Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393061353a3a2f34382d3438203d3e20323135333634.roa
File: 326131343a373538313a393061353a3a2f34382d3438203d3e20323135333634.roa (raw, json)
Hash identifier: uFt0HPRhrnAKMOC1oe5NjT+HLaBbGSMTVLsmzf0jkgc=
Subject key identifier: 18:50:22:CD:0E:CE:34:60:D6:0D:88:25:88:C2:A5:54:4F:2D:98:CA
Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial: 74D02DD26216A1D251514A31C321E1C2F963E830
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393061353a3a2f34382d3438203d3e20323135333634.roa
Signing time: Sun 08 Dec 2024 05:29:41 +0000
ROA not before: Sun 08 Dec 2024 05:24:41 +0000
ROA not after: Sun 07 Dec 2025 05:29:41 +0000
asID: 215364
IP address blocks: 2a14:7581:90a5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d0:2d:d2:62:16:a1:d2:51:51:4a:31:c3:21:e1:c2:f9:63:e8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Validity
Not Before: Dec 8 05:24:41 2024 GMT
Not After : Dec 7 05:29:41 2025 GMT
Subject: CN=185022CD0ECE3460D60D882588C2A5544F2D98CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:54:a6:67:42:b6:f6:a3:b4:30:8a:d2:59:
e4:fc:92:fd:89:6d:5e:df:f1:f2:3d:b7:de:fb:e4:
75:6c:42:e2:6e:d9:56:4b:2f:bf:6e:e8:a2:d1:2b:
03:99:70:c9:88:db:70:37:a7:87:2c:8f:8c:d4:6a:
6c:c7:a8:ea:37:11:16:0a:5d:90:89:23:de:98:6a:
24:c2:28:8d:33:2b:34:f2:64:15:1b:29:51:7b:da:
18:aa:34:2d:9f:39:cd:13:7d:76:0e:fe:a8:f9:cd:
6d:48:c0:da:22:13:77:f5:1b:e5:62:c3:f3:52:a9:
11:74:fd:40:d8:85:54:ad:30:f9:d6:b1:46:03:a7:
90:af:f5:9b:0a:d2:3e:a4:03:14:50:cf:b6:a7:f1:
aa:41:10:16:35:e9:44:0f:1d:b0:47:dd:e7:11:03:
6e:96:22:db:b5:ad:3c:48:c6:c5:8a:4a:26:1c:b4:
74:9c:58:63:1d:60:ec:7d:8e:a0:92:b0:bb:4d:25:
86:3c:3e:97:50:a3:ea:e3:4a:5a:1d:05:40:9b:30:
78:5c:00:7e:bd:09:d6:18:bd:04:29:b8:f1:3f:a7:
0e:02:c6:5a:c2:5b:9e:2a:87:6c:e7:12:b4:f4:7d:
2a:a4:66:35:08:c1:f5:8d:3b:5f:b1:a1:c0:2a:e4:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:50:22:CD:0E:CE:34:60:D6:0D:88:25:88:C2:A5:54:4F:2D:98:CA
X509v3 Authority Key Identifier:
keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393061353a3a2f34382d3438203d3e20323135333634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:90a5::/48
Signature Algorithm: sha256WithRSAEncryption
08:7d:ed:ce:71:b2:de:c5:34:30:e5:a9:95:5c:bb:3e:4b:01:
7b:3c:f7:fb:cd:d2:4c:ae:af:5c:11:19:18:d5:94:d4:8c:94:
1e:c3:d9:4a:59:94:37:af:d5:0a:e7:bb:e7:3a:e2:01:51:9a:
9b:ac:46:f6:78:a5:e0:da:e4:be:71:3c:f9:41:03:3a:9d:ce:
fc:68:7d:58:f4:dc:ae:e1:d3:80:34:55:a5:69:25:29:ed:fa:
21:62:f4:79:ba:d5:a5:1b:33:5f:3b:76:91:1c:53:90:cd:c2:
1a:10:d4:a7:fa:98:ed:a2:dc:8c:29:90:ac:31:a4:a5:2a:93:
d0:2a:88:03:4b:52:3b:f8:ee:76:01:20:9c:e3:75:70:30:86:
39:d5:4d:42:be:89:fd:17:bb:78:8a:9f:65:59:db:39:c3:b9:
23:b1:6d:05:51:45:3a:97:29:ba:75:3c:32:70:ef:be:80:45:
18:ed:51:1f:00:d8:fe:e7:cb:7f:fb:d6:e7:00:b5:1d:34:00:
fa:8f:86:d6:20:42:c5:8b:95:ed:6a:b4:be:59:68:7a:e2:5a:
b9:92:bf:41:b4:57:ba:8f:5f:b7:3b:5f:7e:23:7c:ad:5a:66:
14:17:ee:a2:73:8d:e7:ad:49:a6:81:98:c7:2d:05:53:8d:c5:
84:e3:5d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:42 2025 by rpki-client