Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a35303a3a2f34342d3438203d3e203438343635.roa
File: 326131333a646638303a35303a3a2f34342d3438203d3e203438343635.roa (raw, json)
Hash identifier: 7lck2iIGjNXDPBFZOKD4hwd0u4kx4jMgiJRjDJjMVsk=
Subject key identifier: E3:08:B5:79:19:44:36:79:13:B3:5C:5D:F4:4D:8A:F7:33:F1:F7:54
Certificate issuer: /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial: 733627F99462E07CB8FADC5E32250F52EE5BDAF2
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a35303a3a2f34342d3438203d3e203438343635.roa
Signing time: Thu 06 Apr 2023 21:06:46 +0000
ROA not before: Thu 06 Apr 2023 21:01:46 +0000
ROA not after: Thu 04 Apr 2024 21:06:46 +0000
asID: 48465
IP address blocks: 2a13:df80:50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:36:27:f9:94:62:e0:7c:b8:fa:dc:5e:32:25:0f:52:ee:5b:da:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
Validity
Not Before: Apr 6 21:01:46 2023 GMT
Not After : Apr 4 21:06:46 2024 GMT
Subject: CN=E308B5791944367913B35C5DF44D8AF733F1F754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:2b:fa:5d:03:55:c6:21:b9:72:ae:1c:2c:
57:58:34:19:8f:91:53:ff:38:34:d5:ea:bf:ed:25:
49:40:af:e9:0e:aa:9b:91:84:7f:53:fd:61:fa:ae:
4e:a6:1f:0e:77:6b:ec:40:6c:4b:85:4b:88:c8:cc:
99:e9:8e:0c:fe:f2:d6:ff:26:d6:74:ef:5e:62:9a:
2e:fe:59:13:65:6f:98:e9:d9:a6:6e:13:3c:a3:08:
1b:bf:41:e1:dc:1f:8a:4d:72:95:8b:14:f7:91:40:
45:30:95:07:a2:f7:25:fe:7f:a3:47:a4:11:64:ea:
ae:f1:f7:24:b8:d4:af:0a:89:18:17:6d:0b:48:4a:
be:b9:37:7e:10:5a:56:ba:72:0f:ef:e7:99:be:7a:
5a:30:9a:da:50:a7:48:2c:d4:c8:63:71:31:0b:f5:
6d:97:6b:66:77:f7:31:2e:cf:73:70:b7:84:fc:b3:
eb:78:22:e6:8d:6b:13:61:84:4f:4b:dc:29:c9:03:
5b:74:0e:86:9d:ca:6f:50:9f:8f:5e:87:be:45:5d:
a1:ce:e9:c6:17:09:96:22:63:45:29:f7:1a:32:b0:
cb:ef:fd:0b:eb:07:9e:69:95:35:68:be:bd:5a:e1:
b5:60:ff:4e:41:b2:13:08:91:05:ba:0f:6e:b1:27:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:08:B5:79:19:44:36:79:13:B3:5C:5D:F4:4D:8A:F7:33:F1:F7:54
X509v3 Authority Key Identifier:
keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a35303a3a2f34342d3438203d3e203438343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:50::/44
Signature Algorithm: sha256WithRSAEncryption
95:4d:0c:fa:06:82:14:87:38:65:c6:f8:98:e1:ac:76:bf:ed:
24:1e:2e:46:05:4f:25:00:5a:4c:d3:0a:a6:74:85:29:8b:ea:
13:b5:d6:d0:39:d4:8f:34:17:58:b2:96:c7:5d:b7:55:e4:83:
b0:8a:91:37:bc:a2:03:ed:e0:2b:86:98:43:11:a0:58:ea:5f:
0f:4f:0c:ae:b4:53:de:31:52:c7:52:1a:db:83:ce:4b:c2:93:
22:30:d2:79:33:51:99:6e:5e:40:42:44:f2:3a:5e:7f:d6:e1:
80:5f:df:4d:b8:09:09:34:bd:96:51:fc:db:b3:21:6b:9f:8f:
6b:83:32:3c:41:59:11:2d:5c:49:f8:45:2f:ec:30:04:b0:bf:
4d:24:58:fa:0d:2f:85:ea:b3:5a:c0:e5:e9:a4:a5:18:0b:e0:
6a:da:34:80:0e:ab:cb:96:4b:e1:4c:9d:cf:51:2d:45:49:38:
3b:4e:b1:4f:b5:4b:cb:30:4c:45:e2:46:d2:ba:04:a5:20:67:
a9:76:be:20:76:34:3e:d1:0b:a4:d7:b0:2d:dc:29:12:a1:74:
ea:bb:87:3b:2c:46:f8:4a:41:d6:5d:59:b0:3f:fd:b1:37:e0:
44:68:7b:ad:f4:fb:c8:25:de:f6:b8:de:65:ce:0f:ae:6d:0c:
a6:c6:44:96
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUczYn+ZRi4Hy4+txeMiUPUu5b2vIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRiOTBhMjdkODZmNmExOTE0YzI2MWMyMTQ2OWRmODUz
ZTMyYmViNTAeFw0yMzA0MDYyMTAxNDZaFw0yNDA0MDQyMTA2NDZaMDMxMTAvBgNV
BAMTKEUzMDhCNTc5MTk0NDM2NzkxM0IzNUM1REY0NEQ4QUY3MzNGMUY3NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVMSv6XQNVxiG5cq4cLFdYNBmP
kVP/ODTV6r/tJUlAr+kOqpuRhH9T/WH6rk6mHw53a+xAbEuFS4jIzJnpjgz+8tb/
JtZ0715imi7+WRNlb5jp2aZuEzyjCBu/QeHcH4pNcpWLFPeRQEUwlQei9yX+f6NH
pBFk6q7x9yS41K8KiRgXbQtISr65N34QWla6cg/v55m+elowmtpQp0gs1MhjcTEL
9W2Xa2Z39zEuz3Nwt4T8s+t4IuaNaxNhhE9L3CnJA1t0Doadym9Qn49eh75FXaHO
6cYXCZYiY0Up9xoysMvv/QvrB55plTVovr1a4bVg/05BshMIkQW6D26xJ9EDAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQU4wi1eRlENnkTs1xd9E2K9zPx91QwHwYDVR0j
BBgwFoAUdLkKJ9hvahkUwmHCFGnfhT4yvrUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTRmYzQ3NTItZjgxYS00N2I2LThmMGQtZmY3NGM4YjBi
MGE0LzAvNzRCOTBBMjdEODZGNkExOTE0QzI2MUMyMTQ2OURGODUzRTMyQkVCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RMa0tKOWh2YWhrVXdtSENGR25maFQ0
eXZyVS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTRmYzQ3NTIt
ZjgxYS00N2I2LThmMGQtZmY3NGM4YjBiMGE0LzAvMzI2MTMxMzMzYTY0NjYzODMw
M2EzNTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzQzODM0MzYzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHBCoT34AAUDANBgkqhkiG9w0BAQsFAAOCAQEAlU0M+gaCFIc4Zcb4mOGsdr/t
JB4uRgVPJQBaTNMKpnSFKYvqE7XW0DnUjzQXWLKWx123VeSDsIqRN7yiA+3gK4aY
QxGgWOpfD08MrrRT3jFSx1Ia24POS8KTIjDSeTNRmW5eQEJE8jpef9bhgF/fTbgJ
CTS9llH827Mha5+Pa4MyPEFZES1cSfhFL+wwBLC/TSRY+g0vheqzWsDl6aSlGAvg
ato0gA6ry5ZL4Uydz1EtRUk4O06xT7VLyzBMReJG0roEpSBnqXa+IHY0PtELpNew
LdwpEqF06ruHOyxG+EpB1l1ZsD/9sTfgRGh7rfT7yCXe9rjeZc4Prm0MpsZElg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:57 2025 by rpki-client