Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a326530313a3a2f34382d3438203d3e20343031333836.roa
File: 326131343a373538313a326530313a3a2f34382d3438203d3e20343031333836.roa (raw, json)
Hash identifier: 5mu6GNjT1yvzferjnAjXWKVFsiBcvLzqgYfa9EKNCYI=
Subject key identifier: CC:0B:8D:35:15:51:26:6E:8E:31:2D:33:38:6E:1A:B2:24:00:6E:52
Certificate issuer: /CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD
Certificate serial: 54208B0EA3E6B8997EF06F093ED3086B9CEFA6E6
Authority key identifier: AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a326530313a3a2f34382d3438203d3e20343031333836.roa
Signing time: Sun 15 Dec 2024 14:10:12 +0000
ROA not before: Sun 15 Dec 2024 14:05:12 +0000
ROA not after: Sun 14 Dec 2025 14:10:12 +0000
asID: 401386
IP address blocks: 2a14:7581:2e01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:20:8b:0e:a3:e6:b8:99:7e:f0:6f:09:3e:d3:08:6b:9c:ef:a6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD
Validity
Not Before: Dec 15 14:05:12 2024 GMT
Not After : Dec 14 14:10:12 2025 GMT
Subject: CN=CC0B8D351551266E8E312D33386E1AB224006E52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:00:86:42:47:d6:1e:f2:08:0a:45:60:3d:7a:
ec:dd:31:bb:5f:57:49:19:22:bd:15:cf:93:00:1c:
6f:65:2c:6b:5c:73:7d:8a:76:29:b5:38:42:c8:31:
03:6c:00:a6:6b:b6:c2:f7:d2:de:3f:7d:84:d2:2b:
18:5f:30:d8:0b:42:99:9d:dd:20:c3:6e:11:f0:8a:
87:53:d1:70:da:17:60:78:fa:e2:11:af:5e:54:c9:
1d:32:b5:07:97:7f:c5:70:fa:24:51:5d:05:64:be:
12:96:c9:91:14:1a:2a:8c:65:8b:77:9c:c8:0e:60:
c2:8e:14:9c:65:ab:e1:a3:1e:70:ab:21:f6:73:41:
41:0e:64:74:4b:ff:be:09:31:ba:42:24:24:fd:cb:
95:68:8d:20:cf:0d:ad:69:cd:fd:b4:75:87:ea:ea:
55:c7:e6:e5:0c:c8:16:7e:a0:c8:88:8c:aa:46:34:
6e:f9:c3:3a:e0:95:ec:a0:82:2d:46:b2:85:17:df:
91:81:6f:d0:0d:84:48:0a:68:df:86:85:a1:24:08:
5d:6f:2d:72:15:d7:48:c3:ef:50:0d:c5:e5:e5:f0:
e7:4d:8e:23:89:4c:3a:d8:cf:1e:70:76:5c:63:bd:
b6:97:82:ca:8a:68:98:47:a0:36:24:21:16:e6:00:
a6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0B:8D:35:15:51:26:6E:8E:31:2D:33:38:6E:1A:B2:24:00:6E:52
X509v3 Authority Key Identifier:
keyid:AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a326530313a3a2f34382d3438203d3e20343031333836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:2e01::/48
Signature Algorithm: sha256WithRSAEncryption
10:ab:b4:46:20:2f:0a:1b:95:8c:a1:0f:09:07:9d:05:27:9d:
9c:b2:7d:73:69:b8:60:a4:42:b1:0b:b6:64:e4:f2:2a:d9:29:
48:eb:74:30:f0:b4:1a:4c:53:37:0c:32:31:1b:a9:48:d4:fd:
11:60:54:2d:a4:8b:bd:bd:56:55:81:a0:50:d8:d5:aa:5a:a2:
10:c8:52:9d:01:92:d4:2c:fc:0b:4e:54:11:e0:95:00:74:7c:
e2:86:59:34:46:8a:89:b5:3d:f0:21:0b:6d:ba:be:29:b0:fd:
27:f1:94:7e:26:d1:7f:aa:fa:c7:63:02:40:eb:a0:1d:e4:28:
b0:d9:13:82:45:03:f8:58:30:6a:bb:ad:6b:32:10:65:e7:3a:
b2:18:a6:85:9b:6c:47:57:66:b7:fd:9b:5b:b6:b9:9e:21:70:
b7:98:19:a1:1f:cf:bf:80:51:a0:4e:c3:ce:4b:68:63:6a:db:
c3:01:bf:e3:ac:9c:ee:4c:82:c7:4b:f1:b6:c0:61:49:f5:33:
9c:0c:93:2c:6f:5c:8f:8a:b4:13:cc:b6:26:5a:f4:11:16:26:
a4:de:02:4f:f3:f1:fd:6b:8d:b4:16:7c:c8:65:33:2e:a5:1e:
e6:7a:22:61:93:b8:56:df:e6:9c:e6:55:9d:b7:18:e4:a3:3a:
06:c4:87:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:02 2025 by rpki-client