Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a3a2f32392d3239203d3e20323130393132.roa
File: 326131333a646638303a3a2f32392d3239203d3e20323130393132.roa (raw, json)
Hash identifier: uJuvo72J0cQIYrXZOVmsJ6RNcpCLuLzxjXVg7yPD5AQ=
Subject key identifier: 6B:1D:3C:07:5E:9C:AC:A9:B4:83:42:B1:CB:9E:DD:C1:68:20:A8:F0
Certificate issuer: /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial: 15B6666BF77A31179D795F483962F7B5D174A57C
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a3a2f32392d3239203d3e20323130393132.roa
Signing time: Mon 27 Mar 2023 18:13:35 +0000
ROA not before: Mon 27 Mar 2023 18:08:35 +0000
ROA not after: Mon 25 Mar 2024 18:13:35 +0000
asID: 210912
IP address blocks: 2a13:df80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b6:66:6b:f7:7a:31:17:9d:79:5f:48:39:62:f7:b5:d1:74:a5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
Validity
Not Before: Mar 27 18:08:35 2023 GMT
Not After : Mar 25 18:13:35 2024 GMT
Subject: CN=6B1D3C075E9CACA9B48342B1CB9EDDC16820A8F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:ae:1b:a5:7c:91:99:fa:89:ae:93:bc:c3:
f3:4f:ce:6a:2e:2d:51:4e:b5:10:62:6a:3d:10:91:
5e:db:78:9c:0a:e8:11:50:16:02:9b:96:5c:b0:9a:
20:f9:44:6d:ca:0c:7c:a6:c3:0d:fd:4c:d6:c9:15:
92:7d:e8:b1:47:21:7f:a1:14:a3:d7:69:f9:8f:7e:
4b:b7:a6:22:ca:9d:c3:80:c2:a3:dc:dc:12:bd:b5:
4f:3a:a1:18:17:9b:89:0d:30:22:86:53:c3:27:1b:
07:cc:45:71:50:a6:1c:88:e2:f5:07:4b:f8:80:01:
a9:ae:a2:7d:8c:0c:c4:98:0f:cf:31:74:15:42:26:
f6:ab:2f:81:28:64:3c:70:3b:e0:6d:0e:f6:08:6b:
bb:6c:25:b0:4e:f2:5f:43:8e:fd:04:9a:33:5e:5c:
d3:c1:9a:38:8e:25:b7:f3:a4:06:4a:d2:17:98:17:
00:bf:53:86:51:36:3e:46:80:ff:dc:61:95:70:f8:
0c:3f:65:d9:45:79:33:8a:6f:c3:b2:dd:8e:56:46:
1e:d0:e0:36:dc:fb:0d:09:ae:db:3c:f3:24:c6:cc:
11:0e:4c:e8:74:3f:44:19:2a:2a:a3:b5:de:40:73:
f6:4c:c2:af:92:5c:95:1c:13:bb:2b:53:27:9e:18:
9e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1D:3C:07:5E:9C:AC:A9:B4:83:42:B1:CB:9E:DD:C1:68:20:A8:F0
X509v3 Authority Key Identifier:
keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638303a3a2f32392d3239203d3e20323130393132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80::/29
Signature Algorithm: sha256WithRSAEncryption
02:a2:b3:39:c6:2a:ee:c6:1f:b2:b7:9e:8e:0a:eb:59:5b:5c:
fc:2b:bf:af:8b:56:6a:76:17:92:bf:68:a1:2a:0f:64:dc:25:
74:88:3f:4c:42:32:c2:2d:6e:37:5c:f2:de:6d:50:90:b0:a0:
3a:a2:51:21:66:cb:95:2a:4a:54:50:d4:6e:12:d3:1c:36:d1:
f5:10:98:9e:bd:18:d3:ff:3f:f1:12:eb:6a:43:95:d7:06:25:
b5:00:89:bd:cc:08:e1:c2:fc:19:b1:dc:d1:aa:3f:41:dd:9a:
2e:7a:23:d6:d6:78:89:fa:a2:bd:f7:0c:05:85:11:06:58:3a:
2d:d5:fc:59:4d:ab:18:40:86:0c:66:fc:19:84:3f:80:5c:aa:
c8:1c:bc:fa:93:75:17:e0:14:b4:63:cd:eb:f8:aa:65:a3:c2:
45:fe:3d:79:c9:cc:ab:3a:40:d5:87:32:39:2f:06:28:8b:18:
aa:bd:cf:a2:55:4c:6a:e6:80:08:71:04:90:ec:f8:7a:0e:59:
42:17:3a:22:e9:47:5d:9d:87:66:9f:91:de:ec:59:72:ad:e5:
3a:7f:a3:3f:47:5f:34:7a:2a:d9:75:ea:59:f7:df:47:8c:53:
b1:49:d0:c1:74:4b:48:59:7e:cf:ff:0a:00:f5:4b:4b:ac:79:
0c:27:a6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:38 2025 by rpki-client