Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa
File: 326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa (raw, json)
Hash identifier: 84yN8GMB2a5DXwGkFW2zsyLvfW/TnY6P5ZHEy29emgk=
Subject key identifier: 88:E7:50:7D:D4:F6:C2:5E:E8:B5:C1:0F:99:D1:D3:4A:0E:99:FE:33
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 48D8588038EC5DE4B13733F7DC465DD8AA95731A
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa
Signing time: Fri 20 Dec 2024 17:11:15 +0000
ROA not before: Fri 20 Dec 2024 17:06:15 +0000
ROA not after: Fri 19 Dec 2025 17:11:15 +0000
asID: 48436
IP address blocks: 2a14:6f45:c000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d8:58:80:38:ec:5d:e4:b1:37:33:f7:dc:46:5d:d8:aa:95:73:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Dec 20 17:06:15 2024 GMT
Not After : Dec 19 17:11:15 2025 GMT
Subject: CN=88E7507DD4F6C25EE8B5C10F99D1D34A0E99FE33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:d9:25:8a:94:aa:0b:a4:ec:30:63:a3:78:
83:3b:15:b6:14:ed:65:36:a9:18:39:5f:fb:81:cc:
9e:39:52:c0:a4:7b:4c:16:98:18:ef:b4:8b:98:1f:
2c:39:45:f9:87:c6:4e:22:bc:b7:6a:16:5e:a2:97:
59:47:0e:5d:d1:d1:98:cd:de:5c:50:58:3e:51:9a:
56:cb:48:45:be:5a:d0:b5:7f:87:13:5d:41:2a:59:
8e:93:9d:74:54:05:15:42:41:98:87:a3:7a:d6:47:
fb:62:86:53:a0:60:6a:8d:cd:e6:d8:f5:84:65:f9:
e7:ad:7b:b9:86:83:26:5e:87:5b:41:2f:07:06:98:
05:ec:f4:72:c8:dd:4d:d7:41:a2:44:2e:12:50:c2:
aa:f7:33:f3:3e:70:7f:d8:f1:fe:cd:65:41:f6:57:
b9:7f:bf:b8:df:5a:32:dc:bf:96:05:6d:9e:85:25:
59:9b:e4:28:46:b1:71:49:47:d7:a5:76:94:39:12:
c1:65:0f:8d:e0:ef:3c:47:7d:d3:7e:0a:98:f3:ae:
b1:57:2d:f2:93:9a:fd:e2:2f:79:55:16:af:0c:7d:
21:95:14:27:64:db:f2:0c:b1:f6:1c:95:c0:87:92:
0b:48:98:04:f9:0e:4c:a8:b7:f7:eb:8a:7d:ca:b1:
f2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E7:50:7D:D4:F6:C2:5E:E8:B5:C1:0F:99:D1:D3:4A:0E:99:FE:33
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f45:c000::/36
Signature Algorithm: sha256WithRSAEncryption
7a:92:a6:11:32:ee:f5:24:17:79:15:31:bb:41:a5:b1:5e:31:
cb:e4:52:b8:d0:37:3f:f4:09:4e:76:f0:df:d2:3e:41:32:3d:
55:89:04:c8:b6:58:90:3b:f8:03:7e:8e:18:14:37:2b:fe:56:
09:c6:54:27:14:a4:20:0c:f8:75:05:af:bb:a7:b7:2d:8a:2c:
1a:a2:7e:3b:37:aa:3a:34:41:d1:b0:23:a0:bd:90:79:eb:d3:
5c:bf:36:57:7e:1d:08:af:1c:aa:8d:9c:4f:03:62:b2:43:3b:
ab:e4:98:0a:ef:cb:9c:39:01:a7:8e:8d:46:a6:33:15:7f:2e:
0c:21:bf:70:66:d7:c1:3e:7a:3a:3e:f7:f1:71:cb:80:27:0c:
6a:ef:20:22:86:9d:93:a6:3d:7e:68:6a:57:9e:d7:1a:17:f7:
ce:10:34:59:b0:8d:46:90:d3:90:92:93:32:8a:9d:24:81:6e:
7f:6f:c1:14:82:67:da:90:99:43:c6:a2:86:16:78:d9:1b:46:
2a:8e:ba:d8:84:24:91:59:ce:99:3a:e7:4e:26:8a:cb:17:23:
fb:8d:4c:1f:ff:8a:35:86:e0:f7:df:f7:df:d9:fb:9b:54:43:
83:fa:ae:e3:65:28:ac:ba:38:0c:87:a9:16:a8:11:10:c1:d1:
4f:b4:47:32
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUSNhYgDjsXeSxNzP33EZd2KqVcxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi
YjJhYzMyZTAeFw0yNDEyMjAxNzA2MTVaFw0yNTEyMTkxNzExMTVaMDMxMTAvBgNV
BAMTKDg4RTc1MDdERDRGNkMyNUVFOEI1QzEwRjk5RDFEMzRBMEU5OUZFMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrpdklipSqC6TsMGOjeIM7FbYU
7WU2qRg5X/uBzJ45UsCke0wWmBjvtIuYHyw5RfmHxk4ivLdqFl6il1lHDl3R0ZjN
3lxQWD5RmlbLSEW+WtC1f4cTXUEqWY6TnXRUBRVCQZiHo3rWR/tihlOgYGqNzebY
9YRl+eete7mGgyZeh1tBLwcGmAXs9HLI3U3XQaJELhJQwqr3M/M+cH/Y8f7NZUH2
V7l/v7jfWjLcv5YFbZ6FJVmb5ChGsXFJR9eldpQ5EsFlD43g7zxHfdN+CpjzrrFX
LfKTmv3iL3lVFq8MfSGVFCdk2/IMsfYclcCHkgtImAT5Dkyot/frin3KsfL1AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUiOdQfdT2wl7otcEPmdHTSg6Z/jMwHwYDVR0j
BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5
YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz
cXd5NC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODkt
ZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMzI2MTMxMzQzYTM2NjYzNDM1
M2E2MzMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNkM2UyMDM0MzgzNDMzMzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQqFG9FwDANBgkqhkiG9w0BAQsFAAOCAQEAepKmETLu9SQXeRUxu0Gl
sV4xy+RSuNA3P/QJTnbw39I+QTI9VYkEyLZYkDv4A36OGBQ3K/5WCcZUJxSkIAz4
dQWvu6e3LYosGqJ+OzeqOjRB0bAjoL2QeevTXL82V34dCK8cqo2cTwNiskM7q+SY
Cu/LnDkBp46NRqYzFX8uDCG/cGbXwT56Oj738XHLgCcMau8gIoadk6Y9fmhqV57X
Ghf3zhA0WbCNRpDTkJKTMoqdJIFuf2/BFIJn2pCZQ8aihhZ42RtGKo662IQkkVnO
mTrnTiaKyxcj+41MH/+KNYbg99/339n7m1RDg/qu42UorLo4DIepFqgREMHRT7RH
Mg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 05:24:34 2025 by rpki-client