Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3130303a3a2f34302d3430203d3e20323136343235.roa
File: 326130623a346530373a3130303a3a2f34302d3430203d3e20323136343235.roa (raw, json)
Hash identifier: kr5gz7B2MpCbE97ihpTuppAQqiLHm7BrDtUn3CksmAA=
Subject key identifier: E4:D0:BB:9E:2F:CC:0A:58:1A:BA:DE:6F:02:FB:88:43:9A:D3:55:43
Certificate issuer: /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial: 242A63E94D96AAE2B94D76193826D4C6DA7DB169
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3130303a3a2f34302d3430203d3e20323136343235.roa
Signing time: Thu 13 Feb 2025 14:17:06 +0000
ROA not before: Thu 13 Feb 2025 14:12:06 +0000
ROA not after: Thu 12 Feb 2026 14:17:06 +0000
asID: 216425
IP address blocks: 2a0b:4e07:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:2a:63:e9:4d:96:aa:e2:b9:4d:76:19:38:26:d4:c6:da:7d:b1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Validity
Not Before: Feb 13 14:12:06 2025 GMT
Not After : Feb 12 14:17:06 2026 GMT
Subject: CN=E4D0BB9E2FCC0A581ABADE6F02FB88439AD35543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:69:cc:d5:ae:12:14:2f:0a:5b:81:11:f5:
d4:00:92:12:00:fc:44:0d:85:3e:15:20:21:71:85:
fd:78:d6:c7:e7:94:08:51:95:68:d0:d9:fe:a1:fe:
03:81:81:2e:fc:fb:e8:bc:1c:24:9e:f7:ed:b2:84:
9f:c5:e4:a6:ce:03:a5:79:9c:d3:e5:c8:b2:9f:d3:
1c:84:32:6b:c0:95:8d:1c:0a:37:94:dd:4e:c7:02:
ae:fe:f8:c1:88:3d:7a:c5:00:cd:1d:4a:65:c1:61:
d5:e0:c7:12:90:56:a0:16:73:86:10:7f:ec:85:cf:
c1:d8:a5:e4:f4:1e:2c:06:47:16:b0:f2:52:b7:89:
61:f3:90:d8:c8:2b:93:dc:ac:42:0d:e5:a2:46:0a:
f9:9b:1d:9d:1d:96:78:80:22:75:35:a6:53:1d:32:
27:b8:5b:47:f5:a5:b6:64:a7:b5:9e:d3:88:c8:2e:
2c:fd:c7:4a:21:7f:6a:c1:d9:51:43:76:11:a1:e2:
ae:21:e2:9c:e8:37:07:7c:61:93:b4:1c:fa:77:74:
17:f4:00:5b:ad:10:51:f7:b3:cc:c0:4c:fb:44:78:
85:cb:2e:1c:c2:93:fe:ab:01:08:c0:f8:6c:05:17:
1e:a8:20:4a:1c:0f:fe:dc:1b:c7:21:ca:88:e6:a2:
bd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D0:BB:9E:2F:CC:0A:58:1A:BA:DE:6F:02:FB:88:43:9A:D3:55:43
X509v3 Authority Key Identifier:
keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3130303a3a2f34302d3430203d3e20323136343235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:100::/40
Signature Algorithm: sha256WithRSAEncryption
ac:fc:a1:1e:89:ba:d6:25:5d:72:43:f5:67:fa:47:f8:01:82:
ec:af:12:72:82:a8:1a:22:ce:f6:61:33:c8:eb:9e:f3:3e:d0:
5b:a6:f8:01:c2:54:a0:cc:d3:77:94:6a:38:82:d1:c7:03:1e:
45:ed:18:57:d2:20:9b:33:ce:e6:62:7f:aa:2b:2e:9a:d5:1c:
ee:28:9d:8f:9e:68:a9:f3:94:90:a0:6f:60:50:36:a3:71:53:
98:4a:ba:a7:43:f9:6f:38:c9:4d:fa:47:46:30:9c:16:1a:71:
cf:81:d3:79:14:08:0f:86:3d:5f:a4:ec:27:cb:24:4a:d2:90:
ea:c4:7e:bc:2e:f5:09:24:61:e6:04:00:ce:5f:02:43:cf:c6:
82:0e:aa:56:f1:84:46:a5:67:b5:70:81:92:c6:1b:6b:5c:6c:
1a:c8:96:bd:6f:58:a1:1f:4f:8b:79:8a:01:10:06:c6:39:02:
1d:30:05:47:c9:3c:ef:4f:61:c5:57:de:cb:48:17:be:aa:36:
9e:13:f7:c0:d8:0d:33:41:81:fa:e5:13:df:bc:29:76:07:62:
08:7d:71:7e:d8:b7:82:4b:48:70:0c:f9:f5:2d:55:96:1b:9f:
3f:46:a8:39:f3:d1:7b:82:5d:fb:bf:c7:e0:3a:36:10:92:45:
88:0f:34:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:51:20 2025 by rpki-client