Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa
File: 326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa (raw, json)
Hash identifier: D8dy67lH7mKpFtKbPMaHWGtbJcZylACehWx+4H0irZc=
Subject key identifier: CD:58:4B:AB:57:5F:9D:12:33:5A:69:E4:E3:4F:28:02:C0:F2:DB:FD
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 27FB899B6B1F8F3178197E62302B067DBD3FC43B
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa
Signing time: Fri 20 Dec 2024 18:44:42 +0000
ROA not before: Fri 20 Dec 2024 18:39:42 +0000
ROA not after: Fri 19 Dec 2025 18:44:42 +0000
asID: 48436
IP address blocks: 2a14:6f45:dead::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:fb:89:9b:6b:1f:8f:31:78:19:7e:62:30:2b:06:7d:bd:3f:c4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Dec 20 18:39:42 2024 GMT
Not After : Dec 19 18:44:42 2025 GMT
Subject: CN=CD584BAB575F9D12335A69E4E34F2802C0F2DBFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:4d:3f:69:6d:74:91:f3:06:8b:9e:90:c2:
84:8a:7a:d5:26:51:84:ba:95:e0:c8:92:a1:3b:61:
1a:82:c3:b7:3d:63:15:42:1a:e9:69:ec:15:83:3d:
95:38:e0:ab:6e:d5:19:4c:91:ec:e2:3e:d2:c6:59:
b7:9a:00:9f:6b:60:75:46:bd:3c:f4:77:17:60:c4:
88:73:6d:91:83:d3:49:bf:d4:16:15:89:dd:80:59:
b0:5b:86:1f:e1:81:7c:6a:99:f6:08:bd:89:d3:f5:
6e:cf:d8:07:d2:f0:42:17:e0:bc:d3:8f:f6:35:74:
4a:e3:7a:1c:83:65:aa:2f:73:c2:62:81:85:39:81:
fa:ec:cb:11:31:a3:51:8a:ad:1a:a7:03:80:7f:2a:
01:7c:86:a8:f3:ec:49:70:a5:d0:48:77:da:88:3f:
8e:4f:a3:1a:8f:59:c0:ec:9b:e8:88:21:31:92:ce:
d9:a7:04:22:75:bd:ba:d4:33:bb:0f:8a:6d:84:0b:
53:6e:35:aa:2d:a8:61:9d:ff:d2:13:12:ac:85:58:
32:e9:57:52:4e:7f:48:b8:7c:13:24:f2:90:04:e3:
1b:fa:44:92:85:2e:b8:0b:8d:97:20:26:b8:eb:da:
94:38:3b:9d:9d:99:e4:d0:85:cb:4e:44:01:43:3a:
e8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:58:4B:AB:57:5F:9D:12:33:5A:69:E4:E3:4F:28:02:C0:F2:DB:FD
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f45:dead::/48
Signature Algorithm: sha256WithRSAEncryption
62:07:41:e2:b7:be:0b:d9:56:a3:84:5c:9b:bd:73:2a:51:0d:
94:ee:a2:04:37:27:b7:af:3f:01:56:e2:23:bf:8d:4f:74:9f:
ee:fc:6f:98:05:dd:f4:9b:0d:93:74:21:94:ca:4e:0c:e5:0a:
af:1d:37:5b:5e:f2:d8:96:c3:49:f7:00:9e:d2:49:32:8b:80:
5b:d3:83:42:c9:35:d1:38:16:65:92:e2:81:e9:89:89:6e:8a:
7a:11:c6:59:0f:dc:aa:dd:b8:a8:db:cc:dd:47:99:f4:07:e2:
25:8b:a2:17:7f:29:68:b5:7f:d9:f3:64:b5:aa:49:44:1e:7c:
93:f6:02:6b:a1:fe:33:d0:e8:ab:07:35:00:1d:58:78:d2:64:
10:1a:6e:62:f8:4c:d7:e7:5a:17:d3:9c:fd:02:d1:d2:89:d6:
55:ed:f4:8a:b8:7b:bf:cd:73:5e:97:b7:8d:a0:c2:31:bd:ba:
e4:f9:95:98:f4:fa:57:da:87:08:c8:3c:e7:9b:d1:fa:a5:57:
3c:8f:bc:b2:a8:72:de:a9:12:ea:65:52:ad:be:57:d3:4e:5a:
65:6f:72:fa:fe:9b:f2:16:51:2f:21:67:6a:87:d7:eb:e8:ca:
76:31:e4:1d:25:a1:80:11:f9:28:f3:7d:2e:11:05:ed:fa:9c:
b5:7d:0c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 05:22:50 2025 by rpki-client