Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363338303a3a2f34342d3434203d3e20323134313239.roa
File: 326130613a363034343a363338303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier: 8eSQ0sozRfxzDVjwNmU2S9xdmOCvepYbVcro2nzSnVM=
Subject key identifier: C0:29:5D:13:4B:62:8F:8D:A5:B6:D6:FB:94:72:9C:1F:7B:2C:30:A4
Certificate issuer: /CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Certificate serial: 7EAB0796E98DCD744F06464CB45246ECE25DD6F4
Authority key identifier: 18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363338303a3a2f34342d3434203d3e20323134313239.roa
Signing time: Sat 07 Dec 2024 20:33:49 +0000
ROA not before: Sat 07 Dec 2024 20:28:49 +0000
ROA not after: Sat 06 Dec 2025 20:33:49 +0000
asID: 214129
IP address blocks: 2a0a:6044:6380::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:ab:07:96:e9:8d:cd:74:4f:06:46:4c:b4:52:46:ec:e2:5d:d6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Validity
Not Before: Dec 7 20:28:49 2024 GMT
Not After : Dec 6 20:33:49 2025 GMT
Subject: CN=C0295D134B628F8DA5B6D6FB94729C1F7B2C30A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:eb:11:c9:17:a2:12:d3:2d:00:2b:de:bf:
0f:df:cc:d6:39:6c:7f:9c:4c:ca:4f:ce:45:f8:ae:
b1:0f:e6:3b:a5:0c:b5:be:bf:a8:90:10:c4:85:cd:
5c:4c:23:5a:9d:16:3f:a6:ae:a5:db:6e:f9:95:11:
5f:d5:33:e5:b4:74:32:a9:18:73:77:13:9b:3e:f1:
a0:bd:c6:9c:15:e0:32:1b:cf:bf:33:44:d3:f6:b7:
f1:5a:02:9d:98:ed:17:e0:08:d5:3e:83:6d:15:3d:
f9:4b:ba:cd:15:5b:c0:c0:6c:a9:eb:a2:f0:77:a7:
0d:74:59:69:ae:10:f7:b3:1a:95:dc:33:e1:0a:50:
0d:c4:27:37:f4:63:dd:d5:53:0c:a0:3b:b6:df:0b:
f7:82:b5:69:1a:d5:ab:16:9d:6d:0e:6c:33:05:e0:
5d:5c:30:67:b4:a3:38:f4:90:a3:84:f1:05:86:d4:
b8:02:16:43:2f:0d:44:be:ef:64:24:0a:fd:5f:cc:
2e:38:b1:4d:27:0f:59:dc:e7:a3:57:ab:9a:90:f7:
78:7a:64:98:29:b8:ba:e2:3c:54:83:a5:54:51:63:
3e:ae:00:c3:bd:3d:8e:23:09:8f:be:98:87:0d:6d:
de:88:d7:59:dd:53:6a:2b:72:a5:84:ae:cb:8a:06:
60:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:29:5D:13:4B:62:8F:8D:A5:B6:D6:FB:94:72:9C:1F:7B:2C:30:A4
X509v3 Authority Key Identifier:
keyid:18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363338303a3a2f34342d3434203d3e20323134313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6380::/44
Signature Algorithm: sha256WithRSAEncryption
1c:c5:ac:8c:97:25:39:67:f9:23:01:1b:d3:77:e3:29:a0:a0:
22:7b:1d:5b:35:91:1e:52:52:45:d9:4d:61:b6:90:f7:26:9b:
b2:54:a4:cf:e2:50:91:94:0f:ef:93:20:54:13:fb:9d:c9:9a:
df:52:f9:b2:e7:5a:4a:24:d2:e1:0f:25:51:f0:5a:c3:d4:cb:
b0:53:4e:4e:09:e1:d0:11:eb:16:88:db:f4:38:68:d6:da:a6:
9a:6e:61:e9:a8:0d:ee:b7:e2:a7:2d:7b:34:a5:44:a9:07:a4:
98:bf:89:1a:2e:35:1e:5c:31:50:e6:71:27:57:2c:f1:31:1e:
f3:b4:6b:fe:2a:4a:15:be:41:1c:bc:8f:80:53:5a:77:b1:fd:
8b:43:2a:28:7e:a0:3d:d3:31:2f:75:02:11:e7:59:fd:90:53:
82:83:8a:1b:e1:99:f0:bc:a4:35:88:19:59:20:c4:dd:d6:52:
a4:ed:be:07:6a:f4:dd:25:41:e1:b5:82:82:66:b7:2f:f9:f5:
bb:75:db:91:4a:7b:89:60:8d:b4:b4:5d:ea:cf:19:f8:7c:99:
1e:f3:a3:6f:66:7f:42:fe:93:7b:3c:a4:c8:2c:3e:8e:1b:5c:
34:c3:c9:53:8f:95:35:9b:d1:5e:f3:b6:96:8c:5d:54:cf:39:
c5:b3:f0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:42 2025 by rpki-client