Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638323a623030623a3a2f34382d3438203d3e203537383730.roa
File: 326131333a646638323a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier: riVPKNiY4swjnAnCvbEgZ7I5jiepWwIWjLURQnfAZd8=
Subject key identifier: FA:36:F8:39:DC:74:70:26:7D:63:6C:94:7F:B9:3B:4B:06:58:DB:06
Certificate issuer: /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial: 4916E1B56299C514D362065B62DAAF65CA73F4A7
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638323a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time: Tue 02 May 2023 09:09:28 +0000
ROA not before: Tue 02 May 2023 09:04:28 +0000
ROA not after: Tue 30 Apr 2024 09:09:28 +0000
asID: 57870
IP address blocks: 2a13:df82:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:16:e1:b5:62:99:c5:14:d3:62:06:5b:62:da:af:65:ca:73:f4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
Validity
Not Before: May 2 09:04:28 2023 GMT
Not After : Apr 30 09:09:28 2024 GMT
Subject: CN=FA36F839DC7470267D636C947FB93B4B0658DB06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:44:2b:a0:93:02:b3:51:d4:c5:27:52:3f:
8a:e4:e3:e9:14:fd:c6:7c:a8:2e:aa:93:c6:d9:c1:
d8:69:6e:c2:e8:9b:ce:a8:2f:9e:0f:ed:7d:ab:fe:
c2:f1:b8:0b:92:ce:c2:37:e3:58:55:6c:37:e9:88:
f8:28:1d:8f:1c:96:a3:38:ea:9a:4e:96:62:78:06:
b7:9c:1d:eb:58:9f:7e:9d:04:79:9e:ba:44:f0:8a:
87:2d:b2:76:3b:96:0b:d5:88:7a:41:57:89:17:43:
17:0e:23:04:34:f8:1f:43:b3:df:88:7b:4c:c8:18:
08:90:14:21:90:aa:20:d2:8a:c5:33:9e:92:85:5b:
92:97:b7:69:f9:c0:87:d5:9d:fa:d9:0c:63:30:2c:
c3:d8:1f:81:98:4e:06:be:9a:97:f0:fa:39:a3:81:
5e:19:b4:7e:b0:92:44:9f:3f:e7:38:c8:75:ae:70:
96:87:78:50:1f:32:2e:b3:d2:0e:ce:ae:93:d9:71:
39:ea:2d:b6:ab:ec:3b:ae:26:98:4e:cd:7c:cf:e5:
f3:00:5d:04:aa:6b:8c:90:53:9d:dd:e4:9b:34:88:
cb:56:fa:41:9e:9e:e9:b1:64:1d:b9:af:7c:27:99:
f0:51:45:a2:2e:55:2b:a6:a0:1c:74:60:97:d7:98:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:36:F8:39:DC:74:70:26:7D:63:6C:94:7F:B9:3B:4B:06:58:DB:06
X509v3 Authority Key Identifier:
keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638323a623030623a3a2f34382d3438203d3e203537383730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df82:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
5a:d5:9c:7f:47:5a:e7:e9:d7:6e:03:2e:00:9e:b9:c4:d2:9a:
31:4c:78:6f:ba:57:11:ce:64:6c:d6:96:e7:22:1e:b8:1c:9b:
f2:72:35:7e:2b:da:17:78:b0:32:bf:5a:4e:bd:52:e0:6b:11:
15:de:cb:5c:ff:db:1e:a3:f2:f1:0f:f6:68:ff:c2:8a:e2:03:
5c:3b:79:8f:05:83:57:99:68:8f:d8:92:57:6d:c5:ee:cf:5f:
ac:0b:f4:0a:d8:46:c2:bd:13:d7:52:67:f9:43:d7:3e:62:44:
dc:68:21:da:d3:97:c7:0b:47:6e:b5:a0:30:84:22:eb:4a:2d:
6a:2b:d7:59:84:e6:92:c7:3a:f1:be:9d:f6:c1:64:1e:06:0b:
b3:81:93:5e:49:68:8c:a6:78:dd:fb:a7:2b:de:3a:44:fe:77:
80:5a:c3:de:05:b6:09:c5:98:b6:9a:f2:17:e1:0a:3b:2f:6f:
50:07:a5:26:b6:9b:dd:c7:1c:bf:23:e1:73:19:9d:40:a2:60:
93:56:d1:19:85:84:a3:df:a3:36:0e:20:ce:92:fa:d2:1e:d3:
a4:ed:8a:ab:93:8d:20:cb:aa:a1:ab:2b:ac:40:1e:bd:79:57:
77:b1:95:f3:5c:97:b0:67:ea:11:02:de:46:2c:b3:c6:74:4d:
ea:76:ad:02
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUSRbhtWKZxRTTYgZbYtqvZcpz9KcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRiOTBhMjdkODZmNmExOTE0YzI2MWMyMTQ2OWRmODUz
ZTMyYmViNTAeFw0yMzA1MDIwOTA0MjhaFw0yNDA0MzAwOTA5MjhaMDMxMTAvBgNV
BAMTKEZBMzZGODM5REM3NDcwMjY3RDYzNkM5NDdGQjkzQjRCMDY1OERCMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMOkQroJMCs1HUxSdSP4rk4+kU
/cZ8qC6qk8bZwdhpbsLom86oL54P7X2r/sLxuAuSzsI341hVbDfpiPgoHY8clqM4
6ppOlmJ4BrecHetYn36dBHmeukTwioctsnY7lgvViHpBV4kXQxcOIwQ0+B9Ds9+I
e0zIGAiQFCGQqiDSisUznpKFW5KXt2n5wIfVnfrZDGMwLMPYH4GYTga+mpfw+jmj
gV4ZtH6wkkSfP+c4yHWucJaHeFAfMi6z0g7OrpPZcTnqLbar7DuuJphOzXzP5fMA
XQSqa4yQU53d5Js0iMtW+kGenumxZB25r3wnmfBRRaIuVSumoBx0YJfXmNNpAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQU+jb4Odx0cCZ9Y2yUf7k7SwZY2wYwHwYDVR0j
BBgwFoAUdLkKJ9hvahkUwmHCFGnfhT4yvrUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTRmYzQ3NTItZjgxYS00N2I2LThmMGQtZmY3NGM4YjBi
MGE0LzAvNzRCOTBBMjdEODZGNkExOTE0QzI2MUMyMTQ2OURGODUzRTMyQkVCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RMa0tKOWh2YWhrVXdtSENGR25maFQ0
eXZyVS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTRmYzQ3NTIt
ZjgxYS00N2I2LThmMGQtZmY3NGM4YjBiMGE0LzAvMzI2MTMxMzMzYTY0NjYzODMy
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzczODM3MzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqE9+CsAswDQYJKoZIhvcNAQELBQADggEBAFrVnH9HWufp124DLgCe
ucTSmjFMeG+6VxHOZGzWluciHrgcm/JyNX4r2hd4sDK/Wk69UuBrERXey1z/2x6j
8vEP9mj/woriA1w7eY8Fg1eZaI/Ykldtxe7PX6wL9ArYRsK9E9dSZ/lD1z5iRNxo
IdrTl8cLR261oDCEIutKLWor11mE5pLHOvG+nfbBZB4GC7OBk15JaIymeN37pyve
OkT+d4Baw94FtgnFmLaa8hfhCjsvb1AHpSa2m93HHL8j4XMZnUCiYJNW0RmFhKPf
ozYOIM6S+tIe06TtiquTjSDLqqGrK6xAHr15V3exlfNcl7Bn6hEC3kYss8Z0Tep2
rQI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:00 2025 by rpki-client