Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/326130613a363034343a613132303a3a2f34342d3434203d3e20323134373537.roa
File: 326130613a363034343a613132303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier: xTzkrtFrC+vkguWP2F1O6+HXGsxd8P+I0T00QzokpWc=
Subject key identifier: C6:E8:63:77:AB:04:24:39:8E:A0:22:18:4D:7A:BD:4A:F2:D4:CA:51
Certificate issuer: /CN=BA1E57809F341A79CDDA255B18E19FA068FA270F
Certificate serial: 73281FF4DEE2583E680DEC6616447F30A81D061B
Authority key identifier: BA:1E:57:80:9F:34:1A:79:CD:DA:25:5B:18:E1:9F:A0:68:FA:27:0F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BA1E57809F341A79CDDA255B18E19FA068FA270F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/326130613a363034343a613132303a3a2f34342d3434203d3e20323134373537.roa
Signing time: Sat 11 Jan 2025 20:19:36 +0000
ROA not before: Sat 11 Jan 2025 20:14:36 +0000
ROA not after: Sat 10 Jan 2026 20:19:36 +0000
asID: 214757
IP address blocks: 2a0a:6044:a120::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:28:1f:f4:de:e2:58:3e:68:0d:ec:66:16:44:7f:30:a8:1d:06:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA1E57809F341A79CDDA255B18E19FA068FA270F
Validity
Not Before: Jan 11 20:14:36 2025 GMT
Not After : Jan 10 20:19:36 2026 GMT
Subject: CN=C6E86377AB0424398EA022184D7ABD4AF2D4CA51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:85:9b:d9:85:aa:fb:6d:8b:2f:9b:9e:51:
c7:b3:df:3e:77:a5:b8:d7:5d:4f:80:b4:7c:91:5e:
ef:68:97:20:02:d4:1c:cc:c0:1e:f7:87:d3:7e:b4:
46:18:5f:0f:99:c3:1b:3a:f9:91:29:cc:d5:70:ce:
88:64:ed:84:95:30:56:85:d2:0f:5d:1e:a4:0b:1b:
ab:a1:42:af:28:47:1f:c5:aa:1a:f1:53:ac:fe:d4:
86:19:28:ae:17:81:81:42:19:c6:f4:02:d8:a7:7a:
50:a5:17:27:62:1d:bb:0d:f2:81:5d:2e:08:da:14:
c9:07:11:0b:a2:d6:01:bc:50:ac:74:48:42:48:5c:
ad:7c:3a:5e:bc:8f:8b:ad:e7:ff:0a:c4:e4:2c:71:
48:ea:ae:e6:6c:1d:c1:87:47:fc:e0:18:0a:a3:2d:
e4:f9:b6:8d:b7:82:0a:e7:21:f6:42:d6:8c:bc:02:
db:cb:5b:c7:13:c9:0f:ae:7a:0d:e4:17:21:ac:f6:
5b:8d:72:82:2f:7c:99:f0:e1:e9:0f:39:7a:73:ed:
86:2d:73:8b:b2:22:aa:6c:53:9c:e1:44:4e:05:c8:
09:ba:2f:22:c6:85:6f:ec:b2:ce:cc:2e:af:fa:da:
d1:a2:ac:79:93:1a:ee:ee:ab:fc:95:0d:6c:44:a0:
f3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E8:63:77:AB:04:24:39:8E:A0:22:18:4D:7A:BD:4A:F2:D4:CA:51
X509v3 Authority Key Identifier:
keyid:BA:1E:57:80:9F:34:1A:79:CD:DA:25:5B:18:E1:9F:A0:68:FA:27:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/BA1E57809F341A79CDDA255B18E19FA068FA270F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BA1E57809F341A79CDDA255B18E19FA068FA270F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/326130613a363034343a613132303a3a2f34342d3434203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a120::/44
Signature Algorithm: sha256WithRSAEncryption
4e:35:40:37:16:77:69:ed:92:5c:19:54:e1:bc:89:81:e0:81:
e6:59:dd:ae:19:1e:5f:f1:0a:4e:2f:74:7d:7c:d6:d4:24:84:
b1:93:68:54:5e:37:b5:de:92:cb:63:3c:9f:12:d2:7a:66:e6:
f3:18:94:00:21:1f:ef:5f:da:18:7d:37:db:59:73:aa:71:b2:
b7:86:c3:e7:42:8c:c4:83:35:df:d6:24:af:b1:86:b6:fe:3c:
e9:ad:f3:65:b0:53:61:d4:0c:05:3f:c1:b0:d3:4a:ac:57:3a:
24:0b:de:81:91:37:76:50:48:7e:3d:bc:63:66:86:90:20:e4:
e8:cd:56:a3:5d:82:c4:4b:ec:a9:15:6f:58:27:a1:db:05:3d:
e3:f4:ae:73:a0:7d:2c:c2:51:25:b7:3c:09:64:66:40:b7:ab:
d2:e1:bf:ff:a8:79:b3:22:a8:44:e7:0d:10:c2:51:17:b8:37:
0f:89:1b:e7:20:8e:aa:77:f1:e8:ee:17:37:dd:84:ad:42:12:
2c:ac:56:bc:44:72:3f:18:e6:05:81:ee:d8:f3:07:f3:88:c0:
50:a1:30:bc:3a:1a:ff:47:e5:f7:e7:29:4b:fd:e0:84:9e:36:
d9:40:8d:e4:3b:9e:0f:1d:e2:7a:25:8d:ac:3c:4a:13:b7:21:
1f:78:db:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:53 2025 by rpki-client