Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a653630303a3a2f34302d3438203d3e20313530323839.roa
File: 326131343a373538303a653630303a3a2f34302d3438203d3e20313530323839.roa (raw, json)
Hash identifier: nmzsCTxP9U8QnGzXP+4iIjhD6g2O6kl7AAfifXHmoQ4=
Subject key identifier: 7B:29:67:8B:F4:56:51:0A:EF:AA:6E:24:99:B8:B5:48:B7:E3:D6:A7
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 70D1E2601A00DD085CB0B166DFE1546C8C949F34
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a653630303a3a2f34302d3438203d3e20313530323839.roa
Signing time: Thu 30 Jan 2025 05:24:01 +0000
ROA not before: Thu 30 Jan 2025 05:19:01 +0000
ROA not after: Thu 29 Jan 2026 05:24:01 +0000
asID: 150289
IP address blocks: 2a14:7580:e600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d1:e2:60:1a:00:dd:08:5c:b0:b1:66:df:e1:54:6c:8c:94:9f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jan 30 05:19:01 2025 GMT
Not After : Jan 29 05:24:01 2026 GMT
Subject: CN=7B29678BF456510AEFAA6E2499B8B548B7E3D6A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:11:5e:16:d4:28:ea:4e:ca:cc:d4:58:9e:83:
c6:76:26:8b:47:16:29:a1:b6:fc:f2:98:5c:d5:b4:
96:0c:81:a9:b3:0f:ed:19:30:77:fc:3b:16:ff:d6:
b3:27:e6:34:12:08:be:4d:ae:33:b4:d0:24:e9:d7:
d0:26:9a:c1:71:16:b2:ed:26:7d:ed:ff:65:2d:6c:
37:ba:c6:75:06:ed:bf:32:ea:ec:ac:c7:7d:ec:f5:
5f:13:94:6a:f0:31:4d:33:7f:5e:84:51:83:dd:4d:
cb:ca:db:1a:da:f4:90:77:d1:50:83:ac:a8:9e:4c:
b0:18:21:c4:bd:b9:1d:e9:27:c0:b4:32:b6:ec:33:
59:af:61:1c:b2:5a:05:b4:88:0c:4f:ee:5b:31:df:
af:40:1b:f3:dc:dc:f1:b5:fb:bb:a7:7a:ed:ed:80:
62:66:13:84:35:7a:fb:7c:e7:9f:53:a2:00:98:d5:
b6:89:42:c5:0a:95:28:11:ee:72:fe:ba:fb:d7:5d:
1d:6d:2d:3f:c4:36:33:0e:ab:8c:5e:bf:41:11:43:
27:7b:4b:ae:83:54:66:50:95:c8:e1:34:7f:e0:95:
0f:fe:02:45:08:6c:34:e6:9a:66:29:d7:ef:ea:68:
6f:65:be:d0:42:9d:e6:ac:5f:bd:68:4d:4b:23:a1:
85:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:29:67:8B:F4:56:51:0A:EF:AA:6E:24:99:B8:B5:48:B7:E3:D6:A7
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a653630303a3a2f34302d3438203d3e20313530323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:e600::/40
Signature Algorithm: sha256WithRSAEncryption
73:ed:bc:47:b6:21:cb:f7:22:07:75:b8:0c:ae:82:8a:0b:66:
ff:14:6c:f4:3f:5d:a4:9f:d4:32:b6:14:74:d6:ea:73:23:da:
bb:aa:34:e6:b1:95:b0:41:4b:35:79:30:5e:50:b4:c3:97:8d:
74:1d:4a:5a:16:d8:dc:19:c6:5a:b3:43:9a:4b:6f:ee:72:53:
81:62:97:17:73:02:5c:e2:9d:c7:58:fd:b0:44:7c:74:04:3c:
99:57:8a:22:d6:33:a8:8d:cb:b0:ea:b5:9c:8a:49:60:d8:01:
3c:d0:14:b7:1e:ed:bd:c6:4f:c5:01:47:9a:af:4e:63:db:73:
bd:19:94:a5:18:60:0b:18:54:a5:3d:91:96:66:a7:87:fe:ea:
51:d0:64:24:9d:cf:7b:9e:ce:ce:e1:ec:72:54:00:d1:bc:df:
0c:26:59:cd:a9:de:22:c4:aa:bc:6f:5b:f6:4d:ab:7b:dd:f2:
f8:5a:c1:54:fe:fb:0d:a8:bd:8a:60:22:e2:5d:a4:10:95:a3:
fc:c9:45:db:26:b8:94:e2:4d:a2:a2:4c:17:3b:7a:d3:dc:4c:
5d:c0:76:22:6f:12:6d:a8:d9:c9:fd:79:f5:44:9d:99:f2:2c:
69:2b:cb:a7:27:77:ad:4f:67:0e:40:d4:47:06:33:c7:60:f9:
01:56:eb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:58 2025 by rpki-client