Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363331303a3a2f34342d3434203d3e20323134313239.roa
File: 326130613a363034343a363331303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier: tK5SQSu4MRIpllo9VYWFVsgclLtt0l07LS4BAJO1mrg=
Subject key identifier: 70:81:6D:4D:D8:ED:F1:CB:FC:9C:63:5C:46:3F:7D:B1:BD:CA:9A:32
Certificate issuer: /CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Certificate serial: 35242349D89E577AC1890582C6A9AB9FA783A438
Authority key identifier: 18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363331303a3a2f34342d3434203d3e20323134313239.roa
Signing time: Sat 07 Dec 2024 20:33:50 +0000
ROA not before: Sat 07 Dec 2024 20:28:50 +0000
ROA not after: Sat 06 Dec 2025 20:33:50 +0000
asID: 214129
IP address blocks: 2a0a:6044:6310::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:24:23:49:d8:9e:57:7a:c1:89:05:82:c6:a9:ab:9f:a7:83:a4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Validity
Not Before: Dec 7 20:28:50 2024 GMT
Not After : Dec 6 20:33:50 2025 GMT
Subject: CN=70816D4DD8EDF1CBFC9C635C463F7DB1BDCA9A32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:d0:1c:4e:d7:cc:7a:9b:1e:1c:8b:b0:c2:
03:90:13:07:62:02:e4:c5:9b:77:47:6b:61:d1:b4:
6f:66:82:5f:62:c7:a0:db:db:d4:af:de:ec:6e:71:
5e:5f:8b:59:b5:f4:eb:e6:fd:95:3a:5c:cc:51:09:
77:e5:bd:2d:ab:f5:e1:49:8e:a9:b8:00:67:5e:b3:
18:4e:75:03:cc:e9:2b:45:8a:0d:ba:51:c7:f1:59:
fd:4a:c6:67:7d:4e:b0:bd:29:0e:02:fa:49:b3:24:
5b:c2:0a:7e:79:2c:df:ec:e5:64:ee:74:d8:ba:b6:
2e:3f:1f:52:f5:46:5f:5f:8a:20:bd:46:4f:ed:75:
65:7c:cc:18:d6:49:a1:c2:1f:87:eb:dd:ca:bc:8c:
79:fd:61:ed:26:f8:9d:d0:af:2f:3d:62:2c:13:39:
80:8e:d6:e5:69:8f:9c:0a:a9:71:6f:99:4e:fe:3d:
d6:db:dd:03:35:6c:f9:18:0c:8e:59:5c:df:ef:9d:
7a:dd:74:b4:7c:80:2c:28:fa:2a:ce:e3:c7:f4:ef:
51:ad:69:4f:03:04:2a:4c:f3:47:f1:28:c4:73:75:
f0:92:8f:83:cb:43:8a:a9:5d:d4:ac:72:2c:30:80:
1d:c8:0c:4b:b3:c4:34:3e:ce:fa:f0:04:11:f0:1f:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:81:6D:4D:D8:ED:F1:CB:FC:9C:63:5C:46:3F:7D:B1:BD:CA:9A:32
X509v3 Authority Key Identifier:
keyid:18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363331303a3a2f34342d3434203d3e20323134313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6310::/44
Signature Algorithm: sha256WithRSAEncryption
7d:6c:45:9a:bd:ff:b8:54:30:f2:ee:95:62:6a:95:1a:f1:a5:
6b:99:4b:7f:ff:22:bf:b3:de:36:1c:2e:53:9d:e7:51:72:e7:
72:13:79:8d:6d:11:74:40:7f:8e:fd:af:86:9b:07:66:b5:06:
db:d4:a8:c5:26:2f:af:ab:09:36:a8:ae:33:dc:95:e1:bc:6a:
41:cf:4e:4f:25:f6:38:92:60:a2:fd:6c:1e:dd:71:fe:5b:0e:
d8:12:d6:ba:c3:96:38:a6:e1:12:f2:c4:51:5c:0b:eb:8b:f1:
3a:b9:06:5f:1f:33:7b:74:79:cf:09:c7:75:10:aa:cc:e7:e0:
7a:45:6d:4a:42:ee:50:65:37:b3:5b:b6:f8:6f:55:a2:a9:c3:
fd:70:3b:e6:8d:41:ea:94:19:4c:55:3f:8f:74:a3:40:62:6c:
4e:54:f3:5f:18:03:b8:ab:77:c6:b4:c4:57:ca:88:2d:22:b9:
d3:83:90:78:d4:a3:3f:a6:14:63:a5:71:6f:70:34:d7:54:73:
a6:b9:ec:43:40:d8:9a:0f:59:21:2e:a3:e1:8e:a1:49:bd:08:
32:75:d1:6a:4a:f3:e2:93:ed:ec:95:bd:e8:56:a9:28:85:ae:
41:14:2e:e3:b1:69:e2:13:7d:26:93:5a:03:b5:82:93:df:87:
35:96:ec:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:08 2025 by rpki-client