Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa
File: 326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa (raw, json)
Hash identifier: /s9FD+BuCvCOu4sZBij0Yh1eY8Nr8NHCtVi0OvPiCyY=
Subject key identifier: B9:4F:EC:B7:F3:20:19:5B:E4:5B:36:32:E9:81:54:F5:C1:E5:67:A9
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 56C35E55FAC0A0F8F4B7D7B03C4D4D36CFF527DE
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa
Signing time: Fri 20 Dec 2024 18:45:07 +0000
ROA not before: Fri 20 Dec 2024 18:40:07 +0000
ROA not after: Fri 19 Dec 2025 18:45:07 +0000
asID: 198342
IP address blocks: 2a14:6f45:dead::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:c3:5e:55:fa:c0:a0:f8:f4:b7:d7:b0:3c:4d:4d:36:cf:f5:27:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Dec 20 18:40:07 2024 GMT
Not After : Dec 19 18:45:07 2025 GMT
Subject: CN=B94FECB7F320195BE45B3632E98154F5C1E567A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2b:ca:96:ef:bb:2c:03:37:d1:1b:04:a5:56:
63:a3:4a:10:34:70:cc:2e:d1:dd:4c:94:ff:08:39:
d8:f9:66:90:0f:30:06:c7:08:e1:9b:f1:54:ba:5e:
77:d1:9c:ed:76:11:d1:95:8f:1c:9b:e0:7e:67:4f:
8a:16:71:2d:88:35:32:9d:c9:c9:14:8e:eb:31:67:
2f:d9:d3:93:a0:87:4e:b9:e2:19:bf:66:5e:8d:f7:
be:38:f2:0f:f0:23:42:2c:3f:8b:64:2e:c1:bb:bf:
00:dc:66:98:3d:e8:5e:35:0d:0f:2c:dc:26:31:79:
93:fd:39:0c:9a:82:44:9c:15:b2:61:a9:ae:8d:0f:
26:b4:87:1b:ad:6d:e9:60:64:40:f4:66:d5:9e:5f:
e2:01:4a:1c:d9:ca:ce:81:6b:6c:8a:4a:c4:79:58:
82:ff:ef:b1:1b:66:ec:7e:91:ef:6c:a6:b7:2a:7d:
37:3e:34:b2:56:e8:f5:b6:7f:5b:4a:a0:80:b4:94:
55:dc:76:fa:b2:92:31:8e:8d:06:99:1d:f9:e9:2a:
6b:4f:52:0d:02:04:5f:87:bb:96:5b:c9:3d:1a:fc:
a9:63:38:6c:2a:fd:9c:10:14:e2:b4:f1:f3:16:b5:
83:06:35:d3:c9:2a:a1:1c:14:d4:7e:e1:7a:e7:49:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4F:EC:B7:F3:20:19:5B:E4:5B:36:32:E9:81:54:F5:C1:E5:67:A9
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f45:dead::/48
Signature Algorithm: sha256WithRSAEncryption
79:b3:c6:25:39:6d:f3:93:13:53:54:d5:36:dd:4b:d8:a4:b8:
53:62:68:f5:95:d8:b2:70:cd:be:d3:a7:1c:7a:25:eb:f1:6b:
ce:b0:c3:62:5c:f0:80:26:4d:38:fa:ba:d2:6e:43:1f:58:9f:
2c:65:f5:b5:b2:18:ca:68:6e:25:bc:b6:2d:9f:07:a3:f2:ec:
e6:ec:29:cc:7f:46:d5:6b:b6:bf:b3:0b:6c:77:18:80:20:97:
e7:18:00:e8:5e:6a:21:fb:6e:21:b0:68:a6:e1:c8:0d:48:4e:
0d:e8:71:26:f2:eb:90:2b:02:2a:f6:cc:00:19:6c:17:5c:29:
0a:8c:1e:92:7e:ec:50:67:ab:e1:df:7a:aa:a5:81:5a:49:f4:
36:f4:03:b9:36:2d:98:a5:9f:03:df:ef:37:77:1b:81:96:19:
57:b0:fc:03:e1:26:02:16:06:b0:ca:ea:af:d2:77:9b:57:95:
51:f3:75:ce:a0:da:d8:4f:ab:e4:00:ea:18:ad:49:ca:b7:b7:
40:78:57:e0:9f:20:31:77:9d:d7:89:78:43:cf:c5:b9:37:ab:
c0:de:f4:ac:17:7f:27:8b:e0:61:f4:5b:0e:58:8f:3d:37:12:
11:45:1e:a7:73:11:dd:e4:cf:9a:8d:e8:3d:2d:b7:62:32:14:
c3:d3:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 05:25:34 2025 by rpki-client