Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363331303a3a2f34342d3434203d3e20323134313239.roa
File: 326130613a363034343a363331303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier: vHNAmT2KFHJd6/eLxAPAEV2U3kTyEM0GSxjvRTFq2hM=
Subject key identifier: F1:F9:BB:E1:50:CF:0D:48:4B:C5:C0:C5:8E:17:FA:F1:25:AD:C2:40
Certificate issuer: /CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Certificate serial: 2E6EF7D04200845D40A38828AD08D65441E7194F
Authority key identifier: 77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363331303a3a2f34342d3434203d3e20323134313239.roa
Signing time: Fri 20 Dec 2024 17:27:42 +0000
ROA not before: Fri 20 Dec 2024 17:22:42 +0000
ROA not after: Fri 19 Dec 2025 17:27:42 +0000
asID: 214129
IP address blocks: 2a0a:6044:6310::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:6e:f7:d0:42:00:84:5d:40:a3:88:28:ad:08:d6:54:41:e7:19:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Validity
Not Before: Dec 20 17:22:42 2024 GMT
Not After : Dec 19 17:27:42 2025 GMT
Subject: CN=F1F9BBE150CF0D484BC5C0C58E17FAF125ADC240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:5a:b5:98:ed:cf:07:a0:30:6e:ef:17:a9:
1d:ea:2b:21:d9:38:d0:8c:f5:f8:5a:6d:5e:8f:28:
ce:0a:59:bf:7b:9f:3e:52:c1:f9:93:51:d9:50:69:
bb:cd:4e:a2:d9:de:46:84:a5:7d:d9:d3:a8:1a:a3:
42:67:24:af:1f:6a:a6:5f:9e:8c:ca:2f:fd:e2:2b:
a4:51:67:f8:b3:ef:85:94:9e:84:0c:ff:c1:c0:e3:
10:23:44:ca:ce:e8:68:59:d9:18:2f:7c:f6:c0:ba:
2e:a8:47:c9:04:a6:41:ff:03:c5:30:6a:ca:bf:ca:
00:2a:5b:59:db:08:c9:54:a6:41:b7:ea:b1:60:88:
a9:31:aa:e8:cb:64:cd:39:f7:43:e1:df:4c:e8:85:
60:13:c0:e2:cb:8f:e8:e8:ce:bc:e7:80:b5:43:96:
76:0c:a5:84:08:22:79:1f:78:7a:a5:61:60:20:75:
46:95:99:1a:3a:33:a9:c0:fd:ea:a7:6b:e2:10:71:
08:4b:8b:6f:43:a5:22:dd:d8:4d:dd:b9:dd:db:87:
44:e3:ce:a5:ae:2d:8b:50:44:a7:4a:29:e7:93:ad:
22:10:ba:d6:d2:23:c5:f7:3a:5f:43:c3:fc:9a:39:
a7:f6:d1:9d:e4:d3:12:07:06:7f:b1:c2:98:cf:a6:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F9:BB:E1:50:CF:0D:48:4B:C5:C0:C5:8E:17:FA:F1:25:AD:C2:40
X509v3 Authority Key Identifier:
keyid:77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363331303a3a2f34342d3434203d3e20323134313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6310::/44
Signature Algorithm: sha256WithRSAEncryption
95:49:93:cb:8f:6d:39:25:a1:02:c0:04:ff:da:9e:fc:b8:57:
3c:e0:46:83:6e:ed:1d:68:87:71:0c:bc:17:40:c6:03:cb:c4:
c9:08:94:38:c9:24:15:e7:7e:cf:f4:de:74:9d:43:9a:d7:a0:
4c:1f:5f:e7:e5:b5:ab:c9:63:0f:ff:ec:9a:55:10:a8:44:dd:
ae:b5:06:59:22:d8:4f:5b:93:67:dd:f3:c1:3d:c8:2d:6c:02:
17:6d:91:b5:f2:24:7b:d3:0e:53:5d:1c:50:76:8c:b2:4d:c2:
9a:c8:5f:89:21:29:03:6d:51:c4:a4:8d:77:ff:6e:20:4a:1b:
7b:8c:7c:9c:72:cd:1c:0c:f4:7c:b2:8e:cd:cc:37:29:8f:8f:
85:8e:38:33:a3:ab:7c:96:12:01:16:07:f3:7a:9e:23:c9:e1:
f3:90:fd:c1:81:05:db:2d:6d:e0:8c:69:42:eb:38:51:87:bf:
e1:1d:ec:06:be:c0:01:f3:d1:2c:3d:6d:9d:7e:78:ea:d2:99:
51:21:74:84:21:b2:4a:8e:7a:a4:73:d5:f0:87:d5:4e:99:6c:
45:8d:8a:b6:9c:2d:ac:02:1b:2d:5c:a1:37:09:0d:58:f1:cd:
31:53:18:7a:98:e8:3d:6e:0a:50:9d:43:15:e8:81:a3:fe:83:
82:00:46:1c
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIULm730EIAhF1Ao4gorQjWVEHnGU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc5NkIxQzRFRUI0MTVCNjU2Q0I0NjhBNzFCMTgxRTkz
RjJDNTBCQjAeFw0yNDEyMjAxNzIyNDJaFw0yNTEyMTkxNzI3NDJaMDMxMTAvBgNV
BAMTKEYxRjlCQkUxNTBDRjBENDg0QkM1QzBDNThFMTdGQUYxMjVBREMyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3Fq1mO3PB6Awbu8XqR3qKyHZ
ONCM9fhabV6PKM4KWb97nz5SwfmTUdlQabvNTqLZ3kaEpX3Z06gao0JnJK8faqZf
nozKL/3iK6RRZ/iz74WUnoQM/8HA4xAjRMrO6GhZ2RgvfPbAui6oR8kEpkH/A8Uw
asq/ygAqW1nbCMlUpkG36rFgiKkxqujLZM0590Ph30zohWATwOLLj+jozrzngLVD
lnYMpYQIInkfeHqlYWAgdUaVmRo6M6nA/eqna+IQcQhLi29DpSLd2E3dud3bh0Tj
zqWuLYtQRKdKKeeTrSIQutbSI8X3Ol9Dw/yaOaf20Z3k0xIHBn+xwpjPplxpAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU8fm74VDPDUhLxcDFjhf68SWtwkAwHwYDVR0j
BBgwFoAUd5axxO60FbZWy0aKcbGB6T8sULswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODE4OGNmOWYtMGRlOS00NTFmLWI5MzUtYjNmZjFkODdh
NjY2LzAvNzc5NkIxQzRFRUI0MTVCNjU2Q0I0NjhBNzFCMTgxRTkzRjJDNTBCQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC83Nzk2QjFDNEVFQjQxNUI2NTZDQjQ2OEE3
MUIxODFFOTNGMkM1MEJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS84MTg4Y2Y5Zi0wZGU5LTQ1MWYtYjkzNS1iM2ZmMWQ4N2E2NjYvMC8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM2MzMzMTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz
MTM0MzEzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKgpgRGMQMA0GCSqGSIb3DQEBCwUAA4IBAQCV
SZPLj205JaECwAT/2p78uFc84EaDbu0daIdxDLwXQMYDy8TJCJQ4ySQV537P9N50
nUOa16BMH1/n5bWryWMP/+yaVRCoRN2utQZZIthPW5Nn3fPBPcgtbAIXbZG18iR7
0w5TXRxQdoyyTcKayF+JISkDbVHEpI13/24gSht7jHyccs0cDPR8so7NzDcpj4+F
jjgzo6t8lhIBFgfzep4jyeHzkP3BgQXbLW3gjGlC6zhRh7/hHewGvsAB89EsPW2d
fnjq0plRIXSEIbJKjnqkc9Xwh9VOmWxFjYq2nC2sAhstXKE3CQ1Y8c0xUxh6mOg9
bgpQnUMV6IGj/oOCAEYc
-----END CERTIFICATE-----
Generated at Mon Mar 10 16:12:31 2025 by rpki-client