Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a396633303a3a2f34342d3438203d3e20323136333836.roa
File: 326131343a373538313a396633303a3a2f34342d3438203d3e20323136333836.roa (raw, json)
Hash identifier: Kwb+1zeqsvY1a62xwRqXhbfg/uBM1H7UipsIAKhr4d4=
Subject key identifier: 17:A5:8E:54:2E:08:DE:5D:0D:6E:CC:9E:29:D6:9C:DE:91:FD:F9:A1
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4251BBB893C8B087B34E305A80C6576F3D336A25
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a396633303a3a2f34342d3438203d3e20323136333836.roa
Signing time: Tue 14 Jan 2025 13:31:29 +0000
ROA not before: Tue 14 Jan 2025 13:26:29 +0000
ROA not after: Tue 13 Jan 2026 13:31:29 +0000
asID: 216386
IP address blocks: 2a14:7581:9f30::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:51:bb:b8:93:c8:b0:87:b3:4e:30:5a:80:c6:57:6f:3d:33:6a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jan 14 13:26:29 2025 GMT
Not After : Jan 13 13:31:29 2026 GMT
Subject: CN=17A58E542E08DE5D0D6ECC9E29D69CDE91FDF9A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:dd:84:0b:e8:8d:59:43:eb:40:f8:4e:26:
64:62:15:47:b4:bc:1e:63:c4:10:60:10:6a:ee:a4:
6b:cd:7c:a7:3b:3a:03:49:7f:e0:e1:4e:fe:58:3c:
9f:de:7a:29:17:86:fe:bc:2c:35:e1:57:40:d1:26:
c4:ab:8e:e6:e7:de:36:c0:e4:3a:c8:a2:46:09:18:
a0:2d:47:c6:a7:e9:cc:06:e9:14:63:e7:91:2f:ff:
f2:b1:58:02:a6:b5:ee:9d:84:4d:9b:2c:7a:d4:5e:
5c:8e:5b:8d:64:bc:59:ed:3a:10:05:f0:1b:c1:05:
39:a0:a1:d7:fd:ea:7e:69:d7:fa:29:b9:99:e1:77:
26:e6:cf:30:63:ea:0d:46:53:29:41:c9:55:2a:dc:
b9:bf:d3:d7:f0:56:7d:1f:2d:be:96:95:e4:03:b0:
45:c1:cb:58:a9:97:15:8e:64:81:ac:35:60:cd:13:
13:bd:ff:f2:97:29:41:47:8f:cb:83:e4:fb:eb:95:
d5:a8:9c:2f:59:61:5c:cf:00:8e:f0:aa:c0:81:37:
d6:50:f0:51:29:0e:39:2a:50:3b:8e:86:ca:a5:96:
1c:6d:1b:58:ab:cb:23:d6:78:ad:77:0c:16:8e:d8:
70:49:c6:af:ae:10:04:9f:97:1c:eb:56:0a:1b:2b:
b6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A5:8E:54:2E:08:DE:5D:0D:6E:CC:9E:29:D6:9C:DE:91:FD:F9:A1
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a396633303a3a2f34342d3438203d3e20323136333836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9f30::/44
Signature Algorithm: sha256WithRSAEncryption
67:3d:6d:88:17:cb:b7:fe:42:83:9c:77:bb:ac:e0:73:37:99:
66:7c:6a:5e:e6:81:38:c7:bc:9f:a8:9e:de:88:01:4a:b2:36:
de:c7:4c:98:53:5b:ac:a6:f0:d1:43:2b:10:c4:a7:31:e2:f0:
28:bb:35:49:da:8f:34:f7:ad:e0:60:09:0b:9d:99:5c:e5:5f:
2d:b8:03:a9:59:f6:65:7a:72:b7:84:40:95:58:01:ab:22:2c:
5d:e3:1a:b8:f8:66:92:5f:42:b2:b7:8b:15:2e:a3:4f:b9:f6:
c1:f1:24:91:03:00:a2:87:42:fd:03:ea:b7:cd:dc:71:dd:f5:
8c:3a:b5:0c:49:72:21:13:a4:f6:44:8a:6f:96:99:4a:08:c9:
2b:be:24:b0:75:4a:b8:6d:10:88:fa:98:c2:c1:d9:bf:1c:36:
de:fd:c3:eb:5e:87:f2:42:bf:f7:59:d5:9b:cd:d9:3a:6c:36:
b4:68:74:63:d3:09:3b:9d:e3:b4:ce:e8:8d:3f:96:f9:96:0b:
38:05:a5:31:ff:ef:57:23:8d:5e:65:bb:eb:97:1d:40:3d:47:
f8:b6:e9:b3:50:69:ec:a9:63:37:09:fd:b3:f7:f2:38:80:e1:
0e:c7:5b:a4:93:72:9e:fb:d7:cd:41:58:a6:0f:33:54:6f:d5:
76:54:ed:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:50 2025 by rpki-client