Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538343a383030303a3a2f33362d3438203d3e20323133353432.roa
File: 326131343a373538343a383030303a3a2f33362d3438203d3e20323133353432.roa (raw, json)
Hash identifier: U+Ykd7Oy987+3qKxScyjl4elEOQIKPDu8SvqI+kaAxU=
Subject key identifier: 0C:76:C2:F7:7C:E6:C9:80:E1:09:59:B3:CA:78:4F:E4:02:E9:9D:45
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6F31575E90D7FACB385531746F6BF2C8B6E7C708
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538343a383030303a3a2f33362d3438203d3e20323133353432.roa
Signing time: Sun 02 Feb 2025 00:24:10 +0000
ROA not before: Sun 02 Feb 2025 00:19:10 +0000
ROA not after: Sun 01 Feb 2026 00:24:10 +0000
asID: 213542
IP address blocks: 2a14:7584:8000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:31:57:5e:90:d7:fa:cb:38:55:31:74:6f:6b:f2:c8:b6:e7:c7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 2 00:19:10 2025 GMT
Not After : Feb 1 00:24:10 2026 GMT
Subject: CN=0C76C2F77CE6C980E10959B3CA784FE402E99D45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:3a:a8:d2:d0:4a:a2:a5:77:4c:5a:db:f3:
3d:90:19:cd:c0:67:48:8f:24:74:74:2b:51:d9:af:
88:10:a4:61:a8:f4:f7:9a:47:08:cd:ad:e0:af:af:
0c:0a:e4:88:bb:d5:08:c5:04:2a:bd:83:76:c4:da:
40:c5:4a:de:35:8b:ce:2d:56:9d:bb:d5:62:69:ed:
ff:66:80:f8:ac:4a:a5:c5:bf:b4:87:a9:55:87:16:
b1:29:eb:c4:45:ed:ca:c0:83:04:c9:ab:e6:e1:68:
21:80:17:24:3c:89:d2:03:79:1c:e2:dc:4d:bf:e9:
c5:4f:8d:68:ba:ef:50:b6:55:1e:40:8f:46:c0:ba:
95:8d:a7:86:92:2b:3a:36:6e:2b:0b:97:b3:bb:df:
b6:bb:ac:cb:75:5a:ad:28:f3:6e:9f:fe:15:09:4f:
65:6a:df:85:b4:b1:96:d6:93:ad:a1:e0:88:e1:b4:
fd:78:70:7a:00:a0:e8:e3:0f:de:b7:fa:17:05:96:
bc:8f:e8:59:27:b6:fb:13:41:ea:01:ab:d4:fd:02:
3e:76:21:cf:05:ad:31:84:d2:c9:5c:f8:eb:26:70:
09:03:3f:d4:77:de:81:f3:61:13:fb:6b:40:be:9a:
38:62:89:68:53:ba:17:d9:c9:55:eb:88:81:83:bf:
8a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:76:C2:F7:7C:E6:C9:80:E1:09:59:B3:CA:78:4F:E4:02:E9:9D:45
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538343a383030303a3a2f33362d3438203d3e20323133353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:8000::/36
Signature Algorithm: sha256WithRSAEncryption
53:e2:c4:6f:83:6b:9a:e9:65:5e:50:04:86:84:02:b2:32:ed:
76:73:d6:94:1f:c9:54:d3:8d:f6:5e:3c:18:b5:2d:7f:5a:de:
b3:b2:35:ec:a7:64:53:71:c5:20:19:44:c3:42:ec:63:f7:d8:
e3:1b:cf:8f:33:e5:b6:54:c8:72:23:19:45:c8:03:62:03:bb:
68:10:eb:7d:21:73:f2:50:fb:0f:a2:16:62:69:c3:0c:0c:b9:
bd:60:e7:e0:32:e3:aa:39:77:b6:f4:d7:20:3c:7e:53:71:fc:
dc:e1:0a:ca:2c:87:68:6c:15:5a:18:83:8b:a3:77:4f:19:d2:
ae:f4:45:22:09:cd:a6:ed:ff:9b:d7:24:f6:7b:47:f4:87:9c:
d5:62:20:8f:13:3e:87:9b:e3:27:37:36:71:e1:07:2b:d7:d1:
4d:6c:0b:0c:f9:4e:c7:67:ac:b8:35:4e:bf:d6:06:52:44:a0:
cd:7d:8b:92:0c:09:e0:06:e5:64:a2:f3:8b:4a:20:91:6b:f8:
4c:08:3a:4b:7c:96:de:7e:7f:c4:5a:ad:68:84:7a:bc:c4:ab:
18:e4:d8:16:97:61:3d:2d:ce:23:31:49:79:0f:3b:77:5a:c3:
63:3b:34:f9:02:d0:c7:cc:7d:a2:c6:f0:5b:7b:0b:13:b5:7b:
15:0a:ee:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:18 2025 by rpki-client