Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa
File: 326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa (raw, json)
Hash identifier: OSQQWXQC8Doo46F92DSw83gpWUJg/I3ZjbHjihzygko=
Subject key identifier: A3:64:A8:3D:1B:A9:68:EF:80:1C:37:FB:99:9E:80:9E:D1:4C:BA:AA
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 570A3D5A2D6FEE6EDB9F0FAD8D2F571C50FCC23B
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa
Signing time: Fri 20 Dec 2024 17:17:14 +0000
ROA not before: Fri 20 Dec 2024 17:12:14 +0000
ROA not after: Fri 19 Dec 2025 17:17:14 +0000
asID: 198342
IP address blocks: 2a14:6f44:c701::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:0a:3d:5a:2d:6f:ee:6e:db:9f:0f:ad:8d:2f:57:1c:50:fc:c2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Dec 20 17:12:14 2024 GMT
Not After : Dec 19 17:17:14 2025 GMT
Subject: CN=A364A83D1BA968EF801C37FB999E809ED14CBAAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:de:9c:08:c2:be:41:b6:6c:1e:d1:a0:8e:
5c:44:0a:50:6d:e6:94:62:6f:a9:a0:a8:39:c5:b1:
f4:51:10:da:04:41:5e:56:69:a7:3d:dd:55:05:69:
d6:d2:1c:c6:48:58:44:80:5c:04:0c:f8:bc:a8:fb:
a2:4d:74:7b:64:46:1c:44:1f:4f:9a:c1:56:da:34:
c6:95:b4:c8:f1:0c:bf:b2:67:96:a6:b0:ed:22:f1:
8d:ff:18:56:9b:7d:5e:31:a3:89:58:c5:64:00:df:
d5:13:38:5d:9c:a4:da:63:5e:1b:15:69:13:69:c3:
d4:a1:53:33:49:bb:76:8b:3b:57:b5:20:c9:e3:c1:
5b:d9:e9:31:d4:b8:b2:38:6f:07:60:93:f8:f2:33:
07:b3:66:c7:4f:05:ba:d6:d2:75:e6:68:67:b4:7b:
f4:8c:5f:e9:55:61:9a:82:3d:98:95:c2:1f:79:12:
fc:d4:a4:89:d8:af:e3:e3:15:80:ea:c2:97:9f:fc:
8f:34:1e:ea:f5:47:a1:7b:7e:88:b9:19:15:1a:cd:
e0:b3:9f:19:ae:4f:38:c6:6a:03:45:eb:5e:44:a9:
60:5a:61:4f:ba:86:75:6e:4b:55:c2:9d:84:2f:da:
03:dd:1c:6e:fa:c2:11:b2:0d:00:a8:3c:c3:e3:a2:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:64:A8:3D:1B:A9:68:EF:80:1C:37:FB:99:9E:80:9E:D1:4C:BA:AA
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:c701::/48
Signature Algorithm: sha256WithRSAEncryption
3b:93:9d:78:34:1a:47:fc:7d:3a:08:e5:0b:80:75:fd:b2:6f:
73:af:84:fa:01:80:d7:d0:00:18:69:50:2d:33:2c:4f:91:08:
f0:a5:59:de:41:ac:c4:54:04:95:20:2a:af:07:f9:3a:2a:58:
1a:b1:02:91:09:78:42:23:33:67:46:d7:bf:89:4c:11:92:ca:
0f:b0:76:07:d8:5e:cc:74:6a:6f:99:6a:54:1a:23:c1:f1:7d:
d6:74:ba:78:65:ea:c1:0c:8d:d0:7a:fa:67:c6:e8:ec:80:7a:
b1:0b:59:39:69:04:84:6d:ac:3e:0a:6a:d6:91:4e:9f:5f:2e:
78:ee:26:72:e1:18:09:a6:c1:0a:de:27:c4:a3:64:8e:33:8d:
57:35:3b:ca:eb:b8:fb:9f:36:87:11:9d:a1:b6:99:fd:e9:be:
85:e3:f4:7a:58:6f:0c:35:7f:5e:53:f4:7d:8b:62:75:d9:d8:
2d:ce:09:f2:90:0e:31:ff:9d:34:ac:d2:ea:47:d8:ff:58:a1:
ae:2c:6f:e1:8f:cd:88:3c:6d:9d:dc:8c:14:27:78:44:18:31:
6d:9a:40:98:77:5b:76:ca:c8:88:7a:75:c1:da:4f:06:d5:60:
cd:5f:28:04:7a:df:95:a3:b7:a4:ab:1f:72:2e:13:08:2b:23:
94:08:b4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 05:25:34 2025 by rpki-client