Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363530303a3a2f34302d3430203d3e20323134313239.roa
File: 326130613a363034343a363530303a3a2f34302d3430203d3e20323134313239.roa (raw, json)
Hash identifier: +u2eXPu2t0nqet+Q4EcyAoxPhbipQoLaN+hhrIjSf84=
Subject key identifier: 38:25:C0:13:A5:C1:64:6B:35:8C:3C:0E:B4:90:B0:AA:E6:FF:F1:FD
Certificate issuer: /CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Certificate serial: 355E23C34E063C53412180BAAE5214A7E26CCE35
Authority key identifier: 18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363530303a3a2f34302d3430203d3e20323134313239.roa
Signing time: Sat 07 Dec 2024 20:45:32 +0000
ROA not before: Sat 07 Dec 2024 20:40:32 +0000
ROA not after: Sat 06 Dec 2025 20:45:32 +0000
asID: 214129
IP address blocks: 2a0a:6044:6500::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:5e:23:c3:4e:06:3c:53:41:21:80:ba:ae:52:14:a7:e2:6c:ce:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA
Validity
Not Before: Dec 7 20:40:32 2024 GMT
Not After : Dec 6 20:45:32 2025 GMT
Subject: CN=3825C013A5C1646B358C3C0EB490B0AAE6FFF1FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:26:10:9f:d4:10:3c:5e:be:f6:a0:61:43:d4:
32:99:01:4b:38:24:8c:37:96:c0:ac:07:66:ad:27:
62:35:9f:5e:cd:28:2c:93:36:9a:4b:43:9f:37:84:
14:c6:b9:8f:11:53:cc:27:f0:30:96:a7:ee:b6:15:
31:d5:12:fe:36:eb:00:0e:4b:c0:52:55:9d:4e:d8:
23:7a:e6:b4:1f:a0:09:2c:f2:11:f2:7a:31:b1:5e:
1f:9a:5a:f9:ce:b4:55:a0:0a:c2:41:49:65:c3:7a:
30:e6:d8:58:e6:fc:07:37:de:d4:98:e3:46:82:3e:
9c:bb:ec:4e:b7:9a:7f:4d:93:b2:59:2e:ab:32:1a:
0a:cc:5b:73:14:7a:97:29:3b:7e:e2:13:eb:3a:7e:
d5:6f:d8:41:26:60:93:a6:48:b4:29:1f:0f:06:12:
fc:b5:47:74:67:82:12:eb:5b:e8:e3:52:75:35:9a:
4d:62:2f:30:89:23:c7:23:7d:d3:c1:91:65:5f:5d:
a3:e0:b0:33:e3:8a:b7:df:e1:52:3c:20:6d:9e:35:
7d:63:b6:e4:17:25:26:85:f1:87:64:ca:35:dd:b0:
c8:0e:6e:89:b7:d9:ea:ea:fe:5c:c2:cc:94:da:82:
9b:14:8a:b0:04:6b:f6:e5:28:1f:5d:12:95:e7:80:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:25:C0:13:A5:C1:64:6B:35:8C:3C:0E:B4:90:B0:AA:E6:FF:F1:FD
X509v3 Authority Key Identifier:
keyid:18:F0:32:EC:A3:64:4A:3B:74:3F:0E:B6:E8:B4:97:80:FA:D3:BC:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/18F032ECA3644A3B743F0EB6E8B49780FAD3BCAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/1/326130613a363034343a363530303a3a2f34302d3430203d3e20323134313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6500::/40
Signature Algorithm: sha256WithRSAEncryption
04:70:d9:28:40:33:e3:b2:de:fd:c1:64:ae:b1:cc:39:69:e0:
97:f3:1a:c7:e9:99:7a:a4:aa:3d:d0:9f:c3:ea:74:00:ed:66:
fd:f4:ce:d7:6b:62:93:c7:95:4a:b8:3f:84:0d:b7:02:06:90:
30:aa:a2:cf:d7:e2:21:15:6f:29:1a:02:ac:25:a2:37:b9:84:
fe:b0:2e:90:57:d0:76:11:97:12:26:5b:06:6f:36:34:a4:5c:
1b:9f:04:02:dc:07:60:91:9d:f2:c8:ad:ca:bd:f8:d8:f4:59:
c8:eb:92:cb:08:ab:28:46:39:74:64:f1:f7:d3:29:df:65:4a:
8d:59:ae:46:60:08:6c:26:a1:f2:5f:43:4b:2d:87:a5:90:23:
7e:82:d2:1d:4a:a3:49:aa:42:c2:b0:df:cb:4e:4b:54:a4:ab:
23:74:73:32:18:f0:16:df:cb:49:78:9f:2e:9a:30:4c:c5:c8:
06:63:55:0a:0d:ae:21:02:04:72:ad:97:c4:70:17:34:68:26:
8a:ff:be:ee:79:ff:2e:e0:93:cd:af:12:9b:31:4e:71:e1:d7:
1c:05:58:e4:51:a2:bc:2b:1d:3d:04:98:33:0d:32:68:56:f1:
74:a8:8b:a3:f6:6a:ef:56:60:1e:df:35:c4:c5:24:45:b5:50:
f8:ba:a8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:39 2025 by rpki-client