Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363330303a3a2f34302d3438203d3e20323134313239.roa
File: 326130613a363034343a363330303a3a2f34302d3438203d3e20323134313239.roa (raw, json)
Hash identifier: rSGkFZ9gG4+imHaBUu269rB9xF/bdjnYg7tXPBKc/d0=
Subject key identifier: C3:CC:16:41:18:E6:48:0F:5D:C5:CE:01:44:A8:F0:34:25:35:A5:C6
Certificate issuer: /CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Certificate serial: 714E32A2B798905B8D9FAD173205330E56EA512C
Authority key identifier: 18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363330303a3a2f34302d3438203d3e20323134313239.roa
Signing time: Wed 11 Dec 2024 14:54:28 +0000
ROA not before: Wed 11 Dec 2024 14:49:28 +0000
ROA not after: Wed 10 Dec 2025 14:54:28 +0000
asID: 214129
IP address blocks: 2a0a:6044:6300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:4e:32:a2:b7:98:90:5b:8d:9f:ad:17:32:05:33:0e:56:ea:51:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Validity
Not Before: Dec 11 14:49:28 2024 GMT
Not After : Dec 10 14:54:28 2025 GMT
Subject: CN=C3CC164118E6480F5DC5CE0144A8F0342535A5C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:c5:f3:ef:41:af:89:4e:6c:47:2d:d5:85:
f1:9c:87:f8:e1:8a:b6:58:3d:37:91:08:5b:93:46:
87:94:e2:cc:8e:f9:5d:3e:57:78:dd:08:e8:27:29:
3d:92:f2:98:e7:47:93:8c:b0:24:85:74:90:61:df:
46:65:eb:e1:de:da:e7:ee:33:a0:fe:08:39:f7:b4:
5c:bf:6b:8f:5b:a6:21:da:65:4a:9c:71:f2:37:ed:
de:9e:32:9a:a3:30:ff:8f:ae:cc:f6:40:32:ca:fb:
87:03:1c:12:a9:a8:fa:8d:6a:50:04:1d:f1:c8:fa:
8a:c9:a7:c5:64:59:f4:73:21:b7:fb:38:34:f4:4e:
a3:45:22:7b:ef:9b:4a:db:c6:9b:b4:72:86:70:f5:
e2:3d:45:1c:7c:72:16:3f:d0:e4:15:74:17:fb:a7:
60:22:b9:7f:0c:41:7d:a5:cb:41:c8:a5:06:4f:55:
af:d8:dd:ee:63:b2:24:ee:6d:02:23:2c:30:6e:75:
58:b4:88:51:bb:81:bf:dc:9b:29:ca:5f:a2:aa:ce:
b4:4c:0b:d7:0d:0e:cc:ac:02:fd:23:dd:cf:d6:f3:
92:9e:35:96:9d:1e:a7:70:ba:82:9e:1c:12:a1:97:
14:8f:4b:b0:f8:a8:b0:34:4d:ed:6e:47:4a:2a:41:
01:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CC:16:41:18:E6:48:0F:5D:C5:CE:01:44:A8:F0:34:25:35:A5:C6
X509v3 Authority Key Identifier:
keyid:18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363330303a3a2f34302d3438203d3e20323134313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6300::/40
Signature Algorithm: sha256WithRSAEncryption
4a:29:19:2c:0b:f4:eb:4c:48:40:81:e2:92:ab:f1:80:89:d2:
2e:da:54:67:b5:1e:96:5d:d1:89:9a:c0:13:52:a4:a7:1d:35:
85:7f:c0:e9:cb:f7:cd:7d:3b:78:b9:94:b7:ad:55:bd:5a:8b:
bf:aa:c5:a3:f8:65:5e:27:fa:a1:48:8c:0a:53:15:d0:fa:ef:
2a:a6:5a:47:4f:28:bd:1f:81:eb:0e:18:a2:00:20:23:ad:46:
c1:86:57:17:9f:4c:01:5b:f5:e6:dd:22:ed:3e:92:fe:bf:72:
24:79:c8:49:54:21:42:c2:8a:e6:f2:2b:26:71:ac:ae:bb:05:
49:04:73:98:a6:21:1f:3e:46:59:45:77:7d:58:f9:80:34:53:
67:a2:c7:65:f1:e0:ae:3e:2b:11:1c:69:35:07:6c:30:80:aa:
41:7a:29:ea:00:a4:cf:47:e1:02:ee:ae:ea:b0:9b:0a:0d:32:
c4:30:13:9d:fb:c5:76:0b:8a:11:b2:b6:1d:f3:c7:66:13:75:
4c:db:eb:cc:1c:5a:00:7a:1d:60:9a:3b:f0:2b:92:f8:23:5b:
32:fb:16:a4:8a:61:c3:40:1b:f4:f2:b8:2c:32:52:98:5f:73:
7e:e7:a8:89:e8:23:28:cf:e1:e5:68:8f:d4:6b:9c:7b:f0:44:
88:04:67:f4
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUcU4yoreYkFuNn60XMgUzDlbqUSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThGMDMyRUNBMzY0NEEzQjc0M0YwRUI2RThCNDk3ODBG
QUQzQkNBQTAeFw0yNDEyMTExNDQ5MjhaFw0yNTEyMTAxNDU0MjhaMDMxMTAvBgNV
BAMTKEMzQ0MxNjQxMThFNjQ4MEY1REM1Q0UwMTQ0QThGMDM0MjUzNUE1QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2csXz70GviU5sRy3VhfGch/jh
irZYPTeRCFuTRoeU4syO+V0+V3jdCOgnKT2S8pjnR5OMsCSFdJBh30Zl6+He2ufu
M6D+CDn3tFy/a49bpiHaZUqccfI37d6eMpqjMP+Prsz2QDLK+4cDHBKpqPqNalAE
HfHI+orJp8VkWfRzIbf7ODT0TqNFInvvm0rbxpu0coZw9eI9RRx8chY/0OQVdBf7
p2AiuX8MQX2ly0HIpQZPVa/Y3e5jsiTubQIjLDBudVi0iFG7gb/cmynKX6KqzrRM
C9cNDsysAv0j3c/W85KeNZadHqdwuoKeHBKhlxSPS7D4qLA0Te1uR0oqQQG9AgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUw8wWQRjmSA9dxc4BRKjwNCU1pcYwHwYDVR0j
BBgwFoAUGPAy7KNkSjt0Pw626LSXgPrTvKowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzNiYWRhYmMtOWQ0My00ZTdkLTg0N2ItNGU4NmJlOWRh
YzYzLzEvMThGMDMyRUNBMzY0NEEzQjc0M0YwRUI2RThCNDk3ODBGQUQzQkNBQS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8xOEYwMzJFQ0EzNjQ0QTNCNzQzRjBFQjZF
OEI0OTc4MEZBRDNCQ0FBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS83M2JhZGFiYy05ZDQzLTRlN2QtODQ3Yi00ZTg2YmU5ZGFjNjMvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM2MzMzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz
MTM0MzEzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgRGMwDQYJKoZIhvcNAQELBQADggEBAEop
GSwL9OtMSECB4pKr8YCJ0i7aVGe1HpZd0YmawBNSpKcdNYV/wOnL9819O3i5lLet
Vb1ai7+qxaP4ZV4n+qFIjApTFdD67yqmWkdPKL0fgesOGKIAICOtRsGGVxefTAFb
9ebdIu0+kv6/ciR5yElUIULCiubyKyZxrK67BUkEc5imIR8+RllFd31Y+YA0U2ei
x2Xx4K4+KxEcaTUHbDCAqkF6KeoApM9H4QLuruqwmwoNMsQwE537xXYLihGyth3z
x2YTdUzb68wcWgB6HWCaO/ArkvgjWzL7FqSKYcNAG/TyuCwyUphfc37nqInoIyjP
4eVoj9RrnHvwRIgEZ/Q=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:40:29 2025 by rpki-client