Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376365303a3a2f34342d3434203d3e20323135363035.roa
File: 326130613a363034343a376365303a3a2f34342d3434203d3e20323135363035.roa (raw, json)
Hash identifier: YYyJtxxyUtg70zaCtLmnY+eSsO48iGoJdwPmkWuJnKE=
Subject key identifier: 8D:9F:BA:49:B7:B8:20:22:69:02:3E:B3:B1:E9:B3:52:44:D9:7C:1A
Certificate issuer: /CN=AE038F55F4904E67637BC2F369CA4E00D4AEAB1E
Certificate serial: 775F3971AC5360F220976340897012EB2E926876
Authority key identifier: AE:03:8F:55:F4:90:4E:67:63:7B:C2:F3:69:CA:4E:00:D4:AE:AB:1E
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376365303a3a2f34342d3434203d3e20323135363035.roa
Signing time: Sat 02 Mar 2024 17:02:01 +0000
ROA not before: Sat 02 Mar 2024 16:57:01 +0000
ROA not after: Sat 01 Mar 2025 17:02:01 +0000
asID: 215605
IP address blocks: 2a0a:6044:7ce0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:5f:39:71:ac:53:60:f2:20:97:63:40:89:70:12:eb:2e:92:68:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE038F55F4904E67637BC2F369CA4E00D4AEAB1E
Validity
Not Before: Mar 2 16:57:01 2024 GMT
Not After : Mar 1 17:02:01 2025 GMT
Subject: CN=8D9FBA49B7B8202269023EB3B1E9B35244D97C1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:43:a4:6c:56:44:e8:83:a7:f4:ee:fe:af:
3a:fc:b4:45:cb:26:94:99:5a:fb:ec:20:55:fa:bd:
23:26:88:c8:dd:6f:78:dd:92:e5:6b:28:d3:db:73:
5c:0f:b1:85:1c:b1:f1:0a:f8:58:76:4c:61:a7:67:
a9:f8:7c:b4:ae:16:25:e6:75:6b:49:cc:a9:7f:25:
c4:8e:e9:09:e4:03:c6:25:04:4f:93:e7:a9:a7:1e:
0b:df:d1:ae:2f:95:e1:c7:57:07:d7:4b:85:16:64:
52:02:2d:f7:e0:6d:07:ec:e0:6e:3c:ec:08:21:aa:
6c:14:85:11:b0:88:f1:67:00:74:1d:e8:48:55:e0:
b7:6b:e3:c6:12:63:5b:36:7b:b0:32:1f:a6:93:fa:
c6:d1:ea:36:e8:35:bb:8f:4b:21:1c:7e:cb:c6:5e:
f9:75:20:9d:8b:a3:d9:19:d4:fa:a6:d9:19:64:4d:
82:0e:1d:e4:f0:e9:58:7e:5a:3a:6b:10:34:d2:01:
53:03:3b:2e:ce:f6:15:70:24:c3:2f:92:0e:dd:b1:
4c:55:72:d9:27:03:c1:a5:8f:63:b4:86:c0:72:2b:
7a:e9:72:dc:e5:8e:90:93:02:31:00:08:7f:f2:14:
ec:1e:58:91:4a:42:51:d1:b7:ba:a4:f0:54:3b:0e:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9F:BA:49:B7:B8:20:22:69:02:3E:B3:B1:E9:B3:52:44:D9:7C:1A
X509v3 Authority Key Identifier:
keyid:AE:03:8F:55:F4:90:4E:67:63:7B:C2:F3:69:CA:4E:00:D4:AE:AB:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a376365303a3a2f34342d3434203d3e20323135363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7ce0::/44
Signature Algorithm: sha256WithRSAEncryption
a0:3a:0a:23:2c:d6:fa:f1:5a:4a:3d:c0:9f:90:66:ed:3a:c2:
f8:b7:2d:a6:b7:2f:51:ef:d9:3f:41:83:9c:ef:df:74:ea:46:
0c:b6:1b:bc:fb:0b:de:6e:ba:6b:dc:24:97:1b:11:8f:3a:ef:
09:4e:a3:b3:73:17:ef:04:77:22:5a:19:23:e2:ff:1f:b8:4a:
f6:4f:9f:59:0b:1d:02:be:30:78:09:c2:07:55:6a:b2:28:14:
af:68:7e:8f:0c:02:82:cc:44:0a:86:e6:bf:9c:75:db:7a:36:
75:d5:98:46:2d:7f:ad:ef:27:5f:b7:31:fc:9b:78:9a:87:52:
33:00:5c:07:b8:3d:93:1f:8c:08:e6:75:16:2e:6c:b7:55:9a:
5d:28:c0:45:aa:00:3a:20:0a:ec:f7:9f:c7:56:57:8a:5b:b9:
0e:6f:1d:34:bb:9b:2a:98:6d:b4:7a:2f:09:c4:57:50:2b:da:
4e:43:93:b7:f9:5b:73:bb:87:a4:10:c3:7a:57:1a:56:2e:4c:
e2:65:71:d1:68:8a:42:22:da:c1:35:2b:1d:a7:10:5a:aa:f2:
00:32:c7:ea:85:f0:df:57:9d:27:90:5b:f2:e2:51:9e:94:c9:
2b:46:b1:71:38:fc:78:c4:d1:92:4b:30:c4:9d:88:c7:6c:29:
7e:20:28:1b
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUd185caxTYPIgl2NAiXAS6y6SaHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUwMzhGNTVGNDkwNEU2NzYzN0JDMkYzNjlDQTRFMDBE
NEFFQUIxRTAeFw0yNDAzMDIxNjU3MDFaFw0yNTAzMDExNzAyMDFaMDMxMTAvBgNV
BAMTKDhEOUZCQTQ5QjdCODIwMjI2OTAyM0VCM0IxRTlCMzUyNDREOTdDMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaOkOkbFZE6IOn9O7+rzr8tEXL
JpSZWvvsIFX6vSMmiMjdb3jdkuVrKNPbc1wPsYUcsfEK+Fh2TGGnZ6n4fLSuFiXm
dWtJzKl/JcSO6QnkA8YlBE+T56mnHgvf0a4vleHHVwfXS4UWZFICLffgbQfs4G48
7AghqmwUhRGwiPFnAHQd6EhV4Ldr48YSY1s2e7AyH6aT+sbR6jboNbuPSyEcfsvG
Xvl1IJ2Lo9kZ1Pqm2RlkTYIOHeTw6Vh+WjprEDTSAVMDOy7O9hVwJMMvkg7dsUxV
ctknA8Glj2O0hsByK3rpctzljpCTAjEACH/yFOweWJFKQlHRt7qk8FQ7DjolAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUjZ+6Sbe4ICJpAj6zsemzUkTZfBowHwYDVR0j
BBgwFoAUrgOPVfSQTmdje8LzacpOANSuqx4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTcwZDU1ZTktMDQwYi00ZWIwLTkwNTUtNGIxZTYzYTg4
YTY2LzEvQUUwMzhGNTVGNDkwNEU2NzYzN0JDMkYzNjlDQTRFMDBENEFFQUIxRS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9BRTAzOEY1NUY0OTA0RTY3NjM3QkMyRjM2
OUNBNEUwMEQ0QUVBQjFFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS81NzBkNTVlOS0wNDBiLTRlYjAtOTA1NS00YjFlNjNhODhhNjYvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM3NjM2NTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz
MTM1MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKgpgRHzgMA0GCSqGSIb3DQEBCwUAA4IBAQCg
OgojLNb68VpKPcCfkGbtOsL4ty2mty9R79k/QYOc79906kYMthu8+wvebrpr3CSX
GxGPOu8JTqOzcxfvBHciWhkj4v8fuEr2T59ZCx0CvjB4CcIHVWqyKBSvaH6PDAKC
zEQKhua/nHXbejZ11ZhGLX+t7ydftzH8m3iah1IzAFwHuD2TH4wI5nUWLmy3VZpd
KMBFqgA6IArs95/HVleKW7kObx00u5sqmG20ei8JxFdQK9pOQ5O3+Vtzu4ekEMN6
VxpWLkziZXHRaIpCItrBNSsdpxBaqvIAMsfqhfDfV50nkFvy4lGelMkrRrFxOPx4
xNGSSzDEnYjHbCl+ICgb
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:20 2025 by rpki-client