Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363336303a3a2f34342d3434203d3e20323134313239.roa
File: 326130613a363034343a363336303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier: lUQq/DyByYZaCh0oAeWqck56zYYmSLZ9hdCXFoI+CpI=
Subject key identifier: 9D:1F:56:46:ED:87:9C:1C:DF:73:E6:29:67:02:BF:DA:59:78:59:16
Certificate issuer: /CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Certificate serial: 19C74DCFAD98207D8BE14868FA2312A11C0CB392
Authority key identifier: 18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363336303a3a2f34342d3434203d3e20323134313239.roa
Signing time: Sat 07 Dec 2024 20:33:48 +0000
ROA not before: Sat 07 Dec 2024 20:28:48 +0000
ROA not after: Sat 06 Dec 2025 20:33:48 +0000
asID: 214129
IP address blocks: 2a0a:6044:6360::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c7:4d:cf:ad:98:20:7d:8b:e1:48:68:fa:23:12:a1:1c:0c:b3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Validity
Not Before: Dec 7 20:28:48 2024 GMT
Not After : Dec 6 20:33:48 2025 GMT
Subject: CN=9D1F5646ED879C1CDF73E6296702BFDA59785916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:aa:21:ca:47:f3:89:a4:01:77:cd:c8:31:
59:27:b0:76:03:bf:81:9c:7f:6f:c0:5f:4e:a1:ed:
f7:4c:2a:c2:f4:b3:fd:98:e4:92:25:78:6c:05:d3:
d9:81:63:22:62:df:34:28:6a:c0:13:aa:dc:2e:d7:
b4:6c:37:e5:ca:86:a6:33:36:ad:30:5a:03:bd:1f:
31:20:cf:84:84:49:e9:b6:a4:09:d4:46:78:d3:43:
46:11:ad:11:2e:f9:ae:40:2c:75:c7:da:4a:c7:18:
17:fa:fe:a2:57:36:04:ca:ae:b9:cc:ff:8f:bc:e1:
6b:5d:a7:49:d8:8b:9f:a3:26:7d:71:bf:03:c4:4a:
15:52:46:ef:eb:98:8b:21:32:50:d4:f0:00:6a:6b:
5f:43:59:a9:40:3b:21:22:6a:c9:3b:fa:97:2f:9b:
39:5e:9b:38:31:13:c2:81:57:8f:51:a0:0a:1c:83:
09:31:76:31:83:d5:a3:f9:8c:03:2c:02:25:8c:e2:
77:1b:f1:1f:65:8d:40:03:43:92:65:a9:7d:43:ad:
d9:86:9f:33:a4:22:04:b3:4c:55:27:c5:99:27:1b:
94:f9:5b:6d:b5:d2:af:6e:ea:2b:71:e8:c1:95:ab:
d2:af:04:f7:df:84:be:6b:33:43:22:51:3d:0b:99:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1F:56:46:ED:87:9C:1C:DF:73:E6:29:67:02:BF:DA:59:78:59:16
X509v3 Authority Key Identifier:
keyid:18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363336303a3a2f34342d3434203d3e20323134313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6360::/44
Signature Algorithm: sha256WithRSAEncryption
38:de:36:28:60:9d:ce:29:de:ce:85:6b:d8:3d:47:67:26:79:
d2:50:a4:51:4e:47:a3:1f:5c:e9:69:03:82:58:2d:8a:88:2a:
08:3b:bd:de:26:52:da:14:97:eb:2a:de:ce:de:7a:25:ee:c9:
75:9d:23:aa:fc:f7:bb:5d:a4:b2:c8:52:75:e3:9f:08:7d:67:
de:b1:82:81:a4:13:4b:74:9e:5b:77:52:15:de:5f:9e:65:ec:
69:25:ff:6d:94:87:42:c3:a1:35:39:70:75:76:4e:8e:7d:37:
64:4a:93:ca:c3:8f:b6:b0:74:b0:57:1a:b9:61:e5:9d:ec:a7:
af:48:d1:dd:df:a0:bf:44:c6:85:14:60:f4:ae:f3:43:12:fc:
f7:a7:39:3a:dd:7e:48:e8:dd:39:3b:e7:3f:2d:c2:73:51:bc:
ef:29:08:74:0b:06:b7:59:e7:e6:f3:c4:ac:4f:cc:90:c4:31:
d2:68:dc:ef:9c:9f:70:f3:f3:79:ce:af:71:f9:88:04:4b:c8:
77:19:ff:32:db:ad:58:b7:ad:b2:79:9c:9e:3f:b2:62:04:f1:
4f:be:58:92:97:1e:bb:88:37:23:b0:20:d1:6e:18:97:c5:54:
5b:81:7b:49:cc:af:8c:5d:6f:cd:c3:24:f6:a2:b0:68:e0:44:
44:65:80:c2
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUGcdNz62YIH2L4Uho+iMSoRwMs5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThGMDMyRUNBMzY0NEEzQjc0M0YwRUI2RThCNDk3ODBG
QUQzQkNBQTAeFw0yNDEyMDcyMDI4NDhaFw0yNTEyMDYyMDMzNDhaMDMxMTAvBgNV
BAMTKDlEMUY1NjQ2RUQ4NzlDMUNERjczRTYyOTY3MDJCRkRBNTk3ODU5MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwKohykfziaQBd83IMVknsHYD
v4Gcf2/AX06h7fdMKsL0s/2Y5JIleGwF09mBYyJi3zQoasATqtwu17RsN+XKhqYz
Nq0wWgO9HzEgz4SESem2pAnURnjTQ0YRrREu+a5ALHXH2krHGBf6/qJXNgTKrrnM
/4+84Wtdp0nYi5+jJn1xvwPEShVSRu/rmIshMlDU8ABqa19DWalAOyEiask7+pcv
mzlemzgxE8KBV49RoAocgwkxdjGD1aP5jAMsAiWM4ncb8R9ljUADQ5JlqX1DrdmG
nzOkIgSzTFUnxZknG5T5W2210q9u6itx6MGVq9KvBPffhL5rM0MiUT0LmSFXAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUnR9WRu2HnBzfc+YpZwK/2ll4WRYwHwYDVR0j
BBgwFoAUGPAy7KNkSjt0Pw626LSXgPrTvKowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzNiYWRhYmMtOWQ0My00ZTdkLTg0N2ItNGU4NmJlOWRh
YzYzLzEvMThGMDMyRUNBMzY0NEEzQjc0M0YwRUI2RThCNDk3ODBGQUQzQkNBQS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8xOEYwMzJFQ0EzNjQ0QTNCNzQzRjBFQjZF
OEI0OTc4MEZBRDNCQ0FBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS83M2JhZGFiYy05ZDQzLTRlN2QtODQ3Yi00ZTg2YmU5ZGFjNjMvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM2MzMzNjMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz
MTM0MzEzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKgpgRGNgMA0GCSqGSIb3DQEBCwUAA4IBAQA4
3jYoYJ3OKd7OhWvYPUdnJnnSUKRRTkejH1zpaQOCWC2KiCoIO73eJlLaFJfrKt7O
3nol7sl1nSOq/Pe7XaSyyFJ1458IfWfesYKBpBNLdJ5bd1IV3l+eZexpJf9tlIdC
w6E1OXB1dk6OfTdkSpPKw4+2sHSwVxq5YeWd7KevSNHd36C/RMaFFGD0rvNDEvz3
pzk63X5I6N05O+c/LcJzUbzvKQh0Cwa3Wefm88SsT8yQxDHSaNzvnJ9w8/N5zq9x
+YgES8h3Gf8y261Yt62yeZyeP7JiBPFPvliSlx67iDcjsCDRbhiXxVRbgXtJzK+M
XW/NwyT2orBo4EREZYDC
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:14 2025 by rpki-client