Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a326530323a3a2f34382d3438203d3e20343031333836.roa
File: 326131343a373538313a326530323a3a2f34382d3438203d3e20343031333836.roa (raw, json)
Hash identifier: xqsTVwI7dy20JrpqJUx4vZAToYdLhi49f2W75ub7Dos=
Subject key identifier: D7:1C:AF:7E:F1:B3:A8:D5:32:15:6A:29:3C:E0:20:CE:6D:EC:FD:D6
Certificate issuer: /CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD
Certificate serial: 3C8772F8A40B6526BE6767C5A20B23057BCA149C
Authority key identifier: AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a326530323a3a2f34382d3438203d3e20343031333836.roa
Signing time: Sun 15 Dec 2024 14:10:41 +0000
ROA not before: Sun 15 Dec 2024 14:05:41 +0000
ROA not after: Sun 14 Dec 2025 14:10:41 +0000
asID: 401386
IP address blocks: 2a14:7581:2e02::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:87:72:f8:a4:0b:65:26:be:67:67:c5:a2:0b:23:05:7b:ca:14:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD
Validity
Not Before: Dec 15 14:05:41 2024 GMT
Not After : Dec 14 14:10:41 2025 GMT
Subject: CN=D71CAF7EF1B3A8D532156A293CE020CE6DECFDD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:09:2c:bd:9c:5c:32:2c:c4:86:4f:ef:b6:
ec:d1:78:a9:50:3b:37:db:32:68:57:74:37:d8:e0:
8e:d1:97:82:e8:1b:b7:b8:0c:0a:0d:49:45:e3:87:
68:57:56:6f:d0:cf:ba:c2:ce:7b:67:f6:06:09:94:
2a:bb:da:b9:8f:2c:4c:34:e4:0f:7a:f6:e2:3a:49:
c3:dd:f3:45:b0:8b:54:cf:26:ce:0d:05:0a:21:fc:
18:8f:71:04:f1:b8:76:61:39:28:76:ea:ac:7e:aa:
f3:4a:2a:d2:4f:25:cd:43:ba:6f:26:c5:ff:83:6f:
e9:16:69:4f:cc:9e:68:c2:88:3e:8e:06:33:e6:4d:
b7:bb:6f:9f:bc:dc:15:69:1f:1d:00:79:85:33:f5:
83:bb:42:86:1a:df:5d:97:1b:13:ac:34:31:45:a6:
be:6b:78:b9:69:e0:9a:a3:d0:d5:6d:56:a5:92:61:
26:ac:8e:1c:70:6c:ad:66:44:b0:11:0c:c8:3f:b2:
cf:fd:ee:99:e5:28:70:cf:d0:21:0e:95:aa:f1:bc:
43:bf:20:6e:3a:31:7a:cc:9c:83:af:86:9b:2f:05:
0f:19:ba:ce:30:13:2e:38:c2:27:97:02:0a:d3:2d:
46:b4:42:0b:66:c8:a0:f0:50:bb:d8:35:42:74:91:
8a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1C:AF:7E:F1:B3:A8:D5:32:15:6A:29:3C:E0:20:CE:6D:EC:FD:D6
X509v3 Authority Key Identifier:
keyid:AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a326530323a3a2f34382d3438203d3e20343031333836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:2e02::/48
Signature Algorithm: sha256WithRSAEncryption
6f:a7:32:51:d1:9e:09:2d:80:3b:27:3f:54:59:d6:5e:be:ee:
c0:25:74:32:f1:ea:57:80:7b:c3:0c:22:92:e8:91:26:2c:20:
9a:c4:29:01:9c:1e:a8:1f:60:56:65:1d:93:00:f1:6e:ff:78:
b1:78:81:f8:5a:f6:49:1c:3b:32:ed:8d:2d:85:cf:b8:49:f0:
8a:38:48:53:d3:c2:c8:7f:b0:86:aa:20:bb:27:1a:11:ce:97:
c6:96:4b:23:7d:ed:da:58:d6:38:eb:94:97:54:32:d7:00:56:
9b:90:39:39:40:50:80:ac:58:de:7e:d3:05:04:46:ce:e8:d2:
aa:d8:11:30:97:33:3f:b9:9d:92:ca:46:41:75:43:e1:89:ee:
81:d4:ee:63:34:45:89:86:05:55:f7:f1:e9:d5:2e:24:f4:c3:
75:16:b2:ec:3d:ea:8c:32:11:56:a6:18:d3:27:ee:28:76:cd:
e7:2b:4c:1c:32:ed:40:2f:e4:65:b0:58:d9:05:d9:e1:3e:aa:
f3:30:68:26:9e:77:94:99:87:b5:b6:ea:f4:39:41:96:55:30:
b3:cf:75:bc:f3:19:66:71:5a:99:5c:56:bc:fe:32:5f:41:23:
bf:d2:f3:82:1d:4e:71:c4:d0:8c:b7:81:36:f1:52:2b:6d:ca:
01:2a:8b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:50 2025 by rpki-client