Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363361303a3a2f34342d3434203d3e20323134313239.roa
File: 326130613a363034343a363361303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier: pIZQkr/piPDcXXJ+/o0xbc4PetvUct88VJStMno1Eb0=
Subject key identifier: 79:F5:C7:F0:A1:A7:BB:58:EF:B9:F9:29:DD:21:6E:DD:40:12:C7:2F
Certificate issuer: /CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Certificate serial: 3894B8B848D6F89AB8439A88CF69B1E13EB8CE3A
Authority key identifier: 18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363361303a3a2f34342d3434203d3e20323134313239.roa
Signing time: Sun 08 Dec 2024 16:33:27 +0000
ROA not before: Sun 08 Dec 2024 16:28:27 +0000
ROA not after: Sun 07 Dec 2025 16:33:27 +0000
asID: 214129
IP address blocks: 2a0a:6044:63a0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:94:b8:b8:48:d6:f8:9a:b8:43:9a:88:cf:69:b1:e1:3e:b8:ce:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Validity
Not Before: Dec 8 16:28:27 2024 GMT
Not After : Dec 7 16:33:27 2025 GMT
Subject: CN=79F5C7F0A1A7BB58EFB9F929DD216EDD4012C72F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:5e:eb:c8:62:25:d5:2a:e3:39:09:1c:7b:
76:96:a6:d4:ad:1c:b8:52:27:ef:80:5a:70:c7:05:
8d:5e:f9:27:86:ff:20:1e:c3:46:50:be:03:14:26:
df:66:06:0f:39:b2:9c:6f:f7:74:d0:8d:86:8c:33:
05:3b:ab:79:6f:3d:dc:1a:fd:be:0e:fd:26:5b:82:
9a:c4:76:c6:9c:ca:71:f4:45:75:0a:2e:d3:d3:ac:
ee:0b:13:a4:da:4b:ac:41:ed:ed:13:1f:67:5b:52:
3f:c9:93:64:60:57:a6:5d:53:f2:65:f7:f3:19:6a:
58:28:40:aa:d0:47:7e:de:6b:ab:29:f5:a0:6a:91:
21:03:83:e9:54:62:51:f3:d0:a3:67:a2:32:4c:e4:
62:a2:21:b9:09:8d:9d:cb:f2:03:c9:9b:af:07:b8:
bb:c3:a8:47:8b:66:0f:b1:8b:fa:e9:f7:32:ae:c4:
54:c7:3e:6d:4a:a5:4b:39:d6:4f:3a:c6:c5:f6:e0:
22:68:54:dc:13:3a:fb:08:22:08:a2:73:8e:0e:5c:
7d:89:69:77:10:dd:43:b9:a6:c6:a0:e7:bd:2f:61:
5d:26:92:5c:33:7f:72:73:33:7a:97:9d:ec:ab:7d:
e9:46:b3:d7:12:bf:20:dd:02:2c:04:cb:70:43:5a:
6b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F5:C7:F0:A1:A7:BB:58:EF:B9:F9:29:DD:21:6E:DD:40:12:C7:2F
X509v3 Authority Key Identifier:
keyid:18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363361303a3a2f34342d3434203d3e20323134313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:63a0::/44
Signature Algorithm: sha256WithRSAEncryption
54:5b:29:74:ae:b8:dd:2a:fb:3e:8d:01:13:ba:88:55:55:cc:
80:0b:70:f3:e3:24:9f:83:bf:4d:a1:85:4d:ee:f5:52:fc:5f:
98:bf:dd:a9:a6:ab:1f:ed:f6:8c:08:21:50:01:6f:36:e4:29:
e1:c2:a0:1f:a7:e9:c6:d4:73:20:32:b9:c5:4a:6a:52:fd:9b:
13:0c:7d:e6:8c:56:bd:50:8b:8c:4b:80:e3:2e:3e:18:4f:13:
0f:9a:51:04:16:be:df:74:ad:5e:b5:34:02:ea:39:3f:07:e1:
6f:e5:00:14:de:1a:2a:6c:a2:3d:3f:66:e8:ae:60:3f:9a:60:
c4:16:1b:58:6d:8a:d7:f1:fa:e3:47:46:cb:df:63:eb:af:01:
a8:51:2b:d7:e3:96:9f:5a:9e:b4:22:45:1b:02:50:a4:f9:8d:
2e:df:0b:4e:51:8c:97:95:85:2f:68:95:bd:04:a1:c4:6d:ba:
49:35:b3:31:f2:54:9a:fd:9e:3b:af:d5:f2:1a:44:69:9a:db:
fc:02:7f:5a:9e:a0:37:b7:52:a2:d8:ad:30:8f:8b:a1:50:e5:
78:37:53:bb:ae:a6:09:6d:7b:3b:26:e2:ca:c0:61:d8:d8:ea:
11:46:79:ce:d4:6d:d6:8a:c0:01:db:4f:00:b8:99:ce:50:54:
95:c7:9c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:16 2025 by rpki-client