Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a653530303a3a2f34302d3438203d3e20313532393030.roa
File: 326131343a373538303a653530303a3a2f34302d3438203d3e20313532393030.roa (raw, json)
Hash identifier: 6Uv0kXuhKH2Fj/sP6HkZzkNHlBow18eExEu1l1GYa7w=
Subject key identifier: D0:11:DE:0F:00:EE:06:AC:DD:25:F3:F4:D9:DE:D8:58:1A:34:23:4D
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4AC990DF68A05286F18DA672E550067F5EF68025
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a653530303a3a2f34302d3438203d3e20313532393030.roa
Signing time: Wed 08 Jan 2025 05:52:49 +0000
ROA not before: Wed 08 Jan 2025 05:47:49 +0000
ROA not after: Wed 07 Jan 2026 05:52:49 +0000
asID: 152900
IP address blocks: 2a14:7580:e500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c9:90:df:68:a0:52:86:f1:8d:a6:72:e5:50:06:7f:5e:f6:80:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jan 8 05:47:49 2025 GMT
Not After : Jan 7 05:52:49 2026 GMT
Subject: CN=D011DE0F00EE06ACDD25F3F4D9DED8581A34234D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:26:1d:94:a4:cb:01:0d:8a:00:49:6f:92:
51:bd:08:63:a8:eb:be:ee:0d:b7:c1:3b:d5:1c:84:
63:8e:f8:d1:7d:33:c0:e0:f7:f9:61:72:51:b7:9b:
9f:40:d4:fa:d1:54:3d:ba:22:f6:0c:09:b1:81:f3:
30:a0:e5:72:d8:69:66:b3:b6:aa:f2:61:9c:a6:80:
63:21:85:65:e2:69:8d:07:27:25:fe:56:e4:20:00:
7a:e3:ee:7c:7b:a1:82:54:fb:ec:a9:a7:ce:78:a8:
6d:23:ce:a2:fb:15:40:20:e3:9c:79:37:21:cf:09:
f1:77:48:b3:c5:bf:c9:34:2b:89:f3:92:e7:22:86:
2c:f9:98:07:42:3e:b9:9b:97:53:82:65:52:6b:d6:
88:2e:c5:8e:c5:f6:90:fd:e9:50:b9:e0:af:b6:97:
5c:52:af:50:e5:bb:37:4b:6e:ea:aa:e3:54:b9:73:
af:bc:b2:cc:bd:05:79:39:46:22:e3:71:c8:3a:4a:
71:41:68:ef:5f:7e:54:e3:fa:43:c2:f0:18:29:bb:
1a:39:4f:2f:1a:3a:b5:88:8e:bd:98:41:c6:4c:66:
f5:1e:9b:b8:3a:fb:15:71:b7:fd:61:ea:ee:ce:b5:
dd:e5:06:7d:2c:2e:da:27:e8:91:1a:4e:ac:4b:21:
ca:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:11:DE:0F:00:EE:06:AC:DD:25:F3:F4:D9:DE:D8:58:1A:34:23:4D
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a653530303a3a2f34302d3438203d3e20313532393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:e500::/40
Signature Algorithm: sha256WithRSAEncryption
2e:44:f9:4c:0a:1f:0d:59:a0:43:74:4c:33:9b:90:b4:f7:fb:
8d:f9:80:cc:9f:a6:bf:04:b9:7a:33:b5:66:0d:76:2a:ea:6b:
69:98:32:43:5a:06:a3:58:68:12:04:b3:97:7c:c7:09:64:33:
d2:da:ad:1f:5f:cb:1b:db:90:5a:04:e3:c9:56:62:6d:d3:d5:
9a:f2:80:65:ee:34:14:b3:63:b8:9a:0f:a7:9f:1f:85:11:c4:
45:e7:69:53:ff:7e:3c:4b:c7:dd:b8:4f:b9:bf:8a:73:8b:be:
e1:32:8e:97:aa:7d:ec:6d:fc:5e:b7:3d:c4:e7:52:3d:6c:23:
30:b4:88:29:ba:f3:00:95:cd:03:89:cb:2f:bd:92:31:d3:c3:
01:0f:bd:15:72:b4:fb:93:9e:bd:b2:56:66:31:f4:94:75:bb:
d9:fa:15:12:bb:70:46:0a:1a:b0:9a:f0:c6:d7:d1:f0:d7:27:
31:51:b7:1a:2b:90:59:3b:01:ed:11:42:9f:6c:a2:a7:40:11:
94:02:c9:7c:04:43:5e:73:db:01:22:a1:e3:08:ef:0f:b5:f0:
7b:8b:7d:a2:ed:17:cd:7b:a1:dd:83:24:78:c8:7e:e4:da:34:
91:0a:9d:98:c5:5e:9d:1a:06:74:d0:b8:f4:a4:09:b4:65:a3:
72:dd:fc:4f
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUSsmQ32igUobxjaZy5VAGf172gCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTAxMDgwNTQ3NDlaFw0yNjAxMDcwNTUyNDlaMDMxMTAvBgNV
BAMTKEQwMTFERTBGMDBFRTA2QUNERDI1RjNGNEQ5REVEODU4MUEzNDIzNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChVyYdlKTLAQ2KAElvklG9CGOo
677uDbfBO9UchGOO+NF9M8Dg9/lhclG3m59A1PrRVD26IvYMCbGB8zCg5XLYaWaz
tqryYZymgGMhhWXiaY0HJyX+VuQgAHrj7nx7oYJU++ypp854qG0jzqL7FUAg45x5
NyHPCfF3SLPFv8k0K4nzkucihiz5mAdCPrmbl1OCZVJr1oguxY7F9pD96VC54K+2
l1xSr1DluzdLbuqq41S5c6+8ssy9BXk5RiLjccg6SnFBaO9fflTj+kPC8Bgpuxo5
Ty8aOrWIjr2YQcZMZvUem7g6+xVxt/1h6u7Otd3lBn0sLton6JEaTqxLIcp9AgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQU0BHeDwDuBqzdJfP02d7YWBo0I00wHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvMzI2MTMxMzQzYTM3MzUzODMw
M2E2NTM1MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMxMzUzMjM5MzAzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoUdYDlMA0GCSqGSIb3DQEBCwUAA4IBAQAuRPlMCh8NWaBDdEwz
m5C09/uN+YDMn6a/BLl6M7VmDXYq6mtpmDJDWgajWGgSBLOXfMcJZDPS2q0fX8sb
25BaBOPJVmJt09Wa8oBl7jQUs2O4mg+nnx+FEcRF52lT/348S8fduE+5v4pzi77h
Mo6Xqn3sbfxetz3E51I9bCMwtIgpuvMAlc0DicsvvZIx08MBD70VcrT7k569slZm
MfSUdbvZ+hUSu3BGChqwmvDG19Hw1ycxUbcaK5BZOwHtEUKfbKKnQBGUAsl8BENe
c9sBIqHjCO8PtfB7i32i7RfNe6HdgyR4yH7k2jSRCp2YxV6dGgZ00Lj0pAm0ZaNy
3fxP
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:05 2025 by rpki-client