Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/326130363a313238313a373038303a3a2f34342d3434203d3e20323134393836.roa
File: 326130363a313238313a373038303a3a2f34342d3434203d3e20323134393836.roa (raw, json)
Hash identifier: 5AyW46QS+NNXmeLlk9GX6u+j5sEm8yE34btc4wy6pFU=
Subject key identifier: 0A:94:89:BB:10:10:D3:5E:76:AC:5B:31:EB:4F:38:8D:55:C7:2C:04
Certificate issuer: /CN=E472D821C14C9E0738F632D7A74DF516C446A5E2
Certificate serial: 387F9D8435B15553B3C0BA47545BB786167B584D
Authority key identifier: E4:72:D8:21:C1:4C:9E:07:38:F6:32:D7:A7:4D:F5:16:C4:46:A5:E2
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/326130363a313238313a373038303a3a2f34342d3434203d3e20323134393836.roa
Signing time: Tue 01 Oct 2024 16:16:28 +0000
ROA not before: Tue 01 Oct 2024 16:11:28 +0000
ROA not after: Tue 30 Sep 2025 16:16:28 +0000
asID: 214986
IP address blocks: 2a06:1281:7080::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:7f:9d:84:35:b1:55:53:b3:c0:ba:47:54:5b:b7:86:16:7b:58:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E472D821C14C9E0738F632D7A74DF516C446A5E2
Validity
Not Before: Oct 1 16:11:28 2024 GMT
Not After : Sep 30 16:16:28 2025 GMT
Subject: CN=0A9489BB1010D35E76AC5B31EB4F388D55C72C04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:0c:e4:c9:76:b9:50:2f:79:25:e1:ec:91:
17:ec:f7:b1:ab:c9:0d:98:7c:07:6b:6f:b6:5b:5b:
93:18:35:38:57:94:0f:1a:c9:ab:75:5e:30:a0:68:
0b:c7:2a:0b:76:8d:02:96:1b:9d:ff:df:bf:bb:9c:
91:1d:fa:a2:d8:1f:17:1b:bf:06:e1:30:37:20:cd:
f3:0a:24:e1:ad:cf:ab:d6:0f:02:39:44:16:b2:8e:
7c:87:0c:41:ab:76:09:e6:89:13:e5:91:23:47:45:
ee:a5:0f:20:67:92:b0:93:59:72:74:60:e8:c9:4d:
6e:65:a7:c5:aa:f7:da:1f:84:c8:cf:34:e6:c6:81:
dd:7a:76:f5:4d:24:4e:00:a6:6d:35:46:59:b5:f0:
2a:24:4f:7d:25:96:63:b1:d9:69:7d:6e:48:95:12:
1f:2e:0c:0a:25:29:f5:2d:46:a7:47:c9:f4:81:34:
ed:78:52:98:80:5b:81:dc:5b:51:f4:f9:b6:99:91:
60:01:6b:fa:8c:6a:11:25:1e:30:d3:93:65:b9:df:
42:47:1d:f8:98:cb:ab:54:56:51:85:57:20:1b:91:
8c:db:cf:1c:cd:1f:cf:a5:f8:b1:3e:b4:2f:57:c7:
fb:e0:7d:9d:a6:13:e8:56:84:e5:ab:eb:e4:87:1d:
56:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:94:89:BB:10:10:D3:5E:76:AC:5B:31:EB:4F:38:8D:55:C7:2C:04
X509v3 Authority Key Identifier:
keyid:E4:72:D8:21:C1:4C:9E:07:38:F6:32:D7:A7:4D:F5:16:C4:46:A5:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/326130363a313238313a373038303a3a2f34342d3434203d3e20323134393836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:7080::/44
Signature Algorithm: sha256WithRSAEncryption
2d:72:59:dd:07:90:1c:4e:00:26:70:b6:79:58:ab:91:36:62:
09:5b:78:07:46:40:90:e3:01:b8:6b:cd:5e:10:ae:66:f6:02:
2b:92:4c:6a:10:7c:9a:31:59:fa:a6:ee:cf:a7:69:b4:18:70:
db:d4:41:c2:94:be:41:cd:dd:c6:f2:d9:14:00:3a:26:ff:80:
9e:af:c8:f7:7f:9d:b3:a2:83:99:da:3c:15:80:48:70:da:2b:
83:22:c8:6c:83:7c:22:0b:b5:6c:29:72:fe:01:2b:8b:a5:42:
28:53:70:cc:04:bd:4b:45:0d:d5:75:0e:58:8a:d4:48:5d:75:
0d:e6:69:2b:88:2a:3c:9f:f2:0e:36:e2:f4:f1:c5:55:93:43:
50:5f:f3:80:02:22:5f:2e:ee:ef:02:73:e7:7a:84:12:0d:2c:
7e:64:e9:5b:82:ff:e3:7f:3a:b1:fa:b7:52:15:0c:a3:b5:94:
20:d2:83:40:fb:b8:b7:c7:7f:94:3c:58:4b:5d:9b:2b:6d:63:
4d:6b:19:08:8a:ed:e1:c0:eb:c6:17:64:6c:1a:62:09:3c:6e:
29:32:65:e0:16:62:bf:23:eb:f9:38:16:b7:7f:10:0e:f5:9f:
85:df:26:56:08:b1:24:f4:d2:ef:80:b2:27:d4:dc:08:74:92:
7a:52:ce:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:02 2025 by rpki-client