Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3630303a3a2f34302d3430203d3e203632343134.roa
File: 326131343a343438373a3630303a3a2f34302d3430203d3e203632343134.roa (raw, json)
Hash identifier: Y892zFjiVrI6BP5JWE8fj5wb3CARuhiwBS42mwNHfgc=
Subject key identifier: 8C:18:F3:53:71:31:A6:69:5E:2B:AF:64:68:0A:EB:92:04:ED:AF:8A
Certificate issuer: /CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Certificate serial: 1D9C734E4838D4207B3DE00C2B48E1887085C548
Authority key identifier: B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3630303a3a2f34302d3430203d3e203632343134.roa
Signing time: Thu 11 Jan 2024 08:47:23 +0000
ROA not before: Thu 11 Jan 2024 08:42:23 +0000
ROA not after: Thu 09 Jan 2025 08:47:23 +0000
asID: 62414
IP address blocks: 2a14:4487:600::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:9c:73:4e:48:38:d4:20:7b:3d:e0:0c:2b:48:e1:88:70:85:c5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Validity
Not Before: Jan 11 08:42:23 2024 GMT
Not After : Jan 9 08:47:23 2025 GMT
Subject: CN=8C18F3537131A6695E2BAF64680AEB9204EDAF8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:83:40:0f:bb:9b:d4:ff:e4:a0:a4:18:c5:
ec:ee:11:f2:c6:44:50:4d:18:12:da:08:84:1b:35:
c2:43:dd:f1:73:fa:5b:2b:5d:64:e7:da:d9:31:67:
44:9a:f2:6b:21:9d:f3:a8:b6:f0:01:db:c2:29:29:
bc:94:55:23:d3:9a:05:be:eb:39:c1:85:38:c6:bb:
bd:9f:14:62:50:15:8a:8d:aa:df:af:f6:9a:18:53:
ed:50:1f:83:ac:2d:4d:3c:c2:ae:09:0b:6e:8f:b4:
8d:4f:88:7e:07:56:d9:be:c8:b1:de:c5:6e:d1:6b:
72:96:8e:94:52:6a:43:d4:c8:c2:55:d8:81:2e:be:
a1:0b:39:bf:be:38:fe:bf:18:28:aa:94:a8:15:94:
71:bb:ff:7a:93:f5:46:a6:22:0a:d5:f4:23:0d:8e:
1c:1e:8d:34:da:64:00:b2:23:d7:b1:82:b9:fe:f2:
03:f1:fb:42:0f:4e:15:b9:d4:6d:8d:37:31:58:5e:
aa:32:e5:31:97:6d:b7:a1:2d:11:49:1e:d7:92:5a:
10:b1:e0:ce:b0:c5:b7:27:10:20:4a:8c:40:98:71:
09:06:60:16:47:12:7d:4b:c8:91:25:83:9a:03:6c:
24:a6:7f:53:ab:26:b5:5b:4a:6c:20:24:8f:bc:43:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:18:F3:53:71:31:A6:69:5E:2B:AF:64:68:0A:EB:92:04:ED:AF:8A
X509v3 Authority Key Identifier:
keyid:B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/B96B8D4992D9B467CE859406542D783AE5B5427B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3630303a3a2f34302d3430203d3e203632343134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4487:600::/40
Signature Algorithm: sha256WithRSAEncryption
11:af:ed:95:59:1b:6b:a7:9d:ef:73:e8:f0:11:59:5e:e2:54:
8d:42:31:f5:c9:b6:fb:58:84:cd:f1:ab:87:51:f0:c6:bc:01:
19:13:02:48:0a:d4:de:03:48:3e:ca:59:13:f4:4f:81:af:cd:
60:6c:59:fb:c0:8c:87:23:62:b7:ba:9a:32:62:37:4d:e9:64:
80:9c:b8:bb:11:47:da:e1:a7:33:11:f1:ef:33:d0:9a:ee:af:
f3:52:4e:6f:af:9a:aa:d3:b5:0b:d8:4f:9a:2f:08:c2:70:fa:
8e:35:73:ca:1a:3b:56:d9:06:62:11:eb:64:d9:51:6d:55:4e:
c6:e7:5d:dd:22:05:32:11:35:e1:6f:5d:7f:0b:4d:21:c3:86:
bb:34:1f:23:a2:08:a4:27:22:dd:77:83:70:dd:58:f9:7b:d3:
46:e1:e0:54:24:5a:31:f8:b0:05:50:e9:4b:0e:04:81:10:29:
b2:91:30:83:c9:ee:8d:13:c5:d3:4b:33:b4:b3:1e:4f:be:85:
6d:53:70:1a:29:5e:07:60:dd:59:1b:f7:72:00:97:45:1b:c8:
7d:95:8f:cc:5a:1a:f7:2f:13:fc:c5:b8:3e:12:24:61:7c:0b:
c9:9f:a3:12:d0:31:8d:fc:18:fd:e6:88:cd:ee:2a:46:23:41:
0d:84:42:e8
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUHZxzTkg41CB7PeAMK0jhiHCFxUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk2QjhENDk5MkQ5QjQ2N0NFODU5NDA2NTQyRDc4M0FF
NUI1NDI3QjAeFw0yNDAxMTEwODQyMjNaFw0yNTAxMDkwODQ3MjNaMDMxMTAvBgNV
BAMTKDhDMThGMzUzNzEzMUE2Njk1RTJCQUY2NDY4MEFFQjkyMDRFREFGOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCquoNAD7ub1P/koKQYxezuEfLG
RFBNGBLaCIQbNcJD3fFz+lsrXWTn2tkxZ0Sa8mshnfOotvAB28IpKbyUVSPTmgW+
6znBhTjGu72fFGJQFYqNqt+v9poYU+1QH4OsLU08wq4JC26PtI1PiH4HVtm+yLHe
xW7Ra3KWjpRSakPUyMJV2IEuvqELOb++OP6/GCiqlKgVlHG7/3qT9UamIgrV9CMN
jhwejTTaZACyI9exgrn+8gPx+0IPThW51G2NNzFYXqoy5TGXbbehLRFJHteSWhCx
4M6wxbcnECBKjECYcQkGYBZHEn1LyJElg5oDbCSmf1OrJrVbSmwgJI+8Q7QrAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUjBjzU3ExpmleK69kaArrkgTtr4owHwYDVR0j
BBgwFoAUuWuNSZLZtGfOhZQGVC14OuW1QnswDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIx
YmMxMi8xOC9COTZCOEQ0OTkyRDlCNDY3Q0U4NTk0MDY1NDJENzgzQUU1QjU0MjdC
LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA0MDMyYzhmLTFkNTct
NGMzYi05MDQzLWEwZTdmZWJmMTY3ZC8wL0I5NkI4RDQ5OTJEOUI0NjdDRTg1OTQw
NjU0MkQ3ODNBRTVCNTQyN0IuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCBoQYIKwYB
BQUHMAuGgZRyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIxYmMxMi8xOC8zMjYx
MzEzNDNhMzQzNDM4MzczYTM2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM2
MzIzNDMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqFESHBjANBgkqhkiG9w0BAQsFAAOCAQEAEa/t
lVkba6ed73Po8BFZXuJUjUIx9cm2+1iEzfGrh1HwxrwBGRMCSArU3gNIPspZE/RP
ga/NYGxZ+8CMhyNit7qaMmI3TelkgJy4uxFH2uGnMxHx7zPQmu6v81JOb6+aqtO1
C9hPmi8IwnD6jjVzyho7VtkGYhHrZNlRbVVOxudd3SIFMhE14W9dfwtNIcOGuzQf
I6IIpCci3XeDcN1Y+XvTRuHgVCRaMfiwBVDpSw4EgRApspEwg8nujRPF00sztLMe
T76FbVNwGileB2DdWRv3cgCXRRvIfZWPzFoa9y8T/MW4PhIkYXwLyZ+jEtAxjfwY
/eaIze4qRiNBDYRC6A==
-----END CERTIFICATE-----
Generated at Thu Mar 14 17:54:47 2024 by rpki-client on console-ams.rpki-client.org