Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa
File: 326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa (raw, json)
Hash identifier: aLNGjeKxhB+lb52UO94MmUGLP8+twH+NGpyj/wZMn3g=
Subject key identifier: 62:82:50:6E:F9:D4:74:42:B8:BB:51:B4:0F:D1:70:E8:30:43:ED:A8
Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Certificate serial: 5B9CD6B9E00A12040177B1F9CB437E970F788C92
Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa
Signing time: Sat 08 Mar 2025 15:49:24 +0000
ROA not before: Sat 08 Mar 2025 15:44:24 +0000
ROA not after: Sat 07 Mar 2026 15:49:24 +0000
asID: 199310
IP address blocks: 2a14:7580:d00::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:9c:d6:b9:e0:0a:12:04:01:77:b1:f9:cb:43:7e:97:0f:78:8c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Validity
Not Before: Mar 8 15:44:24 2025 GMT
Not After : Mar 7 15:49:24 2026 GMT
Subject: CN=6282506EF9D47442B8BB51B40FD170E83043EDA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:3a:60:61:2d:ee:c4:26:7a:a7:b0:23:ae:
e5:f6:2b:0e:73:72:38:39:c5:59:83:e3:42:4b:9e:
be:76:aa:14:44:13:a2:48:6b:2e:4d:a5:56:4d:d6:
32:ff:d1:0d:8f:b9:1b:e8:37:09:ed:9e:3c:ef:4a:
ce:21:48:d2:76:16:63:cb:c2:da:1f:72:b6:63:92:
4f:a5:05:d5:ea:af:fa:48:3d:03:5d:94:3f:a4:1a:
2e:d7:8b:7c:4f:fa:78:0b:40:74:64:31:f5:ed:0d:
1f:74:df:b3:a1:ce:4e:6f:49:3f:0e:09:2a:a3:6f:
29:34:36:03:d0:54:1a:a4:aa:34:5b:8a:f4:ea:42:
79:a0:29:40:f8:a5:d3:59:4c:06:03:6c:2b:b8:70:
8d:8b:4f:a6:56:0f:0d:26:5b:32:26:51:b5:f0:a5:
71:74:8c:cb:31:08:67:56:0e:f6:28:5d:c7:91:5c:
dc:44:2d:e4:8a:dd:25:ab:bc:74:3b:db:f7:a3:cd:
04:6c:9b:f6:12:61:38:36:b0:b6:82:f6:45:dd:86:
2c:e8:3b:2c:3e:f6:ac:b2:60:2b:59:9b:db:0a:0b:
c5:86:a1:7e:64:d8:f8:d8:50:0e:e0:dd:f2:9f:cb:
b8:a6:69:04:dd:ad:fe:71:d0:05:b8:17:b2:a7:8e:
ed:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:82:50:6E:F9:D4:74:42:B8:BB:51:B4:0F:D1:70:E8:30:43:ED:A8
X509v3 Authority Key Identifier:
keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:d00::/44
Signature Algorithm: sha256WithRSAEncryption
2c:98:6d:3f:3d:5b:3b:72:89:a7:57:58:44:9b:d2:7c:6b:a6:
df:90:e4:d8:c3:65:62:a7:a1:11:23:f1:12:7b:0e:b0:99:fe:
fb:3e:a5:2f:29:8e:cf:b0:62:41:a9:b4:5a:38:02:d0:55:7d:
ef:c0:fc:10:c0:1a:69:23:df:6b:3b:d1:83:b3:cf:5d:54:83:
94:a4:19:03:7e:05:77:d6:18:a6:0a:a4:90:cd:2a:11:bb:23:
db:04:6b:a2:02:16:d4:f5:10:1c:0c:59:90:6d:da:d2:88:52:
f4:1a:31:ab:9b:3c:ab:c2:cc:cf:db:cd:4a:d7:81:8f:bb:63:
20:e7:0f:ab:d2:15:67:6c:9d:1f:2d:f1:ce:e3:44:16:8e:27:
5b:c7:ff:a2:d9:a7:c1:08:7a:78:07:ca:34:d2:b0:f3:6a:6d:
f1:41:0b:5f:bb:f1:13:9c:c0:db:a0:22:26:a7:f2:f6:cb:e6:
40:af:b5:72:0f:82:f4:1d:ba:49:39:de:1b:6b:4b:a4:fc:e1:
3b:0c:d5:f6:da:d3:27:87:50:fd:04:cf:59:2d:c5:b8:75:4c:
51:8c:67:02:93:fd:08:19:f5:ff:d4:f9:21:07:19:83:fd:36:
98:5f:43:bd:f7:a3:88:aa:7e:83:64:e8:0f:5b:22:7c:b3:23:
41:a6:51:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:05:08 2025 by rpki-client