Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a633031303a3a2f34342d3434203d3e20323037323532.roa
File: 326130363a313238333a633031303a3a2f34342d3434203d3e20323037323532.roa (raw, json)
Hash identifier: rAZE9//yPoAByVDr5CEp/aVuGheUYLXQ1N1DkiP6pwk=
Subject key identifier: 02:41:99:97:D3:9B:C4:20:BC:6F:0A:35:A5:21:60:93:FD:3B:56:CA
Certificate issuer: /CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
Certificate serial: 714A07758C7C72E745BF5A39EBFA103FA16F0C2C
Authority key identifier: 72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a633031303a3a2f34342d3434203d3e20323037323532.roa
Signing time: Sun 28 Apr 2024 20:16:11 +0000
ROA not before: Sun 28 Apr 2024 20:11:11 +0000
ROA not after: Sun 27 Apr 2025 20:16:11 +0000
asID: 207252
IP address blocks: 2a06:1283:c010::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:4a:07:75:8c:7c:72:e7:45:bf:5a:39:eb:fa:10:3f:a1:6f:0c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
Validity
Not Before: Apr 28 20:11:11 2024 GMT
Not After : Apr 27 20:16:11 2025 GMT
Subject: CN=02419997D39BC420BC6F0A35A5216093FD3B56CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9c:ed:d8:c7:d3:88:49:4e:98:8c:c3:bb:81:
09:12:53:3c:f2:24:b0:59:eb:5f:53:d6:76:bb:f0:
19:9d:e9:a6:7e:df:6e:92:bb:bc:09:d2:e9:55:83:
e3:0c:d7:73:2f:92:84:0a:6f:d3:68:bb:50:5c:82:
d5:3c:88:fc:ef:fb:b1:62:85:8c:65:19:3c:8e:6e:
71:77:40:8f:10:47:32:7b:b1:52:0f:71:9a:d6:ff:
48:81:7f:e2:b2:af:d5:85:a2:2d:66:a8:8b:f5:f0:
d9:93:91:ea:c2:88:28:07:b4:f2:4b:ae:b1:cd:84:
0e:5e:67:94:a0:0f:b4:07:a1:7a:ac:89:a2:97:95:
28:0e:ae:89:49:38:68:36:b1:62:de:64:62:50:de:
e9:e9:be:c2:29:f0:84:9b:07:4e:03:cc:fb:71:55:
10:c0:b5:17:3c:fd:9a:f7:d6:6e:9a:7a:93:49:0d:
7c:ee:9f:a5:a0:a9:c0:35:f5:ce:49:4f:3e:59:bf:
53:c2:a0:49:0e:5e:17:88:21:b4:c7:c7:12:a1:04:
9d:f2:9c:52:2c:2a:ba:e2:90:05:82:dc:35:0d:bc:
a9:ec:1e:eb:7b:49:98:90:38:ef:81:6d:ca:50:96:
57:33:02:7e:17:e6:42:77:59:4a:93:ff:15:89:54:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:41:99:97:D3:9B:C4:20:BC:6F:0A:35:A5:21:60:93:FD:3B:56:CA
X509v3 Authority Key Identifier:
keyid:72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a633031303a3a2f34342d3434203d3e20323037323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:c010::/44
Signature Algorithm: sha256WithRSAEncryption
97:e6:31:12:4f:33:ee:99:69:fa:79:83:43:48:77:ec:61:97:
bf:b4:f1:ca:d3:fa:ff:9e:70:58:0e:ad:24:3c:b8:de:38:c3:
48:8c:a5:11:ea:f6:06:65:9b:5a:18:8a:70:66:20:e3:02:8c:
ec:82:a1:5e:a5:f0:3b:7c:8e:5d:a4:07:d0:b7:96:74:4a:ce:
e1:cc:45:e9:e1:0a:f2:39:51:41:e8:aa:8b:22:7f:ab:19:db:
d2:02:a8:23:80:6c:a9:41:38:75:6c:19:04:45:21:cc:46:9f:
d0:3b:29:42:39:09:82:b9:ea:98:37:09:c7:97:8a:02:ae:b9:
ca:48:f9:36:27:f8:b8:69:4e:19:6f:30:50:57:e9:80:0b:64:
c3:2c:a9:66:53:a1:5d:a1:3c:c0:e3:82:45:1b:2f:17:a7:c6:
09:dd:e7:6e:77:01:c7:22:e1:29:c5:62:9d:2c:98:fb:8b:6b:
5e:5c:78:01:89:c5:68:83:6b:f3:74:60:c4:49:ee:c2:bd:4c:
5b:d8:53:1b:10:ef:76:bd:16:08:57:c7:cc:d6:76:27:84:49:
06:59:2d:8c:61:b1:24:aa:67:13:ac:5a:04:fe:36:11:ec:64:
14:e1:aa:d3:ee:2d:b6:2a:df:59:9c:f5:53:72:b7:d5:b9:92:
03:88:3e:58
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUcUoHdYx8cudFv1o56/oQP6FvDCwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI5ODk2Q0I0MjFERThFRDZBNTk4RDI3RjJGNjQ5MUJD
QUJCOUYyNDAeFw0yNDA0MjgyMDExMTFaFw0yNTA0MjcyMDE2MTFaMDMxMTAvBgNV
BAMTKDAyNDE5OTk3RDM5QkM0MjBCQzZGMEEzNUE1MjE2MDkzRkQzQjU2Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDinO3Yx9OISU6YjMO7gQkSUzzy
JLBZ619T1na78Bmd6aZ+326Su7wJ0ulVg+MM13MvkoQKb9Nou1BcgtU8iPzv+7Fi
hYxlGTyObnF3QI8QRzJ7sVIPcZrW/0iBf+Kyr9WFoi1mqIv18NmTkerCiCgHtPJL
rrHNhA5eZ5SgD7QHoXqsiaKXlSgOrolJOGg2sWLeZGJQ3unpvsIp8ISbB04DzPtx
VRDAtRc8/Zr31m6aepNJDXzun6WgqcA19c5JTz5Zv1PCoEkOXheIIbTHxxKhBJ3y
nFIsKrrikAWC3DUNvKnsHut7SZiQOO+BbcpQllczAn4X5kJ3WUqT/xWJVFKjAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUAkGZl9ObxCC8bwo1pSFgk/07VsowHwYDVR0j
BBgwFoAUcpiWy0Id6O1qWY0n8vZJG8q7nyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTg4MzNlOTgtNmYyMS00ZDMwLThkODMtMTQwYWNhOTM4
ZDcxLzEvNzI5ODk2Q0I0MjFERThFRDZBNTk4RDI3RjJGNjQ5MUJDQUJCOUYyNC5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNzI5ODk2Q0I0MjFERThFRDZBNTk4RDI3RjJGNjQ5MUJDQUJC
OUYyNC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTg4MzNlOTgt
NmYyMS00ZDMwLThkODMtMTQwYWNhOTM4ZDcxLzEvMzI2MTMwMzYzYTMxMzIzODMz
M2E2MzMwMzEzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzAzNzMyMzUzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHBCoGEoPAEDANBgkqhkiG9w0BAQsFAAOCAQEAl+YxEk8z7plp+nmD
Q0h37GGXv7TxytP6/55wWA6tJDy43jjDSIylEer2BmWbWhiKcGYg4wKM7IKhXqXw
O3yOXaQH0LeWdErO4cxF6eEK8jlRQeiqiyJ/qxnb0gKoI4BsqUE4dWwZBEUhzEaf
0DspQjkJgrnqmDcJx5eKAq65ykj5Nif4uGlOGW8wUFfpgAtkwyypZlOhXaE8wOOC
RRsvF6fGCd3nbncBxyLhKcVinSyY+4trXlx4AYnFaINr83RgxEnuwr1MW9hTGxDv
dr0WCFfHzNZ2J4RJBlktjGGxJKpnE6xaBP42EexkFOGq0+4ttirfWZz1U3K31bmS
A4g+WA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:41 2025 by rpki-client