Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa
File: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (raw, json)
Hash identifier: oqER49Z93elxOEeM3rdX2211aqdsy3k/lVs4gkqfOwA=
Subject key identifier: 7D:EE:37:81:C9:78:82:99:C7:30:68:09:E1:AF:FD:D6:65:EE:77:0C
Certificate issuer: /CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Certificate serial: 16DBEAA3B3562A2D0C69DDED9936C4BEABC1F49E
Authority key identifier: 11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa
Signing time: Thu 27 Jun 2024 19:31:03 +0000
ROA not before: Thu 27 Jun 2024 19:26:03 +0000
ROA not after: Thu 26 Jun 2025 19:31:03 +0000
asID: 215069
IP address blocks: 2a11:f2c0:ffdc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:db:ea:a3:b3:56:2a:2d:0c:69:dd:ed:99:36:c4:be:ab:c1:f4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Validity
Not Before: Jun 27 19:26:03 2024 GMT
Not After : Jun 26 19:31:03 2025 GMT
Subject: CN=7DEE3781C9788299C7306809E1AFFDD665EE770C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:ed:e9:f9:e4:11:f8:47:96:8c:7a:6b:13:
35:65:e5:5d:f4:2a:d3:55:8c:a1:57:e2:08:45:3d:
a3:4a:41:5b:d7:f7:3e:c7:68:65:08:6f:96:86:71:
2e:8e:77:73:88:15:46:d8:b4:4a:a0:d3:93:5e:c9:
fc:66:e6:8e:0b:93:37:15:74:2c:02:14:4a:b6:7a:
df:2e:ea:13:52:6c:06:d5:80:bd:a4:74:16:50:4c:
25:99:a3:2c:73:8c:57:f8:d5:ef:b8:ba:d1:0c:eb:
19:06:ed:88:e5:d2:da:bf:a7:90:bc:d0:08:0a:ab:
b3:3b:27:7e:db:f6:d8:a0:bc:a2:e6:0f:c3:ea:5b:
3c:0e:00:df:46:29:83:e1:49:5c:13:c6:c6:b2:ed:
1e:df:05:0c:60:b5:8b:0c:e0:57:9c:68:71:d6:9a:
71:21:81:96:5a:b8:4d:50:a1:64:01:e3:53:c0:23:
37:5d:5a:d0:0f:ff:49:8e:fd:69:19:40:60:f2:7a:
a4:82:df:01:15:ea:e3:d7:e4:d6:1c:8d:46:e9:07:
1d:ca:6f:24:2f:c5:44:64:d3:e2:27:99:da:ce:b3:
75:17:bf:bc:aa:5d:c9:27:ce:6e:80:75:d2:be:28:
18:ad:ae:a8:a5:b2:02:22:b7:f7:96:d8:4b:43:44:
ed:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EE:37:81:C9:78:82:99:C7:30:68:09:E1:AF:FD:D6:65:EE:77:0C
X509v3 Authority Key Identifier:
keyid:11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffdc::/48
Signature Algorithm: sha256WithRSAEncryption
7d:f6:ef:bc:19:18:e1:6a:39:6c:c2:65:c7:8c:18:a6:21:e8:
7d:ad:91:b2:34:e8:fa:6c:1f:04:af:39:e9:b8:64:2f:33:f2:
c4:92:d0:b3:da:5e:90:d0:91:6e:3a:8b:47:fb:8c:bc:cd:2e:
31:c3:e8:8b:f6:44:ab:89:83:6e:3b:d0:5f:85:f1:80:ae:ca:
c0:44:58:0e:ea:b9:b4:97:1f:9b:12:d7:dc:98:79:7f:06:63:
78:cf:28:9c:e7:d2:01:d1:6d:53:ff:bb:c1:96:39:cf:b0:3a:
3a:90:7f:38:08:a8:4e:75:e6:75:7d:51:6f:a9:76:23:0a:67:
e7:85:a2:86:19:4b:10:ad:65:5a:41:83:c0:3e:76:6b:dd:f9:
2d:54:62:24:ae:d7:7d:27:1d:78:b0:3f:4e:f3:b8:be:1c:0e:
ba:43:34:ac:9d:bb:e4:ba:81:fe:4f:a4:00:63:a3:c6:c7:b0:
da:5f:70:c2:66:ad:a3:62:16:40:c0:66:f3:55:cb:16:a5:b7:
f7:93:54:7d:77:88:a5:b1:a2:05:76:47:fe:52:f7:b7:06:1a:
0c:4e:94:6e:f1:38:15:69:7d:50:fa:4f:64:34:3a:71:ca:e2:
22:ad:13:94:03:f1:cc:92:be:3e:40:b6:2d:25:83:3b:a0:a6:
91:bc:b5:15
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUFtvqo7NWKi0Mad3tmTbEvqvB9J4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFhZDQ5YzQ3ZTJkMGU0MGNmYzliMzZhMmJkMmM1MTRl
MmE2MjY3YjAeFw0yNDA2MjcxOTI2MDNaFw0yNTA2MjYxOTMxMDNaMDMxMTAvBgNV
BAMTKDdERUUzNzgxQzk3ODgyOTlDNzMwNjgwOUUxQUZGREQ2NjVFRTc3MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClhu3p+eQR+EeWjHprEzVl5V30
KtNVjKFX4ghFPaNKQVvX9z7HaGUIb5aGcS6Od3OIFUbYtEqg05Neyfxm5o4LkzcV
dCwCFEq2et8u6hNSbAbVgL2kdBZQTCWZoyxzjFf41e+4utEM6xkG7Yjl0tq/p5C8
0AgKq7M7J37b9tigvKLmD8PqWzwOAN9GKYPhSVwTxsay7R7fBQxgtYsM4FecaHHW
mnEhgZZauE1QoWQB41PAIzddWtAP/0mO/WkZQGDyeqSC3wEV6uPX5NYcjUbpBx3K
byQvxURk0+InmdrOs3UXv7yqXcknzm6AddK+KBitrqilsgIit/eW2EtDRO3VAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUfe43gcl4gpnHMGgJ4a/91mXudwwwHwYDVR0j
BBgwFoAUEa1JxH4tDkDPybNqK9LFFOKmJnswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2I1NzVlYTctNzg2Zi00YjJkLWE0NTUtNzlkN2ZjNDNl
Y2VlLzcvMTFBRDQ5QzQ3RTJEMEU0MENGQzlCMzZBMkJEMkM1MTRFMkE2MjY3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VhMUp4SDR0RGtEUHliTnFLOUxGRk9L
bUpucy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2I1NzVlYTct
Nzg2Zi00YjJkLWE0NTUtNzlkN2ZjNDNlY2VlLzcvMzI2MTMxMzEzYTY2MzI2MzMw
M2E2NjY2NjQ2MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNTMwMzYzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoR8sD/3DANBgkqhkiG9w0BAQsFAAOCAQEAffbvvBkY4Wo5bMJl
x4wYpiHofa2RsjTo+mwfBK856bhkLzPyxJLQs9pekNCRbjqLR/uMvM0uMcPoi/ZE
q4mDbjvQX4XxgK7KwERYDuq5tJcfmxLX3Jh5fwZjeM8onOfSAdFtU/+7wZY5z7A6
OpB/OAioTnXmdX1Rb6l2Iwpn54WihhlLEK1lWkGDwD52a935LVRiJK7XfScdeLA/
TvO4vhwOukM0rJ275LqB/k+kAGOjxsew2l9wwmato2IWQMBm81XLFqW395NUfXeI
pbGiBXZH/lL3twYaDE6UbvE4FWl9UPpPZDQ6ccriIq0TlAPxzJK+PkC2LSWDO6Cm
kby1FQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:22 2025 by rpki-client