Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363334303a3a2f34342d3434203d3e20323134313239.roa
File: 326130613a363034343a363334303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier: EyrEdnIsD6MmGB2oMtXYIv03WkTJvxfcebCSWoiXpMY=
Subject key identifier: B3:7A:BE:74:DA:EA:BD:78:77:C5:2C:12:D5:7D:9F:4F:71:1D:1E:93
Certificate issuer: /CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Certificate serial: 0EF40BAAA55F8EF8DCC5916EF9577E13241AF4A7
Authority key identifier: 18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363334303a3a2f34342d3434203d3e20323134313239.roa
Signing time: Sat 07 Dec 2024 20:33:49 +0000
ROA not before: Sat 07 Dec 2024 20:28:49 +0000
ROA not after: Sat 06 Dec 2025 20:33:49 +0000
asID: 214129
IP address blocks: 2a0a:6044:6340::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f4:0b:aa:a5:5f:8e:f8:dc:c5:91:6e:f9:57:7e:13:24:1a:f4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Validity
Not Before: Dec 7 20:28:49 2024 GMT
Not After : Dec 6 20:33:49 2025 GMT
Subject: CN=B37ABE74DAEABD7877C52C12D57D9F4F711D1E93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:c8:e2:66:e5:48:a3:d1:ec:76:65:13:8c:
7e:b5:4a:26:09:eb:a2:da:c3:5e:50:ad:45:7e:1d:
eb:27:eb:1b:db:b2:29:99:bc:be:41:23:29:2e:30:
03:82:65:73:6b:88:a0:4b:0c:48:a9:69:4b:2e:be:
e5:4d:38:4a:7d:fa:5c:94:ea:f5:74:97:ad:b3:51:
f4:9f:23:68:b1:30:21:a1:ca:5b:15:d1:bb:c5:05:
df:45:fc:1e:b2:69:9c:10:47:4d:92:20:3d:15:54:
b3:36:14:bf:53:92:56:16:a1:1a:3a:66:fc:d4:e8:
e1:cc:13:80:5d:b4:77:ce:a5:9d:96:5d:dc:66:6a:
34:cb:8c:d1:aa:df:cd:7c:01:96:ef:90:ae:5e:37:
0f:e1:1a:c5:2b:66:b2:fc:b4:3f:46:b8:74:06:7b:
5f:af:3d:92:60:2d:fb:a2:af:e5:79:22:f9:ad:69:
01:31:0c:54:ca:c5:c9:6a:69:bb:d0:39:e9:32:d1:
d6:45:e5:4a:79:c1:0b:8c:2c:b2:67:0d:d4:66:39:
b9:74:70:5d:cf:76:0a:b4:62:3f:2a:1c:b3:18:3a:
76:bc:8e:84:60:22:70:4a:ca:33:f6:63:e6:30:13:
a1:71:ef:a6:0e:13:64:e6:ef:ff:9b:83:9f:9d:78:
c3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7A:BE:74:DA:EA:BD:78:77:C5:2C:12:D5:7D:9F:4F:71:1D:1E:93
X509v3 Authority Key Identifier:
keyid:18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363334303a3a2f34342d3434203d3e20323134313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6340::/44
Signature Algorithm: sha256WithRSAEncryption
74:a6:88:95:58:7c:9e:81:5b:49:f2:7f:01:78:92:12:d8:ac:
f3:23:ee:49:c9:cf:a3:20:66:98:22:22:05:8c:52:34:32:6c:
0d:04:7c:14:4b:ec:11:95:f2:10:10:0f:30:a4:51:31:94:4f:
55:6a:ab:5f:dc:c0:28:32:31:92:b9:eb:83:43:c4:fd:8c:16:
05:db:0c:eb:06:11:9d:10:73:dc:5a:7d:df:39:22:2d:45:53:
d8:90:03:5d:8c:6f:86:11:dc:d0:c8:17:6a:7f:ae:92:cb:ae:
8a:35:9c:05:cd:a1:49:4f:4d:93:a2:1a:71:40:7c:c6:de:45:
ee:a6:e2:eb:56:3a:9a:ba:79:ea:33:83:3e:e2:da:e5:57:dc:
dc:f8:f1:d9:3d:ec:03:14:07:52:38:3d:6d:ca:9e:ea:e6:8c:
4f:44:55:a8:c4:14:d8:ac:ef:d4:13:72:d5:1c:54:46:48:a7:
48:b3:cf:2b:62:bf:a5:00:d4:41:87:bd:f4:1e:35:90:5b:8d:
72:6f:e3:e1:37:53:27:30:69:87:c1:b9:da:b9:99:a1:1f:79:
fb:f9:e1:58:6f:64:27:36:8f:af:9e:b5:b1:eb:98:06:c9:1f:
c7:a6:62:79:a2:53:2e:39:83:c6:58:e8:09:69:dc:db:35:5b:
64:ac:6a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:33:07 2025 by rpki-client