Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/326130613a363034343a613130303a3a2f34342d3434203d3e20323134373537.roa
File: 326130613a363034343a613130303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier: jNPyKt4JuDqGeJ3T4y6W/0lkZmszICYHjQ3A0fgKNrY=
Subject key identifier: 47:FD:77:81:57:B7:AA:A7:53:25:76:54:B0:AC:79:C0:01:A2:24:21
Certificate issuer: /CN=BA1E57809F341A79CDDA255B18E19FA068FA270F
Certificate serial: 659396EE837DDB595C3F794C1790907A41A9858B
Authority key identifier: BA:1E:57:80:9F:34:1A:79:CD:DA:25:5B:18:E1:9F:A0:68:FA:27:0F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BA1E57809F341A79CDDA255B18E19FA068FA270F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/326130613a363034343a613130303a3a2f34342d3434203d3e20323134373537.roa
Signing time: Sat 11 Jan 2025 20:19:17 +0000
ROA not before: Sat 11 Jan 2025 20:14:17 +0000
ROA not after: Sat 10 Jan 2026 20:19:17 +0000
asID: 214757
IP address blocks: 2a0a:6044:a100::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:93:96:ee:83:7d:db:59:5c:3f:79:4c:17:90:90:7a:41:a9:85:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA1E57809F341A79CDDA255B18E19FA068FA270F
Validity
Not Before: Jan 11 20:14:17 2025 GMT
Not After : Jan 10 20:19:17 2026 GMT
Subject: CN=47FD778157B7AAA753257654B0AC79C001A22421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:37:42:58:34:7f:7e:75:08:cc:ff:f1:41:
5a:a2:37:9b:1a:93:54:93:be:d1:21:fa:18:ca:a8:
91:31:4e:95:29:20:4d:21:1a:75:d7:98:ef:c8:d9:
79:1c:58:7b:c6:4d:9a:d0:c1:ca:f6:bf:4e:77:a6:
08:2b:06:ac:04:3f:95:68:ae:bf:92:a6:01:85:81:
a9:f7:6f:4f:c1:8a:bb:e2:ae:25:24:60:a4:87:62:
69:ae:93:1a:18:1f:3e:9a:0e:8e:d7:cd:87:eb:f7:
b3:56:22:af:f5:69:0b:65:7a:c6:aa:2b:37:d0:33:
3c:9b:59:b2:0e:d9:47:bf:38:c9:db:da:ff:c2:5e:
92:85:21:a0:00:74:2b:77:c5:1f:fe:d8:63:eb:c2:
3a:69:40:6b:b2:d6:2a:ab:9d:11:53:ff:40:43:a4:
c7:fb:1f:01:f2:12:32:e5:2d:b4:8c:bf:60:eb:e7:
68:f1:f7:37:c1:7e:a0:87:5b:e4:f0:f3:5c:52:60:
b7:87:86:f3:85:9e:08:41:b1:16:33:5c:7d:75:8f:
be:e0:2d:87:81:61:90:73:5b:53:f7:93:45:84:19:
b9:e9:cf:46:07:ed:d1:19:44:1b:67:b9:da:5b:ca:
70:c3:f0:7a:fa:40:68:ef:9c:7d:22:ba:40:e7:a4:
49:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FD:77:81:57:B7:AA:A7:53:25:76:54:B0:AC:79:C0:01:A2:24:21
X509v3 Authority Key Identifier:
keyid:BA:1E:57:80:9F:34:1A:79:CD:DA:25:5B:18:E1:9F:A0:68:FA:27:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/BA1E57809F341A79CDDA255B18E19FA068FA270F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BA1E57809F341A79CDDA255B18E19FA068FA270F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/326130613a363034343a613130303a3a2f34342d3434203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a100::/44
Signature Algorithm: sha256WithRSAEncryption
a8:74:ce:7a:e9:3d:e2:ab:7a:e4:91:8a:df:e6:ef:5e:b2:ab:
3d:a3:80:52:98:b4:38:3a:71:90:27:4a:a3:9d:74:14:b1:d0:
00:a6:df:94:51:fd:39:a4:7d:73:45:6e:0c:1c:0d:36:82:88:
b6:da:13:0e:b2:8a:85:57:c2:65:88:78:c5:c7:5b:37:60:f4:
e5:03:0c:bf:13:e3:92:ce:3a:cd:1c:a3:bc:be:b3:c7:3b:c6:
a8:61:37:fe:38:25:20:25:b5:95:4c:46:1c:a8:cf:00:0d:7f:
06:7a:80:b8:73:d1:03:12:d1:bc:58:b1:16:c3:e2:92:58:4e:
75:7f:70:9d:c3:ab:9e:f7:28:86:47:e2:ea:a3:d9:a5:ad:a6:
f6:83:e5:1a:94:a8:46:27:17:79:2b:37:58:f6:0c:79:17:bb:
6d:14:05:54:a4:7c:6a:27:4e:72:23:c5:73:94:71:1e:d9:b9:
62:ea:7d:15:4c:6e:20:4d:16:31:38:26:2d:1c:cc:cc:86:fa:
5a:6c:a4:21:98:5a:5e:e6:46:a6:99:c6:cf:20:4d:82:7a:33:
dc:af:92:ad:a9:e0:2c:e7:ea:e4:43:b6:10:78:3f:68:f8:58:
6f:a1:7f:b3:86:e7:c7:b2:b7:48:47:e4:de:8c:9e:68:69:cd:
93:02:60:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:36 2025 by rpki-client