Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363333303a3a2f34342d3434203d3e20323134313239.roa
File: 326130613a363034343a363333303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier: 8nkHsaRfwF+aM1bGh1A3sS3dBGgIb7iksSf5XaXPQJE=
Subject key identifier: 06:05:15:42:5B:1A:EE:3C:E1:3E:5B:54:C6:6B:09:EA:61:E4:B5:DD
Certificate issuer: /CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Certificate serial: 0CBB0D4F3B95CE1C6597A19C3C2C031E7074901F
Authority key identifier: 18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363333303a3a2f34342d3434203d3e20323134313239.roa
Signing time: Sat 07 Dec 2024 20:33:47 +0000
ROA not before: Sat 07 Dec 2024 20:28:47 +0000
ROA not after: Sat 06 Dec 2025 20:33:47 +0000
asID: 214129
IP address blocks: 2a0a:6044:6330::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:bb:0d:4f:3b:95:ce:1c:65:97:a1:9c:3c:2c:03:1e:70:74:90:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Validity
Not Before: Dec 7 20:28:47 2024 GMT
Not After : Dec 6 20:33:47 2025 GMT
Subject: CN=060515425B1AEE3CE13E5B54C66B09EA61E4B5DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:73:5e:2b:3e:aa:d3:a8:62:76:34:44:f2:
ba:8c:2f:2b:18:ad:03:ea:dd:0a:9c:a5:4c:4e:61:
f7:a9:14:91:2a:ba:89:1e:83:c5:1c:75:c1:5c:ee:
f0:03:bc:ac:6b:c5:45:f8:ac:e4:7d:87:1b:c6:c2:
00:1f:f4:83:54:78:de:5e:8d:c8:d9:15:77:1c:5b:
5a:b5:11:dc:07:38:38:13:79:64:9c:60:dd:cc:99:
98:50:87:4c:81:e9:70:dc:cb:16:cd:2a:ae:a8:dd:
af:32:8c:f3:d0:8c:43:e5:73:58:f8:b2:9d:57:8d:
d7:6b:42:0d:95:6b:d4:be:df:d2:b8:67:2a:6b:01:
15:fb:9f:d3:68:cd:5a:43:30:55:01:ed:2a:ab:0f:
ca:de:11:54:23:6e:2f:ba:10:47:36:0f:c9:29:07:
cd:d1:b0:69:8b:21:9e:52:f1:50:ba:cd:16:e1:bb:
7c:3a:c8:0c:60:fe:12:fc:dc:61:a2:ee:45:16:54:
22:a9:49:7a:f1:8d:cc:47:4b:ef:00:cf:1e:37:03:
81:4c:15:3f:c7:42:73:17:b6:78:a4:31:07:fc:b3:
be:0e:8e:f4:34:77:15:c2:ba:fa:e7:c5:32:95:a7:
12:e4:87:25:9b:09:90:3f:1a:6d:15:3c:f7:ad:4d:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:05:15:42:5B:1A:EE:3C:E1:3E:5B:54:C6:6B:09:EA:61:E4:B5:DD
X509v3 Authority Key Identifier:
keyid:18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363333303a3a2f34342d3434203d3e20323134313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6330::/44
Signature Algorithm: sha256WithRSAEncryption
1f:cc:fd:5a:da:04:90:50:8c:bc:2f:20:88:16:b8:60:e5:70:
0c:01:02:87:61:e4:0c:b9:00:40:9a:2f:d8:0f:fc:02:e7:8b:
db:e4:36:3d:30:df:9b:91:0b:f7:43:10:8a:4b:47:4b:0d:80:
76:5d:e1:99:b3:2e:71:e5:0e:55:7b:70:5e:4d:79:7e:00:3c:
99:f7:f2:08:c4:06:67:5c:24:48:f8:fc:7e:1c:09:d0:a8:36:
30:31:28:3e:6a:c0:41:f1:69:6b:61:7a:c0:b1:77:0c:07:28:
2c:7c:ea:8f:fe:1d:5d:dc:67:3b:57:db:f8:c2:87:a8:af:76:
26:76:2b:66:62:70:ed:43:7e:54:25:9e:e5:cb:42:29:5d:16:
d2:59:57:7c:c9:8a:55:0a:92:0a:45:13:fb:09:5c:8f:70:72:
ba:80:a8:29:5a:4d:37:0f:31:ff:30:dc:2c:c7:05:75:6e:66:
d3:83:f1:c1:49:d9:02:54:bf:10:6a:4f:db:0a:d2:7e:01:06:
26:0a:c1:f3:65:7c:a9:96:8c:27:ea:c7:03:dc:64:69:13:dc:
d3:c5:32:78:ab:de:1a:24:63:03:b4:f0:f8:ed:f3:c8:15:31:
26:f2:6f:e8:7c:21:7f:49:6d:2e:1a:68:38:ed:a1:49:c2:93:
2c:f0:d8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:44:44 2025 by rpki-client