Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538343a393030303a3a2f33362d3438203d3e20323133353831.roa
File: 326131343a373538343a393030303a3a2f33362d3438203d3e20323133353831.roa (raw, json)
Hash identifier: wXPMMqOpBRNm+38hNsFpg1SjIRDsCgHGMKSQKKCsE50=
Subject key identifier: 56:4F:28:18:87:49:34:76:A0:C8:CF:7B:07:EA:74:70:32:0C:0F:3D
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 62499CFAEE02C34EF6601809C69515F4299DE0D8
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538343a393030303a3a2f33362d3438203d3e20323133353831.roa
Signing time: Sat 01 Feb 2025 15:15:58 +0000
ROA not before: Sat 01 Feb 2025 15:10:58 +0000
ROA not after: Sat 31 Jan 2026 15:15:58 +0000
asID: 213581
IP address blocks: 2a14:7584:9000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:49:9c:fa:ee:02:c3:4e:f6:60:18:09:c6:95:15:f4:29:9d:e0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 1 15:10:58 2025 GMT
Not After : Jan 31 15:15:58 2026 GMT
Subject: CN=564F281887493476A0C8CF7B07EA7470320C0F3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:85:78:a8:16:13:97:e3:5e:8f:d9:84:9c:
9e:58:ce:43:3b:03:3a:f7:72:2f:85:a7:0d:1e:a9:
ed:ee:fe:19:36:44:f4:8c:8a:1a:ba:a9:5b:7c:93:
d5:5a:43:56:f5:d6:a2:42:95:53:42:5c:8d:c1:7a:
4f:71:77:21:52:6f:cf:0d:57:1c:c3:98:7a:6c:5a:
de:07:be:bc:c4:d1:0c:07:03:7f:4b:44:28:1f:ce:
d7:44:e5:6b:77:5b:fa:15:b0:56:0c:b3:bc:98:65:
3b:51:17:bd:37:ab:2f:58:97:d0:ce:28:ff:2c:a4:
d7:be:32:e5:de:f7:7f:4d:6b:54:b5:b8:95:b4:6c:
c2:94:cd:c6:a7:b3:aa:e3:7e:52:6f:03:1f:76:63:
6d:15:98:15:24:44:1f:bb:b2:c2:2d:89:21:4c:b8:
05:2b:2e:7c:b9:aa:2a:cc:36:81:eb:6c:f0:fc:aa:
be:4f:54:b7:ae:2e:95:06:d2:74:d9:a9:ca:f6:d5:
08:27:f8:1c:22:89:74:22:a9:a3:2e:65:16:91:0d:
51:b1:b9:94:45:c8:9a:77:1b:dc:bd:c1:b7:26:49:
64:13:23:a7:54:10:71:d4:c2:b7:52:b8:99:49:a8:
ad:b5:0c:ee:04:13:df:ee:e6:63:41:48:b0:f8:16:
85:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4F:28:18:87:49:34:76:A0:C8:CF:7B:07:EA:74:70:32:0C:0F:3D
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538343a393030303a3a2f33362d3438203d3e20323133353831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:9000::/36
Signature Algorithm: sha256WithRSAEncryption
47:ca:5e:e3:be:08:66:83:8f:a5:d6:3c:c5:b8:83:ed:f9:4e:
30:6a:4c:61:51:21:56:ed:97:e0:f9:1b:18:00:12:0f:df:a8:
84:6f:04:15:8a:e9:4d:41:22:5f:f3:c8:e4:27:da:80:42:98:
36:88:83:0c:00:d4:cb:a8:74:4d:7c:65:5d:67:b4:19:e1:25:
2a:9e:44:d2:d7:c2:ef:57:7d:b9:62:94:76:13:16:0c:27:46:
04:73:87:3f:99:28:19:2b:5b:9c:37:ab:d3:29:16:84:01:10:
bc:2c:54:7f:dd:ff:3d:3d:0e:f0:f9:ba:18:68:e2:3f:e8:5d:
21:7b:71:2f:db:13:ce:84:b5:5b:3f:1d:f3:58:e3:56:f1:30:
23:f3:71:4f:cd:8b:23:f8:03:1a:b7:98:bc:f4:9d:58:8e:2a:
5a:db:23:4c:5f:dd:c8:41:23:ad:dc:d0:fc:40:b5:5f:c0:9e:
b9:e1:b9:c2:05:4c:ab:21:28:b7:d9:a4:38:a6:d6:7a:90:b6:
0b:93:46:df:cb:69:db:92:b6:ea:6e:24:1b:3a:b7:26:02:e3:
66:da:e1:a4:0d:70:ac:ea:70:75:48:98:74:4e:13:d4:3f:f1:
a3:b5:20:e2:30:a7:99:bf:d0:3e:73:6a:62:f1:69:d4:98:0f:
b9:48:cc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:28 2025 by rpki-client