
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030393a3a2f34382d3438203d3e20323135323030.roa
File: 326131343a373538313a313030393a3a2f34382d3438203d3e20323135323030.roa (raw, json)
Hash identifier: 1FaufrcLIFo4XDZKQMbTC9NTREnJtH4H7Fy28AcR59s=
Subject key identifier: E2:A4:6C:DC:54:4F:82:E7:9D:75:40:0C:A3:B5:06:BB:30:57:23:BA
Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11
Certificate serial: 73E6A542986DC81511A416B6FAEB24DC38EFD746
Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030393a3a2f34382d3438203d3e20323135323030.roa
Signing time: Mon 02 Dec 2024 09:57:51 +0000
ROA not before: Mon 02 Dec 2024 09:52:51 +0000
ROA not after: Mon 01 Dec 2025 09:57:51 +0000
asID: 215200
IP address blocks: 2a14:7581:1009::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:e6:a5:42:98:6d:c8:15:11:a4:16:b6:fa:eb:24:dc:38:ef:d7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11
Validity
Not Before: Dec 2 09:52:51 2024 GMT
Not After : Dec 1 09:57:51 2025 GMT
Subject: CN=E2A46CDC544F82E79D75400CA3B506BB305723BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f7:3f:ec:92:9f:07:27:2b:ad:41:9a:7c:90:
37:cb:27:cd:c3:58:7d:21:61:eb:b8:73:2a:c7:7f:
b2:03:e7:fb:3d:9e:6b:ff:98:46:bf:4f:aa:34:cb:
c9:49:20:93:d1:86:2b:59:12:9f:f1:0f:16:25:fa:
3a:a0:5b:7f:ee:cb:60:22:a1:a3:e6:bb:20:4e:a0:
f7:e9:ea:b8:00:bd:b0:92:1d:a7:03:ed:14:73:0e:
c6:f3:df:80:3c:f4:2c:fe:71:99:c1:d5:2b:c3:62:
03:a5:96:33:b5:2a:5c:ff:0e:db:01:14:93:70:95:
1e:63:bb:d5:62:87:8b:c7:5d:81:e7:30:f8:9e:2c:
27:51:c5:6b:50:0e:56:32:d8:80:c4:fe:c4:2e:af:
93:95:e2:06:72:e3:04:37:83:25:81:c0:00:e5:b9:
30:d8:b6:2c:cf:46:da:b8:c2:a6:6b:1d:a8:e1:e8:
54:a4:7f:b4:9c:6f:b1:a1:7e:7f:65:e6:76:2c:1f:
cc:c9:12:c5:0d:d0:ff:8c:5b:fd:65:ca:e1:e9:f0:
17:25:7c:3d:8a:6b:41:3a:29:c6:71:ad:06:cb:f3:
2b:e5:6c:5e:17:11:27:c7:db:e1:e5:fa:34:b1:dd:
51:05:9a:23:44:5f:5b:f7:84:ad:a1:e5:a8:f8:4c:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A4:6C:DC:54:4F:82:E7:9D:75:40:0C:A3:B5:06:BB:30:57:23:BA
X509v3 Authority Key Identifier:
keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030393a3a2f34382d3438203d3e20323135323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:1009::/48
Signature Algorithm: sha256WithRSAEncryption
19:68:b4:8b:23:93:12:2c:88:f6:af:d3:a8:51:9e:35:95:ab:
fe:e9:52:3f:59:b2:7a:d1:6c:92:6a:05:5c:79:77:c9:2c:31:
79:73:53:43:da:bc:84:69:9a:50:7a:af:55:d6:f6:9b:2b:07:
0f:09:97:a4:7a:04:cc:64:21:93:f0:39:7a:af:fa:6c:58:f9:
cd:4c:ba:8a:a4:3a:03:f5:6f:5f:91:a2:51:7f:e4:b1:99:fb:
9a:55:fd:42:9b:e2:d9:ad:da:02:67:a0:00:96:bf:7b:97:6b:
21:3a:e9:c6:1b:52:55:09:18:33:7c:4d:77:77:18:ed:dc:3d:
e9:9e:29:6d:35:03:a1:ed:d9:1c:2a:6f:ef:7a:a9:01:96:e5:
62:9a:75:3e:b9:e4:85:a0:b9:e0:1b:33:0f:78:61:ff:ef:53:
31:01:bc:69:c2:95:5f:47:77:01:65:4d:e1:a2:fa:57:1e:6f:
df:f2:01:c3:a6:2c:6c:25:d8:73:55:ec:6f:74:e5:b5:d9:a3:
07:9f:bc:30:22:c6:35:48:3e:ef:95:ef:5e:77:92:d5:d0:c3:
1f:70:d0:04:b8:de:6f:05:87:e4:24:76:64:75:bf:00:37:49:
55:9f:f9:73:74:58:0f:20:c1:79:c9:d5:eb:2a:83:c0:ce:9f:
fb:0c:6e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:23:52 2025 by rpki-client