f:bb:
da:75:bd:c7:9e:ab:57:14:41:0c:c4:b7:d5:f8:f9:
dc:bb:fd:4b:41:59:2f:2e:cd:cc:90:00:87:0c:34:
f8:41:1c:e5:f6:80:86:8b:27:b7:43:1b:9f:22:93:
8b:1d:e7:36:d9:81:2c:d2:27:38:a3:ca:02:19:07:
a6:50:90:0f:b2:a5:7e:a6:df:98:ff:66:8c:54:04:
99:b2:c4:c4:3a:59:ca:14:76:a8:b8:6f:cc:6b:7c:
26:1b:18:1f:36:63:a2:95:13:23:f1:e9:d5:2c:6c:
bd:88:d0:81:df:ba:e9:cc:c7:fb:07:74:27:4b:de:
e1:a3:65:ba:1d:57:65:7e:ba:d9:17:aa:72:07:a2:
3c:92:f7:b6:48:84:97:d7:83:4f:25:03:ba:69:3c:
85:5b:4b:9a:cd:ec:93:34:9e:9a:8a:d2:12:ed:a8:
25:6e:75:66:61:ae:9d:91:0a:4a:53:79:24:d0:05:
e3:2c:48:01:38:a1:eb:73:6c:1f:eb:05:c7:6f:5a:
cf:d9:21:1f:7d:d4:97:98:19:56:e4:a0:55:d1:75:
e1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0A:D7:25:19:6A:50:79:BF:44:7D:49:E5:F5:22:7B:35:82:7A:E3
X509v3 Authority Key Identifier:
keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3130303a3a2f34302d3430203d3e20313439303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:100::/40
Signature Algorithm: sha256WithRSAEncryption
89:32:ae:6b:2d:41:d0:dd:df:ec:ea:b4:ed:5e:bc:5e:d4:02:
fc:a0:7e:c6:77:c1:93:fe:58:d1:c8:e9:8b:de:e4:da:09:13:
68:bd:89:92:f4:d6:c3:e3:a7:8d:0a:7c:a6:0f:aa:be:41:d8:
16:46:b7:ec:12:1f:6b:3a:c3:70:2b:6a:33:74:f9:df:97:fa:
a2:86:89:d5:33:29:fb:f6:d2:40:28:c4:0b:56:d4:ea:3f:c1:
90:8d:a0:70:0d:ea:64:5b:94:33:14:54:0e:e7:21:71:17:1f:
81:a9:2d:d7:36:aa:1c:a4:e9:20:9f:c5:fa:ce:fa:c5:27:17:
d0:98:1f:a2:96:ba:21:a3:37:95:2d:4b:b2:d1:19:3e:a5:93:
db:1e:f0:df:46:17:93:3e:63:56:86:49:e3:9c:e8:37:f0:75:
96:b4:cd:90:b2:2b:02:f1:2f:76:e4:09:88:8b:a1:ba:1b:6a:
c9:cd:a4:c4:36:69:fc:d9:96:31:98:f2:54:8b:9b:5e:51:ff:
78:aa:78:fb:16:a7:a3:12:7e:0b:ec:0c:04:e9:52:53:7f:38:
58:9c:2f:94:98:a5:35:0e:21:8e:a8:bc:a2:5e:41:6f:8b:00:
7b:e7:a5:84:a3:4f:89:a6:e1:61:74:c9:6d:d9:79:29:f6:c3:
d3:60:ae:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:38 2025 by rpki-client