Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a396634393a3a2f34382d3438203d3e20313437313830.roa
File: 326131343a373538313a396634393a3a2f34382d3438203d3e20313437313830.roa (raw, json)
Hash identifier: YjpUpTUNf1CiDQkPgoso2kKZbB8ezvkKCQgsO6fp71w=
Subject key identifier: C1:A7:69:1A:FD:DA:9A:16:4A:2D:BE:6C:C9:78:E3:B3:DC:4D:45:8A
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 17F6D48C572D91E21FDE7DA45E08A830AC38C32B
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a396634393a3a2f34382d3438203d3e20313437313830.roa
Signing time: Sun 26 Jan 2025 14:28:32 +0000
ROA not before: Sun 26 Jan 2025 14:23:32 +0000
ROA not after: Sun 25 Jan 2026 14:28:32 +0000
asID: 147180
IP address blocks: 2a14:7581:9f49::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:f6:d4:8c:57:2d:91:e2:1f:de:7d:a4:5e:08:a8:30:ac:38:c3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jan 26 14:23:32 2025 GMT
Not After : Jan 25 14:28:32 2026 GMT
Subject: CN=C1A7691AFDDA9A164A2DBE6CC978E3B3DC4D458A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:44:12:c3:09:fd:be:fe:3e:84:20:f7:ea:
50:82:c9:0e:8f:58:d3:9e:8b:97:cc:03:4b:ef:fb:
ad:cf:ba:af:a4:3c:a8:21:db:c0:4b:52:db:38:b9:
13:02:e5:4e:1b:3e:06:1f:51:bb:51:f6:f3:26:d4:
94:83:d0:d6:2c:64:7b:a0:ec:79:f3:91:92:d3:f5:
bc:59:3d:33:fd:9a:19:59:09:9a:0b:48:0f:fd:1e:
52:03:6b:0f:b8:29:70:71:d6:43:2f:1e:f7:f1:f1:
d2:84:ce:7b:c3:ed:8f:b8:ff:6a:1c:7e:94:c1:dd:
72:20:b1:25:77:64:d4:41:33:18:82:70:a2:e9:18:
18:4a:52:7b:49:bb:c7:f9:ad:27:77:be:3b:77:1d:
d3:9a:fd:de:61:10:23:80:25:e5:86:68:74:23:46:
49:c7:bb:43:43:3a:74:2d:61:cb:c2:e6:3e:db:c2:
e2:b9:4a:5b:e7:56:5a:c9:ca:3f:18:69:57:de:7c:
25:b3:76:0f:1f:30:e9:f8:9f:36:e4:56:7f:14:13:
fe:ab:65:bb:9f:c5:9c:f2:71:11:7e:f0:e3:c7:85:
1c:35:e4:e4:3e:65:08:0f:f1:8c:de:82:f7:3b:6a:
64:e1:8e:65:d9:3e:4d:e4:e5:6b:32:f7:27:19:ee:
de:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A7:69:1A:FD:DA:9A:16:4A:2D:BE:6C:C9:78:E3:B3:DC:4D:45:8A
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a396634393a3a2f34382d3438203d3e20313437313830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9f49::/48
Signature Algorithm: sha256WithRSAEncryption
6d:90:de:75:85:e0:1f:e1:41:cb:e5:90:85:4c:2a:93:29:6e:
fe:90:f9:ef:50:eb:bc:44:cf:e7:09:66:3b:a0:ae:dc:8a:38:
ba:e2:d1:f8:cc:b3:34:49:0d:6b:34:51:ee:81:d6:99:82:69:
e8:3a:15:44:a0:74:06:47:b7:b4:4a:b0:d9:58:2e:3a:7c:b7:
5e:2e:43:ac:1d:13:7e:79:08:2c:86:a9:67:67:c1:cb:43:c4:
ce:8c:74:d2:40:8b:51:bb:e7:99:a0:24:6c:79:e5:bf:72:9d:
d2:44:f5:2f:fe:28:a9:c4:08:52:9a:5b:0d:d4:57:06:87:f4:
07:79:ff:5c:5f:f6:b8:c4:af:e1:a2:30:37:32:a7:54:ea:87:
44:81:34:24:01:fd:05:ab:e8:db:d8:c1:20:6e:7e:99:00:95:
de:ec:48:55:60:d9:7f:cf:cd:46:93:48:e2:0e:1c:cf:ab:43:
4a:e0:9f:91:47:13:d4:f8:7f:de:d2:fb:d3:1d:44:c9:51:0d:
ea:74:89:20:2a:c0:b3:90:e5:c7:d5:88:b0:73:93:58:76:61:
62:e2:cc:2c:55:15:67:97:a8:29:25:3c:dd:7a:67:fc:61:b7:
9c:32:db:48:6a:ee:e7:8e:f2:88:af:90:09:20:8a:2d:f3:20:
e4:d8:c7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:14 2025 by rpki-client