Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a386630303a3a2f34302d3430203d3e20323135363035.roa
File: 326130613a363034343a386630303a3a2f34302d3430203d3e20323135363035.roa (raw, json)
Hash identifier: E3SxI1I/WWpaA5Oo5N/MtO0VwyEPt7nm0zBvCuulh6w=
Subject key identifier: F2:42:85:7A:BA:A4:46:D9:6B:01:5A:7D:AF:51:01:ED:3D:74:D1:43
Certificate issuer: /CN=AE038F55F4904E67637BC2F369CA4E00D4AEAB1E
Certificate serial: 100098FAE6A7422E3784DEEF29A6060D26A7F5EB
Authority key identifier: AE:03:8F:55:F4:90:4E:67:63:7B:C2:F3:69:CA:4E:00:D4:AE:AB:1E
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a386630303a3a2f34302d3430203d3e20323135363035.roa
Signing time: Tue 05 Mar 2024 23:49:30 +0000
ROA not before: Tue 05 Mar 2024 23:44:30 +0000
ROA not after: Tue 04 Mar 2025 23:49:30 +0000
asID: 215605
IP address blocks: 2a0a:6044:8f00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:00:98:fa:e6:a7:42:2e:37:84:de:ef:29:a6:06:0d:26:a7:f5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE038F55F4904E67637BC2F369CA4E00D4AEAB1E
Validity
Not Before: Mar 5 23:44:30 2024 GMT
Not After : Mar 4 23:49:30 2025 GMT
Subject: CN=F242857ABAA446D96B015A7DAF5101ED3D74D143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b3:c2:0d:02:e8:a2:75:1b:81:a3:96:32:9d:
bf:8f:f0:82:c2:b2:fc:75:15:04:d6:4b:82:cc:fe:
cd:7b:41:4e:0e:10:a9:48:34:f4:a7:48:e8:0a:78:
29:23:bd:fc:f1:05:48:7a:92:43:bb:41:6b:f8:91:
c0:16:3a:67:46:f8:fb:a6:84:54:60:97:88:66:f6:
71:03:9d:60:4b:1f:85:5e:8b:f8:a4:4e:d4:81:9c:
0b:17:30:da:3f:64:a6:a0:1c:eb:2f:9f:33:76:5f:
0d:8c:4c:42:9d:42:b3:1f:c6:35:fd:8d:4c:10:2d:
86:e9:6d:e0:c3:21:a8:d1:fd:e0:08:99:77:8e:b3:
09:28:0b:9a:44:98:43:7a:29:f9:87:09:ef:9d:3a:
38:38:80:d5:d2:94:6f:3c:56:d6:6a:b8:5a:f2:22:
02:0b:94:50:f2:4a:5d:e9:b7:db:d5:a6:f0:18:39:
3c:2c:5e:87:4a:24:67:39:4e:0f:04:84:c9:13:32:
06:fe:25:30:f7:9e:a1:73:ce:80:e1:04:cd:06:dc:
eb:9a:00:aa:36:66:b3:0b:0a:11:f2:50:cd:a3:a2:
ae:a6:05:c0:03:ba:00:e9:da:53:f5:d5:17:32:17:
3a:d3:9d:d3:7f:81:c0:a3:d9:b3:40:08:6b:44:a2:
ea:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:42:85:7A:BA:A4:46:D9:6B:01:5A:7D:AF:51:01:ED:3D:74:D1:43
X509v3 Authority Key Identifier:
keyid:AE:03:8F:55:F4:90:4E:67:63:7B:C2:F3:69:CA:4E:00:D4:AE:AB:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AE038F55F4904E67637BC2F369CA4E00D4AEAB1E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/570d55e9-040b-4eb0-9055-4b1e63a88a66/1/326130613a363034343a386630303a3a2f34302d3430203d3e20323135363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:8f00::/40
Signature Algorithm: sha256WithRSAEncryption
4c:09:e5:8f:57:34:2e:39:4d:11:a4:0a:80:c9:11:a1:41:f2:
16:82:52:11:a8:cf:93:d4:a7:4f:69:31:5e:a6:c2:e9:e6:41:
12:d6:64:58:e4:79:6e:8b:34:38:b2:7d:60:b0:98:0c:58:8b:
58:bf:23:aa:f3:28:5c:14:47:f6:af:13:9b:c4:52:08:f9:dd:
52:da:a0:92:a2:9a:79:89:f8:62:43:42:14:e8:b1:d4:c7:c2:
1e:24:92:10:be:09:af:de:87:48:5a:fe:c8:78:2d:6a:09:55:
75:ad:76:50:05:fa:f1:78:d6:94:5f:ad:73:67:d5:e2:fe:e3:
a7:7b:9a:01:bf:82:b7:ab:68:ba:df:95:83:4b:cf:6a:62:49:
8a:49:47:7a:e4:a2:7e:96:78:aa:ec:9a:4b:2e:69:22:b1:ec:
ac:59:73:25:dc:f4:91:94:bd:d8:da:fa:21:e8:3b:19:8f:04:
ef:29:13:88:c5:53:5e:4a:ec:53:c7:1f:d4:dd:4d:f3:47:ac:
3a:11:10:46:e5:0e:b3:67:c4:5a:47:31:f3:b2:83:6f:19:33:
2e:45:94:ef:4b:53:14:bc:71:8a:43:7a:be:79:21:91:0b:d8:
bb:47:81:d3:4f:30:1f:c2:89:85:86:40:18:f2:c7:0b:7c:eb:
4f:e3:c9:2a
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUEACY+uanQi43hN7vKaYGDSan9eswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUwMzhGNTVGNDkwNEU2NzYzN0JDMkYzNjlDQTRFMDBE
NEFFQUIxRTAeFw0yNDAzMDUyMzQ0MzBaFw0yNTAzMDQyMzQ5MzBaMDMxMTAvBgNV
BAMTKEYyNDI4NTdBQkFBNDQ2RDk2QjAxNUE3REFGNTEwMUVEM0Q3NEQxNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgs8INAuiidRuBo5Yynb+P8ILC
svx1FQTWS4LM/s17QU4OEKlINPSnSOgKeCkjvfzxBUh6kkO7QWv4kcAWOmdG+Pum
hFRgl4hm9nEDnWBLH4Vei/ikTtSBnAsXMNo/ZKagHOsvnzN2Xw2MTEKdQrMfxjX9
jUwQLYbpbeDDIajR/eAImXeOswkoC5pEmEN6KfmHCe+dOjg4gNXSlG88VtZquFry
IgILlFDySl3pt9vVpvAYOTwsXodKJGc5Tg8EhMkTMgb+JTD3nqFzzoDhBM0G3Oua
AKo2ZrMLChHyUM2joq6mBcADugDp2lP11RcyFzrTndN/gcCj2bNACGtEouqzAgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQU8kKFerqkRtlrAVp9r1EB7T100UMwHwYDVR0j
BBgwFoAUrgOPVfSQTmdje8LzacpOANSuqx4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTcwZDU1ZTktMDQwYi00ZWIwLTkwNTUtNGIxZTYzYTg4
YTY2LzEvQUUwMzhGNTVGNDkwNEU2NzYzN0JDMkYzNjlDQTRFMDBENEFFQUIxRS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9BRTAzOEY1NUY0OTA0RTY3NjM3QkMyRjM2
OUNBNEUwMEQ0QUVBQjFFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS81NzBkNTVlOS0wNDBiLTRlYjAtOTA1NS00YjFlNjNhODhhNjYvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM4NjYzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz
MTM1MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgRI8wDQYJKoZIhvcNAQELBQADggEBAEwJ
5Y9XNC45TRGkCoDJEaFB8haCUhGoz5PUp09pMV6mwunmQRLWZFjkeW6LNDiyfWCw
mAxYi1i/I6rzKFwUR/avE5vEUgj53VLaoJKimnmJ+GJDQhTosdTHwh4kkhC+Ca/e
h0ha/sh4LWoJVXWtdlAF+vF41pRfrXNn1eL+46d7mgG/greraLrflYNLz2piSYpJ
R3rkon6WeKrsmksuaSKx7KxZcyXc9JGUvdja+iHoOxmPBO8pE4jFU15K7FPHH9Td
TfNHrDoREEblDrNnxFpHMfOyg28ZMy5FlO9LUxS8cYpDer55IZEL2LtHgdNPMB/C
iYWGQBjyxwt860/jySo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org