Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a653230303a3a2f34302d3438203d3e20313339383838.roa
File: 326131343a373538303a653230303a3a2f34302d3438203d3e20313339383838.roa (raw, json)
Hash identifier: c12GQwD8O+R9XMWejTCSScrvlAEVluk8p8OFccfj5K4=
Subject key identifier: 32:32:F0:A3:9E:1B:8F:5C:49:44:AF:91:EA:5C:C5:D9:02:35:C9:05
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 11C0D338FDC1476050D824484C8D2A7BB5236EAC
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a653230303a3a2f34302d3438203d3e20313339383838.roa
Signing time: Fri 29 Nov 2024 15:47:23 +0000
ROA not before: Fri 29 Nov 2024 15:42:23 +0000
ROA not after: Fri 28 Nov 2025 15:47:23 +0000
asID: 139888
IP address blocks: 2a14:7580:e200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c0:d3:38:fd:c1:47:60:50:d8:24:48:4c:8d:2a:7b:b5:23:6e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Nov 29 15:42:23 2024 GMT
Not After : Nov 28 15:47:23 2025 GMT
Subject: CN=3232F0A39E1B8F5C4944AF91EA5CC5D90235C905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c3:e2:7f:05:94:18:0e:9e:e8:a3:03:4e:9f:
f0:2e:0d:91:7f:bf:ee:f1:ad:d9:91:58:72:8d:2b:
5c:79:b9:33:b2:b7:c2:0e:a9:c4:b5:cd:19:e0:19:
1a:e8:0b:df:b6:cc:8e:4b:62:75:ab:82:f8:06:5c:
62:e5:a5:74:71:0f:8b:0f:f1:2a:01:ad:64:f0:3a:
0c:23:73:cb:c6:8a:0e:de:a8:06:49:a4:f1:eb:db:
00:b2:8b:59:af:48:96:a7:ed:e0:59:99:d3:7f:64:
40:80:60:69:cb:bb:9a:d3:1e:5a:68:a4:c4:bc:e5:
b4:63:04:a0:02:52:48:5c:a0:cc:38:98:19:d6:89:
42:8f:18:72:3a:a0:6b:be:01:d0:52:ea:f7:0f:ef:
df:25:fe:67:f1:d1:bd:6f:1b:62:e9:64:ec:24:f7:
fa:45:94:da:50:2b:1a:27:0f:ec:3a:4c:ae:82:74:
4b:20:04:c1:a4:41:3c:c8:ae:42:22:f9:1c:ad:6b:
03:40:1f:c3:a8:03:64:6b:71:45:38:d9:08:4e:69:
30:30:c1:a5:6c:c1:ea:6e:8a:c7:55:d4:b2:4d:7b:
c3:37:55:ff:eb:49:05:b9:36:45:75:2e:98:9c:1d:
c0:58:ef:94:1b:58:38:b7:7c:2e:54:6d:f0:96:b2:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:32:F0:A3:9E:1B:8F:5C:49:44:AF:91:EA:5C:C5:D9:02:35:C9:05
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a653230303a3a2f34302d3438203d3e20313339383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:e200::/40
Signature Algorithm: sha256WithRSAEncryption
0c:f9:33:c0:e5:c7:aa:2b:b8:28:c8:26:a6:e4:bf:70:bf:f1:
5b:da:03:69:f0:ae:f6:8c:1f:19:9f:33:70:ba:40:3e:23:37:
0f:b9:63:7c:7e:6f:3d:df:6f:e7:36:7d:3c:dc:e4:0f:4a:9b:
aa:13:f9:cf:dc:73:8d:25:38:28:ea:14:65:d7:6a:ce:de:b1:
8e:d7:e7:f7:8e:69:ca:24:45:f7:30:19:09:21:86:35:55:81:
b1:39:ab:5e:cf:c3:36:fe:9e:91:af:4f:c4:5d:4b:ec:90:1c:
f9:a7:ac:8c:77:a5:75:0f:29:29:73:42:4d:09:b3:40:d3:ce:
da:5f:a5:0f:b9:04:ee:34:e5:05:07:81:54:38:f2:c3:84:88:
49:d8:f8:ae:00:cf:cc:c8:43:6c:ab:a2:cd:d2:25:1e:44:fb:
19:5f:16:e5:7b:d7:42:ca:76:38:d4:62:b2:c1:8f:ff:e2:9f:
8d:08:e9:45:91:2c:9c:b3:56:45:04:a9:74:dc:53:c7:e0:26:
73:bf:f5:c2:bd:e1:75:5d:dc:35:b5:ce:a4:cb:be:9b:a1:2f:
07:94:8c:db:e6:b1:71:6e:29:66:b1:af:1e:5d:c2:5b:c5:a4:
96:f6:dc:4c:38:ef:57:ef:9f:d8:9d:74:11:ef:6c:46:21:49:
f7:a7:99:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:54 2025 by rpki-client