Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333830363a3a2f34382d3438203d3e20323136333735.roa
File: 326131333a646638303a333830363a3a2f34382d3438203d3e20323136333735.roa (raw, json)
Hash identifier: Y6xh/UsFvorUKReeUpCNahB4exMLOKIE0BqtqeNfo4g=
Subject key identifier: 70:F3:29:55:B4:94:28:89:4F:32:2C:E4:77:44:BF:20:F0:98:AD:A4
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 61DC8BD5D1183732DE36D49BC530922C9B03D9C2
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333830363a3a2f34382d3438203d3e20323136333735.roa
Signing time: Sat 02 Sep 2023 09:53:53 +0000
ROA not before: Sat 02 Sep 2023 09:48:53 +0000
ROA not after: Sat 31 Aug 2024 09:53:53 +0000
asID: 216375
IP address blocks: 2a13:df80:3806::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:dc:8b:d5:d1:18:37:32:de:36:d4:9b:c5:30:92:2c:9b:03:d9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Sep 2 09:48:53 2023 GMT
Not After : Aug 31 09:53:53 2024 GMT
Subject: CN=70F32955B49428894F322CE47744BF20F098ADA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:34:68:45:c3:13:d8:a4:c9:74:ea:e2:c9:
3f:1f:29:8d:9f:67:52:37:e3:62:3e:a6:24:7f:ad:
36:e2:bf:e3:ae:9c:47:ab:dd:8c:77:ef:91:82:f3:
e1:2f:7f:02:38:02:80:2d:61:c9:aa:67:b1:67:ce:
a0:8b:0e:e9:14:85:42:6a:9a:44:3e:3f:8a:04:84:
20:8d:1c:99:17:2d:46:93:15:55:9e:6a:33:be:5b:
c1:d6:0c:31:ab:e7:dd:26:30:1f:10:75:17:dd:a7:
1d:0e:22:07:0a:dd:2e:97:9a:14:78:1c:7c:14:9b:
cb:04:da:17:22:dd:c5:a3:35:25:31:6a:3e:70:32:
7f:6a:cf:f3:5b:bd:0e:24:90:1c:49:b8:9b:cf:a7:
14:a5:0f:88:de:cc:8a:12:4f:f3:5c:cd:5d:c7:57:
02:50:cc:97:65:75:b9:f7:a2:8e:ba:0b:4a:f7:16:
47:03:b8:82:2f:ce:b9:2b:90:04:f0:57:94:ff:49:
18:54:d3:8b:c0:ea:ab:c6:96:e2:ef:07:41:13:b4:
ef:ef:69:07:38:1c:53:66:5d:20:fa:a6:45:5f:3b:
b9:61:db:3a:fd:0b:9f:e5:b9:51:e8:41:f7:2c:1a:
26:30:48:5b:ba:b4:53:61:06:99:8a:65:e8:cc:cb:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F3:29:55:B4:94:28:89:4F:32:2C:E4:77:44:BF:20:F0:98:AD:A4
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333830363a3a2f34382d3438203d3e20323136333735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:3806::/48
Signature Algorithm: sha256WithRSAEncryption
a0:95:07:07:46:6e:7a:9a:02:dc:30:f4:ed:b5:32:bf:ce:69:
87:a9:91:64:3a:90:bf:14:cc:3e:31:2e:13:0c:af:1d:a0:97:
3f:63:84:92:f5:d4:bf:e7:9d:df:eb:dd:a9:57:9b:07:13:b7:
c0:2e:6f:eb:48:50:bc:96:67:8f:83:3c:54:9b:73:f1:8b:0c:
c4:c4:49:95:78:08:27:bd:c8:67:67:10:2b:d3:ce:b0:13:18:
85:cf:1f:44:8b:8c:0a:e8:85:5c:9c:56:f1:c5:8b:87:fe:a5:
9d:fd:08:69:55:04:cb:aa:35:0f:88:4d:d8:e4:ef:e5:4d:b4:
ff:b1:c8:4f:3a:14:f1:4f:36:f0:c1:4b:82:10:65:19:26:90:
e9:69:1f:e0:c1:55:10:20:af:0d:df:1f:1a:43:f2:77:2d:2b:
07:cd:59:99:2a:4a:7b:f8:57:a7:e1:70:12:cb:e1:c1:4e:ab:
5d:bb:da:ac:87:6a:2e:d3:be:fb:dd:3b:63:56:8a:96:a1:4f:
39:80:8c:39:b1:0f:e1:04:5c:6b:94:56:c8:fb:1d:82:56:94:
90:bb:95:36:02:2e:53:79:c9:cf:55:8f:ec:9e:d1:d6:e1:6f:
32:ac:1e:0a:87:eb:e6:bf:aa:75:5c:8f:48:88:28:20:fe:10:
08:e0:ed:9d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUYdyL1dEYNzLeNtSbxTCSLJsD2cIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yMzA5MDIwOTQ4NTNaFw0yNDA4MzEwOTUzNTNaMDMxMTAvBgNV
BAMTKDcwRjMyOTU1QjQ5NDI4ODk0RjMyMkNFNDc3NDRCRjIwRjA5OEFEQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7YjRoRcMT2KTJdOriyT8fKY2f
Z1I342I+piR/rTbiv+OunEer3Yx375GC8+EvfwI4AoAtYcmqZ7FnzqCLDukUhUJq
mkQ+P4oEhCCNHJkXLUaTFVWeajO+W8HWDDGr590mMB8QdRfdpx0OIgcK3S6XmhR4
HHwUm8sE2hci3cWjNSUxaj5wMn9qz/NbvQ4kkBxJuJvPpxSlD4jezIoST/NczV3H
VwJQzJdldbn3oo66C0r3FkcDuIIvzrkrkATwV5T/SRhU04vA6qvGluLvB0ETtO/v
aQc4HFNmXSD6pkVfO7lh2zr9C5/luVHoQfcsGiYwSFu6tFNhBpmKZejMy4YXAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUcPMpVbSUKIlPMizkd0S/IPCYraQwHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYt
MWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYxNjdkLzAvMzI2MTMxMzMzYTY0NjYzODMw
M2EzMzM4MzAzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNjMzMzczNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoT34A4BjANBgkqhkiG9w0BAQsFAAOCAQEAoJUHB0ZuepoC3DD0
7bUyv85ph6mRZDqQvxTMPjEuEwyvHaCXP2OEkvXUv+ed3+vdqVebBxO3wC5v60hQ
vJZnj4M8VJtz8YsMxMRJlXgIJ73IZ2cQK9POsBMYhc8fRIuMCuiFXJxW8cWLh/6l
nf0IaVUEy6o1D4hN2OTv5U20/7HITzoU8U828MFLghBlGSaQ6Wkf4MFVECCvDd8f
GkPydy0rB81ZmSpKe/hXp+FwEsvhwU6rXbvarIdqLtO++907Y1aKlqFPOYCMObEP
4QRca5RWyPsdglaUkLuVNgIuU3nJz1WP7J7R1uFvMqweCofr5r+qdVyPSIgoIP4Q
CODtnQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:38:04 2025 by rpki-client