Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376333663a3a2f34382d3438203d3e20323135363035.roa
File: 326130613a363034343a376333663a3a2f34382d3438203d3e20323135363035.roa (raw, json)
Hash identifier: tsJR2i1LKTaVHyLNG/4fsd7KoUqu75y6X87Y8dAsLl8=
Subject key identifier: A4:ED:67:F5:F1:79:5F:DD:81:B2:D2:6F:31:DF:7E:18:5A:DD:BD:1D
Certificate issuer: /CN=AE038F55F4904E67637BC2F369CA4E00D4AEAB1E
Certificate serial: 7E88D6EC36E28D0D3FB099AE544EE74CCE8DE06D
Authority key identifier: AE:03:8F:55:F4:90:4E:67:63:7B:C2:F3:69:CA:4E:00:D4:AE:AB:1E
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376333663a3a2f34382d3438203d3e20323135363035.roa
Signing time: Thu 14 Mar 2024 08:27:53 +0000
ROA not before: Thu 14 Mar 2024 08:22:53 +0000
ROA not after: Thu 13 Mar 2025 08:27:53 +0000
asID: 215605
IP address blocks: 2a0a:6044:7c3f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:88:d6:ec:36:e2:8d:0d:3f:b0:99:ae:54:4e:e7:4c:ce:8d:e0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE038F55F4904E67637BC2F369CA4E00D4AEAB1E
Validity
Not Before: Mar 14 08:22:53 2024 GMT
Not After : Mar 13 08:27:53 2025 GMT
Subject: CN=A4ED67F5F1795FDD81B2D26F31DF7E185ADDBD1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:1c:f7:6e:04:21:22:19:a5:dd:a8:0d:98:
a7:5d:ff:cb:10:90:28:c1:de:60:7c:b0:1a:c2:bb:
82:be:54:2c:c0:fd:39:87:ba:bc:59:a2:cc:7c:50:
a2:a0:5a:90:75:0e:14:5e:02:92:c4:4d:3d:76:89:
7a:8d:a8:4e:87:f7:41:f6:80:8b:bc:e3:83:57:d1:
89:51:a5:3a:67:50:fa:22:4e:16:b4:28:c2:48:54:
43:76:78:44:e0:bd:52:8a:e9:0f:cd:ad:a9:38:59:
f3:22:83:05:87:e3:e2:e7:d5:4d:d9:b4:30:0c:6d:
87:91:80:f0:26:52:75:ba:1a:44:d8:4f:3b:b2:d9:
0e:39:20:25:91:da:e7:54:cf:05:6a:41:16:11:1d:
ca:fa:cc:40:28:9a:21:af:6c:ed:75:47:fd:65:d6:
58:50:d7:57:87:b8:d9:81:01:99:a7:3d:77:56:06:
08:d5:8d:c5:78:61:fb:d2:c2:5b:b6:64:64:24:b2:
85:f7:22:16:ec:54:4a:71:a2:24:dd:e5:9a:44:01:
b7:05:ee:a4:17:7d:51:c6:a1:3a:46:5a:4e:f9:31:
73:f8:92:f4:25:78:f7:6b:e0:4e:23:5b:5a:bc:30:
66:ad:5f:43:60:49:1e:a2:bc:05:a7:17:ea:8a:09:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:ED:67:F5:F1:79:5F:DD:81:B2:D2:6F:31:DF:7E:18:5A:DD:BD:1D
X509v3 Authority Key Identifier:
keyid:AE:03:8F:55:F4:90:4E:67:63:7B:C2:F3:69:CA:4E:00:D4:AE:AB:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376333663a3a2f34382d3438203d3e20323135363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7c3f::/48
Signature Algorithm: sha256WithRSAEncryption
46:a3:b1:50:9b:93:7f:7a:6d:c6:c8:78:90:cb:0a:d2:2f:29:
31:2f:77:6d:b5:b6:37:db:45:4b:aa:2a:2a:24:b9:93:15:3e:
ce:ea:c5:d8:66:58:83:f0:da:cc:0c:ba:6c:51:f4:77:0c:fe:
b8:b6:fb:c3:e1:ed:cb:d1:b6:c1:96:86:dc:57:a7:5c:3f:f0:
46:b2:50:98:10:17:0c:57:50:6b:ab:4f:86:da:95:1e:09:ec:
f0:7a:0a:56:1e:ee:33:b1:f1:de:26:d1:02:a7:70:5c:46:18:
d6:48:b2:c2:a5:49:e8:24:c2:0a:63:93:e6:6b:6c:08:21:8a:
f6:cb:c1:fa:a6:81:fb:f6:12:0b:38:0d:a4:44:d7:6c:50:0c:
bf:d4:50:66:91:8c:e2:d5:bc:76:15:ec:5f:93:5b:ad:ef:77:
ca:2d:b2:5f:9c:3b:67:dd:f0:de:ed:b7:72:c3:22:5c:d7:78:
82:a6:f4:a8:48:ad:79:84:b3:9d:e6:1b:5e:dd:39:d6:82:ae:
1f:dd:31:59:f7:b0:79:5b:48:5b:b0:cb:f1:37:e6:04:d9:cd:
9d:ba:1e:85:da:a9:4b:d3:89:42:14:47:89:74:e0:1d:8a:20:
fb:a3:6f:5e:62:09:34:f1:80:d0:b0:98:93:4f:a0:a8:5d:8b:
65:9a:16:75
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUfojW7DbijQ0/sJmuVE7nTM6N4G0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUwMzhGNTVGNDkwNEU2NzYzN0JDMkYzNjlDQTRFMDBE
NEFFQUIxRTAeFw0yNDAzMTQwODIyNTNaFw0yNTAzMTMwODI3NTNaMDMxMTAvBgNV
BAMTKEE0RUQ2N0Y1RjE3OTVGREQ4MUIyRDI2RjMxREY3RTE4NUFEREJEMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvcRz3bgQhIhml3agNmKdd/8sQ
kCjB3mB8sBrCu4K+VCzA/TmHurxZosx8UKKgWpB1DhReApLETT12iXqNqE6H90H2
gIu844NX0YlRpTpnUPoiTha0KMJIVEN2eETgvVKK6Q/Nrak4WfMigwWH4+Ln1U3Z
tDAMbYeRgPAmUnW6GkTYTzuy2Q45ICWR2udUzwVqQRYRHcr6zEAomiGvbO11R/1l
1lhQ11eHuNmBAZmnPXdWBgjVjcV4YfvSwlu2ZGQksoX3IhbsVEpxoiTd5ZpEAbcF
7qQXfVHGoTpGWk75MXP4kvQlePdr4E4jW1q8MGatX0NgSR6ivAWnF+qKCbFdAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUpO1n9fF5X92BstJvMd9+GFrdvR0wHwYDVR0j
BBgwFoAUrgOPVfSQTmdje8LzacpOANSuqx4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTcwZDU1ZTktMDQwYi00ZWIwLTkwNTUtNGIxZTYzYTg4
YTY2LzEvQUUwMzhGNTVGNDkwNEU2NzYzN0JDMkYzNjlDQTRFMDBENEFFQUIxRS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9BRTAzOEY1NUY0OTA0RTY3NjM3QkMyRjM2
OUNBNEUwMEQ0QUVBQjFFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS81NzBkNTVlOS0wNDBiLTRlYjAtOTA1NS00YjFlNjNhODhhNjYvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM3NjMzMzY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRHw/MA0GCSqGSIb3DQEBCwUAA4IBAQBG
o7FQm5N/em3GyHiQywrSLykxL3dttbY320VLqioqJLmTFT7O6sXYZliD8NrMDLps
UfR3DP64tvvD4e3L0bbBlobcV6dcP/BGslCYEBcMV1Brq0+G2pUeCezwegpWHu4z
sfHeJtECp3BcRhjWSLLCpUnoJMIKY5Pma2wIIYr2y8H6poH79hILOA2kRNdsUAy/
1FBmkYzi1bx2Fexfk1ut73fKLbJfnDtn3fDe7bdywyJc13iCpvSoSK15hLOd5hte
3TnWgq4f3TFZ97B5W0hbsMvxN+YE2c2duh6F2qlL04lCFEeJdOAdiiD7o29eYgk0
8YDQsJiTT6CoXYtlmhZ1
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org