Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa
File: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (raw, json)
Hash identifier: 2KFsAHpLftCLwZtbIHo+pYTrjbgMoXhuDq6pQ1osTQE=
Subject key identifier: 18:08:30:91:E3:6F:75:C1:8E:CB:36:09:F8:F8:4A:EB:C4:26:ED:DF
Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial: 2C7D8D62033CFCADE8A1F0F540B361E5649C4AA0
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa
Signing time: Tue 28 May 2024 11:29:08 +0000
ROA not before: Tue 28 May 2024 11:24:08 +0000
ROA not after: Tue 27 May 2025 11:29:08 +0000
asID: 151544
IP address blocks: 2a14:7581:4860::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:7d:8d:62:03:3c:fc:ad:e8:a1:f0:f5:40:b3:61:e5:64:9c:4a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Validity
Not Before: May 28 11:24:08 2024 GMT
Not After : May 27 11:29:08 2025 GMT
Subject: CN=18083091E36F75C18ECB3609F8F84AEBC426EDDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:00:1e:3a:02:42:32:38:13:af:4f:03:ad:
17:45:f1:a6:a1:1b:87:78:0a:5f:3b:fa:59:8d:42:
b4:fa:7b:9f:15:8e:4e:9f:17:46:28:36:4a:a2:84:
d5:54:1f:a1:a0:30:2c:9b:ff:aa:70:83:3e:1c:d4:
ba:9b:7f:16:03:1c:4c:42:7e:d3:84:08:9e:20:22:
0f:5b:4d:18:88:98:de:9e:b6:04:23:ef:6d:f2:80:
93:22:12:86:c7:50:2b:c1:45:a4:e6:6f:98:55:56:
e0:dd:65:86:68:7b:46:bf:9a:52:93:8a:29:be:66:
06:c3:cc:12:71:e0:bc:38:9a:b6:47:ee:b5:50:c0:
6e:e5:5d:2f:ca:82:6e:57:98:20:e1:b5:b1:a5:dd:
09:07:4e:86:32:ec:4d:5f:0d:64:ce:ce:2b:0b:e7:
2e:1e:09:2c:ed:d5:ce:7b:0e:13:5e:ae:ad:52:95:
6a:fe:fb:cc:4f:80:4a:01:50:df:e7:e8:1a:7f:60:
4a:6e:a4:85:68:12:fe:cb:69:74:80:27:71:9b:7c:
f0:bb:3d:e3:cd:17:d6:77:d8:32:51:11:51:33:96:
9d:08:d2:3f:77:4b:2b:07:43:df:78:c5:e2:d3:e3:
6c:ba:8f:25:71:d2:24:1c:63:74:a2:34:0c:52:60:
c9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:08:30:91:E3:6F:75:C1:8E:CB:36:09:F8:F8:4A:EB:C4:26:ED:DF
X509v3 Authority Key Identifier:
keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:4860::/44
Signature Algorithm: sha256WithRSAEncryption
9e:0e:85:3c:be:a4:99:13:f7:54:cf:a3:b1:50:73:2c:4d:56:
73:95:64:7e:90:96:69:b4:11:3c:05:37:19:8c:59:a9:7e:69:
07:93:47:0c:c1:c7:06:81:5c:3f:1e:3b:25:d4:99:07:42:82:
c9:c0:a3:a2:e8:c1:5f:ad:a1:be:b7:65:4d:2f:c6:74:9d:fe:
68:cb:c8:b5:d5:68:72:35:08:8e:02:07:bf:9a:1a:05:7e:86:
63:be:7b:05:e1:5c:03:e9:7b:52:af:6f:8d:82:d5:54:75:c7:
48:be:97:60:c5:1f:d7:9f:47:34:f9:ab:18:65:58:14:bc:a6:
f5:25:4b:32:77:43:d6:46:47:f9:a9:d8:12:b7:04:3f:b7:b8:
c2:7c:a3:a4:7a:fe:c5:ac:d0:fc:41:c5:1d:c6:69:b3:94:69:
fd:3b:b4:73:77:49:2d:4f:e7:b6:ad:c0:92:5c:ec:d0:9f:b1:
33:31:a6:97:6a:86:e1:96:f1:93:77:6f:cf:d4:67:03:b3:7e:
90:07:65:79:c2:ec:25:1f:ec:e2:69:d4:1e:2c:34:f6:f4:2c:
5c:10:82:50:ed:ec:5f:05:f4:77:f4:31:d8:b4:fc:aa:69:7f:
ab:8c:46:d1:68:6c:2f:af:97:52:3c:86:cc:c9:b6:ef:3e:95:
1b:84:eb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:37 2025 by rpki-client