Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa
File: 326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa (raw, json)
Hash identifier: d85Du7DNvyLWzCRKR6UAK4BxtZR8aY0O/ltb7NM7kI0=
Subject key identifier: C9:4A:89:5A:75:33:A2:1B:E5:8A:E6:60:24:5D:76:9E:37:0A:93:09
Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Certificate serial: 603E7DB44A039D71A8C9345311786E701AA0DF22
Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa
Signing time: Sat 08 Mar 2025 15:48:59 +0000
ROA not before: Sat 08 Mar 2025 15:43:59 +0000
ROA not after: Sat 07 Mar 2026 15:48:59 +0000
asID: 199310
IP address blocks: 2a14:7580:d10::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:3e:7d:b4:4a:03:9d:71:a8:c9:34:53:11:78:6e:70:1a:a0:df:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Validity
Not Before: Mar 8 15:43:59 2025 GMT
Not After : Mar 7 15:48:59 2026 GMT
Subject: CN=C94A895A7533A21BE58AE660245D769E370A9309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d4:1e:93:1a:15:b0:a3:25:06:45:38:a6:6f:
f6:cb:4f:bd:a8:ef:90:a1:e9:b6:de:6c:11:24:06:
50:64:5c:81:ba:ea:1d:6e:d6:09:2f:c7:2d:68:1e:
7a:9f:23:ac:e5:23:87:ea:c4:59:93:8d:93:fd:f7:
bd:85:7f:a8:e7:1a:75:21:bd:6e:c2:8d:d0:8f:42:
0b:c5:52:08:30:68:0e:22:b2:c4:7c:8c:5b:e0:91:
d4:c1:d9:2f:eb:70:97:0b:66:d7:91:16:41:dd:8f:
13:29:c2:70:64:14:c9:82:e1:a2:20:ae:c8:19:ca:
e8:5b:cf:cc:c4:01:87:6c:29:48:7d:a0:ce:93:49:
80:a4:8e:48:b7:db:ef:d1:ef:b1:11:ec:fb:0e:0f:
15:4d:bc:35:a3:f1:f1:75:c5:18:6a:e3:9e:c0:8d:
e8:c9:55:e6:48:da:64:35:60:55:fa:e2:3b:b1:80:
16:23:d7:52:f8:b8:1a:6a:9f:be:ba:f8:19:ed:78:
00:37:c9:a4:eb:e5:d6:d9:b3:a1:49:74:37:2f:0b:
7c:40:3f:90:fc:37:c3:67:34:ea:68:f9:40:51:26:
b9:20:1b:f3:fb:28:78:b8:2a:3f:13:38:65:2d:f7:
56:a6:58:7b:92:b5:7c:96:e8:34:17:55:ff:6c:b9:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4A:89:5A:75:33:A2:1B:E5:8A:E6:60:24:5D:76:9E:37:0A:93:09
X509v3 Authority Key Identifier:
keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:d10::/44
Signature Algorithm: sha256WithRSAEncryption
3f:22:31:a1:12:48:aa:1f:4c:e1:c1:cb:d0:19:59:26:18:99:
68:d9:e9:08:67:50:31:90:49:8d:f3:7e:b0:a7:56:02:b6:db:
2f:aa:3f:11:f8:2d:c0:5b:61:e0:27:14:d5:62:c8:e3:92:89:
7d:36:17:38:a9:e8:d5:25:26:af:c4:65:61:c5:02:4a:3c:d1:
89:1b:bc:85:ef:12:d1:7c:c7:3f:e0:d2:c4:3d:58:6d:92:2d:
d1:a7:ba:76:e5:df:65:50:36:81:f3:ee:8b:c2:87:ff:1d:d2:
6f:71:de:bc:b3:b7:d5:71:ee:eb:49:81:c4:86:ba:d7:a6:eb:
d5:db:f3:9e:2f:86:25:07:96:c8:58:95:3f:78:9f:d1:9a:91:
34:83:aa:ef:b4:aa:48:4e:ba:1f:be:09:22:85:a4:0f:00:b5:
12:59:ea:fb:4f:f4:41:30:05:9a:11:ec:3a:6f:32:52:2d:96:
eb:b1:38:3c:0a:4f:34:ee:3a:e3:c5:ea:c9:0b:2b:f1:62:88:
85:fe:15:79:d8:c7:ec:b3:44:b8:68:b9:4e:37:7e:7a:b0:f0:
ce:5c:33:c6:e5:c1:ba:2f:ca:b7:31:44:24:44:cc:ec:0c:b2:
09:37:e9:72:a5:f1:dd:cf:c2:5c:bb:f2:70:77:98:93:63:dd:
43:6d:28:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:05:55 2025 by rpki-client