Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/326130613a363034343a616131303a3a2f34382d3438203d3e20323134323233.roa
File: 326130613a363034343a616131303a3a2f34382d3438203d3e20323134323233.roa (raw, json)
Hash identifier: PHlvTY+Ipwy81kGskj+oMe+WXmlCctgj/Oi2fQhgAFE=
Subject key identifier: 6E:8E:91:64:D9:E3:4E:89:DC:C6:BF:14:FC:09:EC:5C:68:E2:5C:03
Certificate issuer: /CN=4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6
Certificate serial: 274CB9FEDD60A75200369EEE10CBA5E6D0786A05
Authority key identifier: 4D:E3:64:B9:A3:AF:54:1F:AC:1C:0C:0F:A7:08:FF:7E:8E:80:24:B6
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/326130613a363034343a616131303a3a2f34382d3438203d3e20323134323233.roa
Signing time: Sun 02 Feb 2025 15:20:13 +0000
ROA not before: Sun 02 Feb 2025 15:15:13 +0000
ROA not after: Sun 01 Feb 2026 15:20:13 +0000
asID: 214223
IP address blocks: 2a0a:6044:aa10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:4c:b9:fe:dd:60:a7:52:00:36:9e:ee:10:cb:a5:e6:d0:78:6a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6
Validity
Not Before: Feb 2 15:15:13 2025 GMT
Not After : Feb 1 15:20:13 2026 GMT
Subject: CN=6E8E9164D9E34E89DCC6BF14FC09EC5C68E25C03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:84:44:47:4f:b7:cc:19:4b:e1:ac:7d:fd:
84:95:14:dd:be:78:9b:18:75:b4:0c:37:3f:d9:7f:
06:8e:81:c8:b7:d5:9d:1a:f1:8b:1d:ea:7b:20:91:
37:66:28:8e:77:eb:51:a0:6f:c8:e7:a9:8a:1d:3c:
0e:a8:85:54:c2:b9:73:71:e7:73:4b:26:f5:1b:15:
8c:3e:36:e3:a5:9d:db:ff:46:da:cf:e0:8e:d0:3c:
83:0f:f7:b6:ba:0a:6b:a4:d2:4b:33:d4:08:8e:6b:
d7:b2:a7:ce:ff:95:6b:26:bd:e3:37:aa:b0:43:76:
7b:34:d4:b9:38:04:17:50:a4:dc:f5:78:fc:75:77:
1d:00:ef:5f:d9:57:c0:bf:22:af:ae:7e:c7:33:71:
e2:62:ab:c7:9b:59:44:00:8e:f9:40:75:e8:a0:f4:
46:04:9a:41:08:3d:32:41:f6:aa:42:cd:62:fc:ea:
34:27:d1:9b:2e:e0:44:a1:c8:23:2f:5d:3e:35:86:
a4:d6:f9:50:47:1a:68:aa:d4:48:6d:5c:3b:ed:46:
a0:a0:53:b6:b9:24:e5:a2:01:fb:f1:ca:72:53:be:
d5:0d:22:05:ee:73:ac:31:e4:23:56:7b:16:cd:26:
c6:75:33:33:f9:58:36:9e:0e:a3:14:af:7e:e8:08:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8E:91:64:D9:E3:4E:89:DC:C6:BF:14:FC:09:EC:5C:68:E2:5C:03
X509v3 Authority Key Identifier:
keyid:4D:E3:64:B9:A3:AF:54:1F:AC:1C:0C:0F:A7:08:FF:7E:8E:80:24:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/326130613a363034343a616131303a3a2f34382d3438203d3e20323134323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:aa10::/48
Signature Algorithm: sha256WithRSAEncryption
8f:b9:04:60:55:58:13:24:0e:48:66:3f:e3:07:ed:c3:d8:11:
6b:90:f9:1f:0f:71:a5:b8:d1:fc:55:6f:b1:aa:2b:5f:62:08:
33:97:64:2c:a8:ae:dd:65:ac:a0:52:d2:72:83:3a:d9:bb:cc:
52:c9:13:39:f3:5c:c6:81:70:45:d6:56:91:64:b0:b6:5f:b9:
34:2f:b3:ef:ff:95:9c:56:32:b2:a6:53:55:b6:f4:ef:28:2c:
ce:23:57:7f:6f:f2:85:ce:03:27:89:1a:28:16:be:e4:a7:30:
c1:ab:60:87:ed:ec:15:e3:70:ca:f7:ba:35:81:20:90:bd:32:
cc:68:a6:03:02:6b:d4:0e:23:ab:42:80:6e:89:a1:d0:36:b3:
61:40:b1:66:1b:c2:53:20:d6:b7:69:4e:f9:33:b7:51:0e:9c:
00:09:84:a0:52:27:4a:01:fe:95:ca:90:18:fe:09:ee:13:85:
71:66:10:05:32:d5:e3:42:38:ba:b6:fb:72:5b:96:89:7a:b4:
c4:e2:e6:25:f9:a9:1a:b3:9f:6c:ae:0d:72:d1:64:63:0c:df:
e8:f6:42:7f:c4:6a:66:5b:bb:da:bf:ea:ff:b3:c1:82:d3:bf:
56:50:12:ca:91:e9:5b:6b:89:db:71:87:0e:89:14:b1:eb:9d:
91:03:95:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:32:41 2025 by rpki-client