Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643031303a3a2f34342d3434203d3e20323134373537.roa
File: 326130393a353463363a643031303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier: f4rNVZSNVIpWIw/9NxDxaiUieVBqD7T581r2IDTjQ/k=
Subject key identifier: 50:07:CC:4D:AD:31:C6:69:4B:53:B0:5D:AC:B0:AE:55:E9:68:B6:F6
Certificate issuer: /CN=F163E1EE74384430F7A75E7448A376D89DBBE730
Certificate serial: 513F0B1CBE01554CC14318655440EA48932ED533
Authority key identifier: F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643031303a3a2f34342d3434203d3e20323134373537.roa
Signing time: Mon 30 Sep 2024 16:57:52 +0000
ROA not before: Mon 30 Sep 2024 16:52:52 +0000
ROA not after: Mon 29 Sep 2025 16:57:52 +0000
asID: 214757
IP address blocks: 2a09:54c6:d010::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:3f:0b:1c:be:01:55:4c:c1:43:18:65:54:40:ea:48:93:2e:d5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F163E1EE74384430F7A75E7448A376D89DBBE730
Validity
Not Before: Sep 30 16:52:52 2024 GMT
Not After : Sep 29 16:57:52 2025 GMT
Subject: CN=5007CC4DAD31C6694B53B05DACB0AE55E968B6F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:f8:81:a5:aa:49:dc:c8:4c:20:ee:e7:bb:
8a:66:9b:4f:aa:9c:9a:2e:5c:7a:7c:38:a4:84:f1:
7d:10:2c:98:62:c7:71:bb:37:0c:e8:db:38:f8:a4:
61:68:df:e7:0b:db:1d:8f:8a:dd:d9:e4:d9:ed:47:
94:67:95:67:d9:45:27:9a:58:d0:24:2a:db:d6:44:
b9:3d:be:a2:b7:af:15:f0:ca:d9:df:2d:26:63:b4:
58:90:28:95:a3:29:f2:14:01:ed:e8:00:0a:83:f7:
09:94:ee:b8:bc:55:7f:d6:f6:14:6a:c9:e5:d8:7d:
8e:d2:11:7a:6c:49:db:3d:81:ac:49:ed:03:ba:82:
50:b0:97:1a:5f:87:e2:bf:7d:b1:2b:54:f6:d1:a2:
fd:00:ec:6f:bb:41:66:59:48:8a:0d:ab:2d:1f:5e:
70:62:4c:14:e9:0a:5c:19:6c:30:ac:99:0a:93:9f:
15:0d:de:9f:33:e9:f5:a0:5e:c6:e2:ed:31:34:f4:
e0:26:9f:74:d2:20:e7:01:46:e5:ba:4e:5c:60:48:
82:9b:73:31:02:a1:79:a9:0e:42:27:05:56:29:6b:
aa:a6:eb:73:5a:11:06:35:68:76:a9:f3:59:c3:9f:
33:04:ef:69:6e:0f:53:21:2b:71:2b:aa:44:31:63:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:07:CC:4D:AD:31:C6:69:4B:53:B0:5D:AC:B0:AE:55:E9:68:B6:F6
X509v3 Authority Key Identifier:
keyid:F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643031303a3a2f34342d3434203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:d010::/44
Signature Algorithm: sha256WithRSAEncryption
74:30:46:17:a5:8c:be:bb:0f:ec:66:b5:12:01:b5:6e:88:0e:
ae:9b:8b:69:15:c2:74:2a:7b:9c:b0:28:d9:bf:a9:84:9e:c5:
fe:5d:58:ce:21:6f:5d:1f:ed:2b:08:d0:ef:33:63:ff:03:2b:
a7:28:0b:02:33:7c:f5:70:29:5b:17:dc:82:d1:92:a7:b4:3f:
6f:1f:72:a2:de:ae:02:6f:b7:bc:9b:d0:7b:19:d5:68:f3:b4:
13:84:95:23:b7:60:79:e3:98:d7:80:51:12:c8:25:13:8c:bd:
99:28:7c:26:df:c3:49:21:fb:f4:a2:19:b9:80:e8:91:68:aa:
8a:36:13:bf:ec:f2:ce:47:14:75:fb:54:6e:ca:fc:81:27:fd:
50:a1:f1:ca:58:6e:03:6f:e2:4a:3b:2a:42:4d:04:a4:37:93:
70:74:da:8d:e1:69:55:fd:e0:29:e8:7e:d8:ea:91:21:81:17:
a5:e6:f8:d5:d8:cb:4f:cb:43:20:b2:55:2b:e4:ba:94:9c:d3:
ec:b7:ec:ae:f7:30:b4:0a:39:a1:7d:fe:ae:97:b1:c6:ba:d4:
a2:dd:6e:3b:82:66:a9:46:fc:00:05:44:19:f1:74:98:21:4d:
31:85:51:1e:2f:27:bc:51:63:06:8d:59:04:7b:29:66:c4:0c:
d3:45:87:55
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUUT8LHL4BVUzBQxhlVEDqSJMu1TMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE2M0UxRUU3NDM4NDQzMEY3QTc1RTc0NDhBMzc2RDg5
REJCRTczMDAeFw0yNDA5MzAxNjUyNTJaFw0yNTA5MjkxNjU3NTJaMDMxMTAvBgNV
BAMTKDUwMDdDQzREQUQzMUM2Njk0QjUzQjA1REFDQjBBRTU1RTk2OEI2RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbviBpapJ3MhMIO7nu4pmm0+q
nJouXHp8OKSE8X0QLJhix3G7Nwzo2zj4pGFo3+cL2x2Pit3Z5NntR5RnlWfZRSea
WNAkKtvWRLk9vqK3rxXwytnfLSZjtFiQKJWjKfIUAe3oAAqD9wmU7ri8VX/W9hRq
yeXYfY7SEXpsSds9gaxJ7QO6glCwlxpfh+K/fbErVPbRov0A7G+7QWZZSIoNqy0f
XnBiTBTpClwZbDCsmQqTnxUN3p8z6fWgXsbi7TE09OAmn3TSIOcBRuW6TlxgSIKb
czECoXmpDkInBVYpa6qm63NaEQY1aHap81nDnzME72luD1MhK3ErqkQxY8a5AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUUAfMTa0xxmlLU7BdrLCuVelotvYwHwYDVR0j
BBgwFoAU8WPh7nQ4RDD3p150SKN22J275zAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJlNDNkOWUtZTQ0MC00N2FlLWE3YmMtMTliNzk5M2Nj
ZjE0LzEvRjE2M0UxRUU3NDM4NDQzMEY3QTc1RTc0NDhBMzc2RDg5REJCRTczMC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9GMTYzRTFFRTc0Mzg0NDMwRjdBNzVFNzQ0
OEEzNzZEODlEQkJFNzMwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS82YmU0M2Q5ZS1lNDQwLTQ3YWUtYTdiYy0xOWI3OTkzY2NmMTQvMS8zMjYxMzAz
OTNhMzUzNDYzMzYzYTY0MzAzMTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz
MTM0MzczNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKglUxtAQMA0GCSqGSIb3DQEBCwUAA4IBAQB0
MEYXpYy+uw/sZrUSAbVuiA6um4tpFcJ0KnucsCjZv6mEnsX+XVjOIW9dH+0rCNDv
M2P/AyunKAsCM3z1cClbF9yC0ZKntD9vH3Ki3q4Cb7e8m9B7GdVo87QThJUjt2B5
45jXgFESyCUTjL2ZKHwm38NJIfv0ohm5gOiRaKqKNhO/7PLORxR1+1RuyvyBJ/1Q
ofHKWG4Db+JKOypCTQSkN5NwdNqN4WlV/eAp6H7Y6pEhgRel5vjV2MtPy0MgslUr
5LqUnNPst+yu9zC0Cjmhff6ul7HGutSi3W47gmapRvwABUQZ8XSYIU0xhVEeLye8
UWMGjVkEeylmxAzTRYdV
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:57 2025 by rpki-client