Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3161323a3a2f34382d3438203d3e20323135363137.roa
File: 326131343a373538313a3161323a3a2f34382d3438203d3e20323135363137.roa (raw, json)
Hash identifier: jAzASY0zBba/69XbyHEKI96Xc4QI5rYdEmElleWGPrQ=
Subject key identifier: 4E:F3:9E:F3:A3:41:56:5E:12:A5:58:99:F0:99:D7:9C:5F:AC:E9:1A
Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11
Certificate serial: 0AE8C699835F4FAE33C942F3B8E6DF1D72947122
Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3161323a3a2f34382d3438203d3e20323135363137.roa
Signing time: Mon 09 Dec 2024 13:20:08 +0000
ROA not before: Mon 09 Dec 2024 13:15:08 +0000
ROA not after: Mon 08 Dec 2025 13:20:08 +0000
asID: 215617
IP address blocks: 2a14:7581:1a2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:e8:c6:99:83:5f:4f:ae:33:c9:42:f3:b8:e6:df:1d:72:94:71:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11
Validity
Not Before: Dec 9 13:15:08 2024 GMT
Not After : Dec 8 13:20:08 2025 GMT
Subject: CN=4EF39EF3A341565E12A55899F099D79C5FACE91A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e7:b2:62:b2:42:23:9d:44:58:78:6a:c6:c5:
18:be:9f:92:e6:be:69:35:64:15:02:56:92:cc:2a:
c1:96:a9:78:d7:3a:07:1e:f9:de:62:74:5f:ac:5f:
81:cb:b8:b3:db:7a:16:5e:3f:88:9b:fa:f8:17:56:
1d:1a:d3:cd:99:4d:fe:05:6b:ec:2d:fa:f2:d2:9d:
45:fb:1a:b0:07:2c:67:44:76:da:75:22:81:13:21:
c4:01:c3:5f:b8:ea:85:ef:25:11:c9:69:27:d7:08:
8f:de:55:d1:c1:5a:9e:30:10:41:85:47:cf:2a:87:
13:bc:51:17:3b:eb:37:42:80:88:1a:70:ee:8d:d0:
09:94:17:75:d9:ef:a0:11:c5:32:c7:d8:98:03:ad:
6e:11:ac:ed:cd:f8:60:d8:b4:8e:34:de:0f:d5:0b:
d8:9a:67:0f:81:24:c0:63:73:16:01:d3:8b:66:33:
0e:9c:1a:4d:f6:26:ba:65:1d:2f:37:ce:8b:a6:82:
d7:27:10:8a:7b:b4:ba:57:f8:1f:ea:99:35:3b:93:
91:71:66:06:47:14:e5:d1:64:bf:0c:9c:52:f5:29:
41:29:dc:25:68:ee:7c:78:d8:14:62:4a:f1:e7:75:
a0:6e:a3:7e:17:d5:6f:23:92:9e:e9:4c:3c:f8:56:
8f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F3:9E:F3:A3:41:56:5E:12:A5:58:99:F0:99:D7:9C:5F:AC:E9:1A
X509v3 Authority Key Identifier:
keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3161323a3a2f34382d3438203d3e20323135363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:1a2::/48
Signature Algorithm: sha256WithRSAEncryption
38:d0:a8:29:53:bd:d5:87:5e:54:9a:a0:3d:21:1d:9e:64:44:
d0:ab:97:85:58:6d:49:7e:f6:2e:38:c8:3d:5a:df:e1:fc:f5:
36:59:0c:61:16:ba:66:ad:49:31:4d:cc:c1:a9:b5:19:27:e4:
85:e1:51:de:a9:c4:2e:25:4b:15:5f:c7:d6:51:3d:bc:37:fe:
a8:2a:06:ff:e5:cf:95:10:05:ec:ce:af:ef:18:25:4e:04:ff:
36:ef:09:84:ed:71:a2:87:6c:5a:80:88:9c:f0:7c:ab:d9:cd:
2d:c4:e9:1e:49:97:0e:26:12:8e:b4:a0:4b:98:0d:c3:dd:84:
09:1a:d2:11:f9:c0:9d:6a:3d:e3:51:29:be:82:60:a6:12:d0:
fc:00:70:dc:d8:f4:5a:f6:3a:77:a7:0b:9d:3f:78:3c:2d:ea:
43:5d:cb:37:78:9c:4b:a8:42:28:09:63:86:96:a2:f5:c6:f6:
17:57:c9:9c:ec:cd:48:6f:c0:0a:a0:ff:a0:70:ef:b1:96:8f:
69:d5:c2:a8:17:97:88:05:e8:e2:ae:69:c2:00:77:e3:af:37:
9d:b5:9c:22:3f:7e:15:0d:d7:7d:4a:3f:13:6a:2c:f6:3d:85:
71:7c:1d:94:cc:eb:60:ec:f9:b3:67:29:85:aa:f2:3b:d6:50:
89:f5:2a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:47 2025 by rpki-client