Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393630303a3a2f34302d3438203d3e20313533333736.roa
File: 326131343a373538303a393630303a3a2f34302d3438203d3e20313533333736.roa (raw, json)
Hash identifier: a3qLcUPi+RQppEqo978zrfnO/2oaV9TKnigMH0wuHZQ=
Subject key identifier: EE:DF:AC:E0:7D:4E:AD:D7:C6:92:6E:CF:F2:95:69:75:34:A1:90:99
Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial: 08FC4585A053FB0228A571E543F94D11F79D0D35
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393630303a3a2f34302d3438203d3e20313533333736.roa
Signing time: Wed 15 Jan 2025 13:08:56 +0000
ROA not before: Wed 15 Jan 2025 13:03:56 +0000
ROA not after: Wed 14 Jan 2026 13:08:56 +0000
asID: 153376
IP address blocks: 2a14:7580:9600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:fc:45:85:a0:53:fb:02:28:a5:71:e5:43:f9:4d:11:f7:9d:0d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Validity
Not Before: Jan 15 13:03:56 2025 GMT
Not After : Jan 14 13:08:56 2026 GMT
Subject: CN=EEDFACE07D4EADD7C6926ECFF295697534A19099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:ff:c1:94:e6:32:fe:e4:df:88:56:06:46:
1a:f4:b2:82:de:31:9d:94:5b:ff:75:3c:ee:ec:e6:
04:9e:db:80:b1:ef:eb:04:90:f8:70:86:5d:79:2e:
7c:1d:de:b7:14:22:51:22:5d:ae:92:96:d7:95:a1:
8d:3a:cd:00:00:1e:fc:c3:7f:e0:8c:af:da:9b:f7:
12:15:98:ae:0d:d7:4d:38:f4:76:2d:85:ec:d3:64:
0a:bd:16:27:03:c1:6c:a7:ca:4f:b3:18:05:74:73:
55:9d:82:10:90:c8:cb:c4:c5:ef:89:71:58:58:fc:
ac:11:41:8c:e0:46:fa:12:22:5d:f5:4f:6f:35:24:
ad:ae:b8:ad:31:00:ba:77:78:6c:94:b2:7d:29:5f:
03:b6:02:e5:0b:2c:67:98:bd:0a:16:4c:cb:2e:35:
1f:25:16:c2:f5:ce:16:57:51:fe:97:71:b9:ab:a0:
07:e2:eb:ab:0c:17:c7:fe:82:25:2a:8d:e4:32:bc:
69:68:34:be:71:c7:e7:32:5e:c8:24:63:33:5d:17:
ae:b3:8d:d7:0e:52:80:f9:8a:78:d9:a3:53:21:36:
d2:01:27:1e:a9:83:50:28:0a:a0:e6:c9:31:18:80:
4e:82:8e:a4:05:5b:93:bb:0c:06:66:de:a3:f4:a1:
5c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DF:AC:E0:7D:4E:AD:D7:C6:92:6E:CF:F2:95:69:75:34:A1:90:99
X509v3 Authority Key Identifier:
keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393630303a3a2f34302d3438203d3e20313533333736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:9600::/40
Signature Algorithm: sha256WithRSAEncryption
73:ec:9d:af:cd:79:ea:d6:98:b8:29:b7:ee:98:1c:58:99:87:
6d:e2:8d:27:6a:ca:0b:cb:87:06:60:20:33:9c:0f:21:b7:27:
e4:47:3e:01:27:04:98:42:89:bb:93:06:f2:30:66:77:16:fc:
30:41:12:c2:b0:fc:43:aa:5b:41:43:41:f4:73:a7:09:4c:17:
45:15:08:6a:e9:34:7b:64:87:ba:54:ba:94:91:6b:aa:e7:14:
af:88:1a:85:80:41:77:1f:c2:e5:ef:cc:1b:2c:fe:4c:4d:56:
0a:06:d3:6b:2d:e1:f4:48:a2:a4:52:d1:82:c1:33:dd:71:c6:
90:9b:91:01:6d:88:3d:f0:1e:d9:0f:83:47:79:2a:bc:81:77:
ec:ae:ff:df:c0:6e:eb:be:9c:9c:2b:2c:68:6a:ea:d1:04:ba:
3a:ec:30:72:60:6c:9c:fc:90:09:94:1d:0a:0e:dd:53:42:96:
86:5b:d9:32:83:60:98:18:db:f7:f6:7c:63:ce:0a:3d:b6:e3:
31:96:90:2d:8e:6d:fc:e8:8a:63:53:6d:d3:fa:68:25:d6:4b:
2a:b1:26:8e:55:00:b4:d3:98:57:ca:d3:6c:98:5b:4b:25:90:
5c:89:44:be:95:71:34:0e:9d:65:ce:df:e8:0e:a2:ae:69:19:
7c:87:59:d6
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUCPxFhaBT+wIopXHlQ/lNEfedDTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB
RUY3QUQxQTAeFw0yNTAxMTUxMzAzNTZaFw0yNjAxMTQxMzA4NTZaMDMxMTAvBgNV
BAMTKEVFREZBQ0UwN0Q0RUFERDdDNjkyNkVDRkYyOTU2OTc1MzRBMTkwOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5V//BlOYy/uTfiFYGRhr0soLe
MZ2UW/91PO7s5gSe24Cx7+sEkPhwhl15Lnwd3rcUIlEiXa6SlteVoY06zQAAHvzD
f+CMr9qb9xIVmK4N10049HYthezTZAq9FicDwWynyk+zGAV0c1WdghCQyMvExe+J
cVhY/KwRQYzgRvoSIl31T281JK2uuK0xALp3eGyUsn0pXwO2AuULLGeYvQoWTMsu
NR8lFsL1zhZXUf6XcbmroAfi66sMF8f+giUqjeQyvGloNL5xx+cyXsgkYzNdF66z
jdcOUoD5injZo1MhNtIBJx6pg1AoCqDmyTEYgE6CjqQFW5O7DAZm3qP0oVwJAgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQU7t+s4H1OrdfGkm7P8pVpdTShkJkwHwYDVR0j
BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk
OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz
MjU5RkM3OEFFRjdBRDFBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz
NDNhMzczNTM4MzAzYTM5MzYzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzEz
NTMzMzMzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gJYwDQYJKoZIhvcNAQELBQADggEBAHPs
na/NeerWmLgpt+6YHFiZh23ijSdqygvLhwZgIDOcDyG3J+RHPgEnBJhCibuTBvIw
ZncW/DBBEsKw/EOqW0FDQfRzpwlMF0UVCGrpNHtkh7pUupSRa6rnFK+IGoWAQXcf
wuXvzBss/kxNVgoG02st4fRIoqRS0YLBM91xxpCbkQFtiD3wHtkPg0d5KryBd+yu
/9/Abuu+nJwrLGhq6tEEujrsMHJgbJz8kAmUHQoO3VNCloZb2TKDYJgY2/f2fGPO
Cj224zGWkC2ObfzoimNTbdP6aCXWSyqxJo5VALTTmFfK02yYW0slkFyJRL6VcTQO
nWXO3+gOoq5pGXyHWdY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:01 2025 by rpki-client