Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a346230303a3a2f34302d3438203d3e203434333534.roa
File: 326131343a3763303a346230303a3a2f34302d3438203d3e203434333534.roa (raw, json)
Hash identifier: fy293BrQz74TU1Iv74Qs+3EvX2YxSvP7gNCuKjQ94tg=
Subject key identifier: D2:A9:AC:51:50:0D:92:FE:7B:73:52:70:0F:E4:6D:0B:5C:E7:1E:5F
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 256BF20B740888AE6EBF2A0B4296CD58C6DC2BB7
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a346230303a3a2f34302d3438203d3e203434333534.roa
Signing time: Tue 21 May 2024 17:24:47 +0000
ROA not before: Tue 21 May 2024 17:19:47 +0000
ROA not after: Tue 20 May 2025 17:24:47 +0000
asID: 44354
IP address blocks: 2a14:7c0:4b00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:6b:f2:0b:74:08:88:ae:6e:bf:2a:0b:42:96:cd:58:c6:dc:2b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: May 21 17:19:47 2024 GMT
Not After : May 20 17:24:47 2025 GMT
Subject: CN=D2A9AC51500D92FE7B7352700FE46D0B5CE71E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:b8:39:b1:34:37:08:56:ed:b3:b9:af:9c:
d1:b5:09:e8:ad:21:33:2c:eb:42:d4:31:52:ed:83:
33:10:0b:7c:83:06:c5:7e:9f:db:70:fa:47:cf:d1:
4e:73:73:4b:13:ad:31:e4:a0:6f:6e:77:3d:bc:54:
a0:7a:1b:0a:05:33:32:f7:b6:a3:58:f1:aa:70:bd:
42:f0:ea:eb:f4:a7:84:b6:3b:1e:41:7c:9f:64:79:
df:71:34:0e:14:0b:2f:28:94:3b:55:20:04:d9:d7:
a7:27:09:2d:bd:82:1c:03:6a:46:c3:d5:70:c1:b5:
f8:d9:b9:7a:bd:cc:7c:73:e8:39:a4:5f:f5:64:e0:
32:6e:2c:32:77:bd:86:51:25:48:e0:1a:ea:d2:1e:
1e:2e:f3:b2:55:a5:01:ea:16:19:c8:9c:ff:10:b5:
4d:a0:76:56:8c:bf:07:3a:54:22:2e:84:27:7b:0c:
c2:ae:14:65:82:a4:db:9a:1f:e1:62:4c:46:4a:fe:
e9:c0:b7:c2:ac:49:3e:9a:22:08:c0:c2:ea:f2:42:
52:a7:c2:b6:8c:1b:c0:12:ad:84:98:89:70:6c:07:
c4:db:b9:fa:89:59:65:2f:f3:5e:99:61:5a:c7:f2:
58:00:75:e5:4c:c3:8c:29:9c:40:cb:73:00:2c:ff:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A9:AC:51:50:0D:92:FE:7B:73:52:70:0F:E4:6D:0B:5C:E7:1E:5F
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a346230303a3a2f34302d3438203d3e203434333534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:4b00::/40
Signature Algorithm: sha256WithRSAEncryption
68:4d:52:5f:9b:bd:dc:66:d5:9e:24:4c:fe:4b:ce:b0:8d:70:
8c:6c:bf:ac:04:c7:14:f6:2f:cd:a1:66:89:7f:9d:40:97:e2:
45:37:6d:a6:a9:b8:b1:0d:42:8c:cf:d7:80:21:08:40:9e:98:
3f:06:c7:1c:ca:44:62:cd:ab:7d:ba:1e:89:b2:a1:c0:96:42:
cc:7f:fc:1b:5a:7e:2f:47:8e:db:d7:d4:e5:fc:3a:0d:fc:df:
94:ba:ed:07:9f:bc:60:74:99:c2:ce:f3:a1:18:25:45:e9:61:
69:99:e5:40:53:ff:c0:6f:a6:86:ac:7c:6e:b3:af:79:d4:eb:
57:db:89:16:0e:7b:62:71:d1:fd:5f:b5:fb:39:3a:20:06:60:
01:76:89:1c:b7:7f:22:83:21:79:5e:fd:d9:95:f2:54:26:78:
af:0f:94:9d:e7:8d:e4:9d:a8:07:ae:09:cb:b1:c8:ea:c1:c3:
3b:64:6d:c4:ed:97:4d:aa:23:5b:1e:29:a0:ba:ca:33:7c:a3:
25:c9:6a:82:8d:af:ab:eb:0c:fe:d6:9c:77:42:2f:d0:fb:06:
cc:ba:94:bd:a8:91:2c:98:c3:0a:ca:fe:5f:de:3c:99:a1:44:
5d:a8:34:94:7b:db:3f:b3:5a:8e:d3:1b:0a:f6:05:9c:30:8c:
61:fd:d7:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:07 2024 by rpki-client on console-ams.rpki-client.org