Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa
File: 326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa (raw, json)
Hash identifier: iOS92ZOzfdaYAwVAG52es9WixwgK6RzegWQ/R4buDFc=
Subject key identifier: E4:AE:F0:3C:EB:D4:F5:0C:5C:6D:28:56:9F:C8:F9:2C:5E:62:CB:56
Certificate issuer: /CN=3509F37A88DA7D8DF5D8355261259C1D418E541C
Certificate serial: 3DF13746D308BBBA460A7B7E32D870AA54E54590
Authority key identifier: 35:09:F3:7A:88:DA:7D:8D:F5:D8:35:52:61:25:9C:1D:41:8E:54:1C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa
Signing time: Thu 20 Mar 2025 09:06:09 +0000
ROA not before: Thu 20 Mar 2025 09:01:09 +0000
ROA not after: Thu 19 Mar 2026 09:06:09 +0000
asID: 214841
IP address blocks: 2a14:7581:6fe0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f1:37:46:d3:08:bb:ba:46:0a:7b:7e:32:d8:70:aa:54:e5:45:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3509F37A88DA7D8DF5D8355261259C1D418E541C
Validity
Not Before: Mar 20 09:01:09 2025 GMT
Not After : Mar 19 09:06:09 2026 GMT
Subject: CN=E4AEF03CEBD4F50C5C6D28569FC8F92C5E62CB56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5a:da:8a:d5:51:4f:f1:98:8d:88:5d:17:1b:
17:82:fd:ce:c1:05:f4:cb:b1:fd:47:04:f1:ea:09:
25:54:74:0b:36:e6:00:01:f6:c7:0f:13:b1:c9:ba:
33:14:77:6b:90:c3:31:77:f5:d1:4b:ff:4b:a9:f8:
7d:c8:aa:07:c3:13:75:c6:f9:34:e6:2b:5c:09:48:
ac:8b:b6:cd:0a:95:34:44:0a:4e:c4:e8:39:77:77:
dc:0c:30:92:a9:ff:fb:e1:13:41:47:4b:41:c6:5f:
e0:1c:2c:53:51:f6:c5:27:7b:af:48:2f:33:9b:34:
62:b1:e0:64:6a:82:a4:13:36:3e:a7:5f:6d:cd:49:
42:43:07:1b:66:dc:5e:24:1f:09:ad:26:3c:92:52:
7e:1b:11:72:68:f5:f0:33:62:c2:c8:1a:a0:3b:15:
18:67:ea:65:34:d2:a3:2d:51:21:24:a9:64:d3:05:
84:bc:84:e1:64:e1:c9:e5:09:a6:f2:78:2e:e6:4b:
7c:08:58:cd:5c:5d:9d:85:fa:83:df:5a:3c:bd:94:
3e:6a:3b:bc:fe:ac:c4:2c:79:27:80:52:d0:bd:8a:
e0:4f:42:a6:f5:ab:ef:99:51:78:e8:53:0c:22:44:
d2:47:8b:c8:dc:3a:b8:90:a8:26:41:b0:7b:bc:9a:
18:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AE:F0:3C:EB:D4:F5:0C:5C:6D:28:56:9F:C8:F9:2C:5E:62:CB:56
X509v3 Authority Key Identifier:
keyid:35:09:F3:7A:88:DA:7D:8D:F5:D8:35:52:61:25:9C:1D:41:8E:54:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:6fe0::/44
Signature Algorithm: sha256WithRSAEncryption
0f:64:14:3f:01:63:4d:dd:cb:b5:43:e1:e5:77:e6:45:b6:9e:
f3:c7:84:e3:92:01:6f:c6:3e:d2:f1:1a:d6:1f:4b:d6:22:83:
14:ae:0d:2b:97:e9:d3:09:ee:0b:0a:51:66:bb:69:84:cd:77:
7c:62:20:cf:ae:d7:8a:c9:73:d8:6f:b9:4c:b6:f0:e5:93:ba:
7c:e3:06:e9:13:77:79:74:03:32:cb:0b:7a:77:0c:62:91:fb:
ec:8d:4f:5d:97:6d:ba:ac:7f:60:ec:6e:70:32:ea:e9:cd:34:
10:4d:23:d5:ec:d4:b3:fb:9b:8c:58:aa:04:cd:4a:18:21:82:
7c:6d:b1:fa:0f:0b:fd:8e:7d:b4:64:91:91:e3:2b:ae:21:a5:
3a:d3:ee:ea:64:c2:f6:2f:4e:8e:64:0f:d1:a2:29:2a:e2:ae:
56:8b:af:8a:94:d9:ae:32:23:ec:fa:36:3c:ad:7a:0e:be:24:
77:a7:49:7d:51:7f:67:47:08:f1:9f:b8:ff:6a:85:2b:e1:cb:
2f:dc:5e:7c:04:59:06:dc:c8:7e:fe:2e:53:22:37:a1:86:af:
28:86:85:9d:72:43:07:65:4f:98:0f:2a:3c:0d:86:dc:f7:21:
d0:68:17:21:af:c6:e5:bd:94:32:7c:75:ba:d5:0c:f9:95:28:
73:9a:76:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:47 2025 by rpki-client