Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a313030303a3a2f33362d3336203d3e20313938393830.roa
File: 326131333a646638303a313030303a3a2f33362d3336203d3e20313938393830.roa (raw, json)
Hash identifier: H3RUB++BWkhm2zs1gHTcgn+Qa9UxBhsksZ8P23nPVPI=
Subject key identifier: F6:30:81:DB:8B:14:3F:0C:52:3A:C7:2D:24:8B:5B:BD:12:F8:08:02
Certificate issuer: /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial: 32136DFFA7DC0C8A8D327754E3E78D56740C3369
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a313030303a3a2f33362d3336203d3e20313938393830.roa
Signing time: Sat 22 Apr 2023 01:43:26 +0000
ROA not before: Sat 22 Apr 2023 01:38:26 +0000
ROA not after: Sat 20 Apr 2024 01:43:26 +0000
asID: 198980
IP address blocks: 2a13:df80:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:13:6d:ff:a7:dc:0c:8a:8d:32:77:54:e3:e7:8d:56:74:0c:33:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
Validity
Not Before: Apr 22 01:38:26 2023 GMT
Not After : Apr 20 01:43:26 2024 GMT
Subject: CN=F63081DB8B143F0C523AC72D248B5BBD12F80802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:27:82:05:d4:4b:04:b6:8e:ad:bb:9a:be:
03:88:f0:48:12:60:86:8c:5e:c3:5e:fb:9f:d0:39:
68:74:57:c2:07:2b:05:52:06:f9:8c:a3:43:e6:8c:
ef:36:40:c4:7b:38:77:c3:c0:e2:6a:74:11:ac:f0:
cf:02:40:4a:5f:02:75:f7:d5:85:35:e1:b4:2e:7a:
bf:ee:cb:5c:91:0f:67:76:00:34:04:9c:4e:8e:ed:
57:7a:f1:9b:73:fc:96:9a:f9:40:03:a4:fe:55:e9:
06:0e:0c:46:c6:43:f4:ee:33:be:7a:50:43:c2:39:
fd:f6:a8:3b:8d:bd:4a:da:36:64:ff:8a:ec:f7:95:
53:22:e5:29:9e:a3:e9:ff:0f:cc:35:6c:6e:d0:eb:
17:b0:04:2c:3d:c3:47:a5:92:f4:6b:d8:56:5e:ca:
fd:e6:d3:7e:86:9b:d2:b6:47:71:da:98:19:88:15:
1d:67:31:48:0c:36:4a:1a:bd:cc:af:3a:cb:8e:9c:
3a:83:7f:2c:bc:b6:ed:d8:5b:40:5b:55:5d:8d:ca:
7c:3e:0c:3b:26:43:5b:1d:f9:9c:b6:b6:5f:ac:1f:
09:4c:0a:05:95:bd:65:b2:9e:14:66:87:1d:c0:b0:
d9:df:f2:44:45:ee:62:6f:b2:18:fa:9a:b2:bb:da:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:30:81:DB:8B:14:3F:0C:52:3A:C7:2D:24:8B:5B:BD:12:F8:08:02
X509v3 Authority Key Identifier:
keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a313030303a3a2f33362d3336203d3e20313938393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:1000::/36
Signature Algorithm: sha256WithRSAEncryption
65:f7:08:2e:34:1c:0a:0c:ab:0a:5e:85:94:73:4e:26:d5:1e:
c2:a4:cc:ce:90:26:2e:33:48:52:c9:ef:2d:5e:95:ee:88:3c:
fe:d6:79:af:7c:14:d7:dc:77:59:2d:81:3f:93:17:de:82:9b:
fa:a0:fc:a2:85:aa:10:80:53:f8:1e:df:62:04:db:09:77:5c:
60:1e:27:bd:8f:90:94:b2:0f:3f:59:35:3e:3b:64:d3:35:a6:
47:cd:d5:30:6d:98:03:8e:09:04:2d:38:60:1b:f1:e8:db:29:
d1:49:82:b3:3f:07:d7:bb:35:e8:e1:c1:b2:ea:10:04:56:c0:
1b:b9:e1:4f:b9:e0:df:92:fc:b3:46:a5:52:57:30:f2:6c:1f:
61:b2:07:8d:a0:e9:08:37:a6:b4:72:32:1a:95:8f:64:87:86:
fb:ff:2b:74:38:3d:6a:09:cc:99:51:b5:17:ae:ff:1e:85:26:
4b:c4:b0:ae:c8:a9:e8:fa:3d:3f:e4:94:9c:5f:6b:36:e0:c0:
47:12:aa:17:3a:04:d5:0a:10:2b:b3:44:60:d5:37:75:89:e9:
2e:57:8d:bc:d9:9f:a8:ab:c5:ed:d1:16:59:9f:ff:90:45:e9:
9a:fc:97:0d:c1:e9:bb:df:3a:b4:b8:b4:d5:9e:88:23:ed:46:
d4:32:2f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:20 2025 by rpki-client