Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a346130303a3a2f34302d3438203d3e20323134383433.roa
File: 326131343a3763303a346130303a3a2f34302d3438203d3e20323134383433.roa (raw, json)
Hash identifier: /cY98p1D3Yjxgi9kB8CHJMwtNnG+OSobdN1Vxc4afvw=
Subject key identifier: 25:6C:BA:61:60:AE:CF:9A:E4:BE:73:D0:95:FE:26:B9:BF:C0:58:19
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 637BDB54F1B039D03F6694D201086B1F4A6295C6
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a346130303a3a2f34302d3438203d3e20323134383433.roa
Signing time: Thu 23 May 2024 20:49:45 +0000
ROA not before: Thu 23 May 2024 20:44:45 +0000
ROA not after: Thu 22 May 2025 20:49:45 +0000
asID: 214843
IP address blocks: 2a14:7c0:4a00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:7b:db:54:f1:b0:39:d0:3f:66:94:d2:01:08:6b:1f:4a:62:95:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: May 23 20:44:45 2024 GMT
Not After : May 22 20:49:45 2025 GMT
Subject: CN=256CBA6160AECF9AE4BE73D095FE26B9BFC05819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:80:eb:9c:91:3f:77:2d:42:a0:ca:fa:b1:40:
98:63:18:9c:f7:78:49:f8:bb:d2:bc:7f:cf:4b:b9:
54:0d:3e:35:2b:b1:7e:49:0b:02:20:6a:ee:bc:81:
9c:11:63:21:25:d2:6a:be:e2:5d:95:03:bb:47:2b:
02:37:ef:15:a5:fd:4e:a0:f8:37:d6:c4:1a:0c:44:
f9:3e:56:ae:c8:7c:34:21:1d:49:34:bc:01:7b:00:
43:e3:0a:0c:c9:35:45:67:5f:a8:c4:42:74:91:9f:
de:02:de:57:92:27:1d:53:4d:3b:09:f4:63:73:04:
bb:46:98:c6:f5:cf:67:3a:a6:d2:49:cd:57:ae:d2:
87:6c:51:40:50:49:0a:ad:c1:1b:15:78:35:70:5b:
83:af:f5:35:fb:86:6b:fa:51:9e:4e:04:01:b6:d4:
4d:bd:02:b9:8e:3f:99:e7:ea:e6:7c:b0:84:42:db:
f7:ad:41:60:e0:04:f5:13:62:24:0e:5b:bf:d7:64:
b2:77:5e:64:41:48:96:98:e9:8e:89:d2:b1:70:47:
d7:ff:1f:7c:37:81:a1:17:05:60:63:91:17:49:7a:
91:d0:b8:b1:2a:19:ae:85:0e:4c:93:7f:ee:66:3d:
3f:b8:09:65:3f:8f:22:7c:6f:77:eb:12:08:fa:6d:
c8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6C:BA:61:60:AE:CF:9A:E4:BE:73:D0:95:FE:26:B9:BF:C0:58:19
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a346130303a3a2f34302d3438203d3e20323134383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:4a00::/40
Signature Algorithm: sha256WithRSAEncryption
50:84:8b:b9:a6:4b:53:3e:b3:0d:64:0d:6a:ac:94:1d:b3:05:
2d:ad:b2:e4:88:12:64:36:6e:fb:fc:60:d4:5c:74:65:27:ea:
d5:48:a2:f5:e5:56:b7:76:96:bb:e0:c6:8d:de:9c:55:85:30:
c1:1d:b4:86:f6:40:9f:54:ea:6d:54:df:51:cc:8d:14:3a:37:
a4:28:80:e5:1f:fd:de:46:6d:ce:c4:d8:70:4e:43:4e:98:a7:
99:c3:da:f5:79:8e:12:6f:2f:f4:8f:0d:9a:4b:49:d2:6d:15:
0a:4b:4b:f1:89:79:47:ce:ec:92:3e:a9:40:21:9e:03:1e:ec:
ee:85:2c:55:da:9e:a5:50:39:71:77:6d:c9:ae:f6:31:95:71:
43:17:bc:2c:bc:1a:c7:56:ed:66:19:77:74:5c:5c:5d:0a:07:
8b:d5:ce:d5:9d:a7:c4:79:3e:4b:0a:d9:3e:89:e8:9f:06:6a:
34:30:29:c0:c1:1a:ac:33:82:b7:5d:c5:57:7b:a7:b8:3e:38:
8c:f2:5a:c4:bd:47:8f:32:11:b4:c7:6d:91:63:79:29:a9:aa:
b2:89:b2:64:f2:39:5a:bc:3d:bd:14:85:8d:d5:43:56:1b:f6:
53:a4:2a:5e:0a:d0:1a:db:3b:cc:e9:c3:7b:18:7a:1e:30:3e:
8c:87:26:dc
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUY3vbVPGwOdA/ZpTSAQhrH0pilcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDA1MjMyMDQ0NDVaFw0yNTA1MjIyMDQ5NDVaMDMxMTAvBgNV
BAMTKDI1NkNCQTYxNjBBRUNGOUFFNEJFNzNEMDk1RkUyNkI5QkZDMDU4MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVgOuckT93LUKgyvqxQJhjGJz3
eEn4u9K8f89LuVQNPjUrsX5JCwIgau68gZwRYyEl0mq+4l2VA7tHKwI37xWl/U6g
+DfWxBoMRPk+Vq7IfDQhHUk0vAF7AEPjCgzJNUVnX6jEQnSRn94C3leSJx1TTTsJ
9GNzBLtGmMb1z2c6ptJJzVeu0odsUUBQSQqtwRsVeDVwW4Ov9TX7hmv6UZ5OBAG2
1E29ArmOP5nn6uZ8sIRC2/etQWDgBPUTYiQOW7/XZLJ3XmRBSJaY6Y6J0rFwR9f/
H3w3gaEXBWBjkRdJepHQuLEqGa6FDkyTf+5mPT+4CWU/jyJ8b3frEgj6bcjFAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUJWy6YWCuz5rkvnPQlf4mub/AWBkwHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzMDNh
MzQ2MTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMxMzQzODM0MzMucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAqFAfASjANBgkqhkiG9w0BAQsFAAOCAQEAUISLuaZLUz6zDWQNaqyU
HbMFLa2y5IgSZDZu+/xg1Fx0ZSfq1Uii9eVWt3aWu+DGjd6cVYUwwR20hvZAn1Tq
bVTfUcyNFDo3pCiA5R/93kZtzsTYcE5DTpinmcPa9XmOEm8v9I8NmktJ0m0VCktL
8Yl5R87skj6pQCGeAx7s7oUsVdqepVA5cXdtya72MZVxQxe8LLwax1btZhl3dFxc
XQoHi9XO1Z2nxHk+SwrZPononwZqNDApwMEarDOCt13FV3unuD44jPJaxL1HjzIR
tMdtkWN5KamqsomyZPI5Wrw9vRSFjdVDVhv2U6QqXgrQGts7zOnDexh6HjA+jIcm
3A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org