Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638373a3a2f33322d3332203d3e203537383730.roa
File: 326131333a646638373a3a2f33322d3332203d3e203537383730.roa (raw, json)
Hash identifier: TKr7jAkmloEvqOtyEg0VErFhT/QQ+UwwLSQJ97CSUpA=
Subject key identifier: 22:55:CE:8B:F6:EC:3B:1D:CC:5A:58:B0:70:30:CB:C8:8E:23:D5:64
Certificate issuer: /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial: 310DAF435118DDC77B238E76FE0C98BE4CF83396
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638373a3a2f33322d3332203d3e203537383730.roa
Signing time: Mon 24 Apr 2023 00:44:09 +0000
ROA not before: Mon 24 Apr 2023 00:39:09 +0000
ROA not after: Mon 22 Apr 2024 00:44:09 +0000
asID: 57870
IP address blocks: 2a13:df87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:0d:af:43:51:18:dd:c7:7b:23:8e:76:fe:0c:98:be:4c:f8:33:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
Validity
Not Before: Apr 24 00:39:09 2023 GMT
Not After : Apr 22 00:44:09 2024 GMT
Subject: CN=2255CE8BF6EC3B1DCC5A58B07030CBC88E23D564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a5:37:42:6b:28:0f:ae:0d:51:9e:26:d8:13:
d8:ba:14:4f:9b:7d:ed:b5:a7:0a:79:f4:cf:1f:24:
5f:4b:03:fc:78:b2:d0:18:65:8b:8d:23:48:51:04:
6a:9f:03:56:29:99:2d:a1:98:98:2c:dd:77:8c:58:
43:28:79:9d:28:10:7c:4f:21:8e:0c:e4:4b:1a:6d:
a6:9f:e9:f4:74:20:cb:85:f7:1c:54:fb:c3:e9:ee:
a0:7c:1c:be:ba:6b:89:e8:29:39:1d:66:4f:24:1d:
8e:c9:f3:8d:15:92:f4:af:e2:0c:2a:03:14:49:de:
1f:54:92:49:b4:47:06:99:a6:a8:05:7c:02:d7:03:
0b:a8:45:54:ad:54:5c:75:0c:88:7a:e7:dc:70:a0:
3e:01:26:ca:57:0e:40:bf:5f:1b:5d:96:8e:c5:aa:
1a:fe:48:6c:7b:3e:1d:c9:36:5d:67:7d:bf:a8:59:
23:44:7d:0a:7c:16:7c:db:e7:e8:24:2e:5c:f1:13:
b4:cb:1f:cf:95:b9:8d:ff:d2:34:d4:81:05:bf:e9:
7e:1d:79:6b:e8:10:47:98:9c:63:33:31:8e:2a:f2:
cc:65:5c:1e:da:92:f3:fd:73:2e:4b:7f:d2:6e:ce:
62:46:5e:7b:9c:bb:6d:88:80:58:2c:33:f5:d1:97:
e0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:55:CE:8B:F6:EC:3B:1D:CC:5A:58:B0:70:30:CB:C8:8E:23:D5:64
X509v3 Authority Key Identifier:
keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638373a3a2f33322d3332203d3e203537383730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df87::/32
Signature Algorithm: sha256WithRSAEncryption
d9:c8:04:97:89:1a:cc:a8:46:71:2a:57:e2:c6:9d:1c:8b:2c:
2c:2e:30:ae:5a:7b:bb:d6:56:e9:61:0c:64:02:23:df:78:bf:
78:f9:5a:a4:3c:df:79:24:4a:0d:9a:09:45:d6:d7:4b:21:78:
59:f7:90:ec:d0:dd:93:92:07:49:96:b0:5b:08:5f:96:a7:da:
c9:d5:1a:b6:e5:ec:1b:a2:ab:ae:6d:62:ae:de:ae:b5:6b:64:
18:04:eb:7a:b0:92:61:04:bd:88:2d:c9:a1:8d:2f:a6:66:b9:
c8:89:a3:59:94:9b:6a:2d:af:de:ac:29:aa:3d:bc:da:92:6c:
9c:54:75:58:f0:85:37:d3:79:0e:4e:5a:e6:e7:db:ce:5d:e8:
54:51:2b:d7:d5:e9:65:69:7e:8c:40:1c:71:7e:e0:a2:5f:0f:
fe:fe:ad:a3:6a:bb:e2:2a:da:96:1b:c3:b5:2f:3c:45:fd:03:
47:7b:dd:b4:be:6a:0e:3c:21:7f:f9:40:b3:48:34:83:1d:32:
5c:ea:06:e5:20:0d:c2:23:8b:c0:b0:0a:62:cb:a7:b5:e7:3a:
77:fc:55:e3:83:4d:ad:e9:f6:c5:76:d6:29:18:b5:93:84:7a:
93:15:9f:38:ee:97:0d:bf:bc:d4:2d:7d:2c:6c:ed:98:70:4a:
a7:17:24:c7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMQ2vQ1EY3cd7I452/gyYvkz4M5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRiOTBhMjdkODZmNmExOTE0YzI2MWMyMTQ2OWRmODUz
ZTMyYmViNTAeFw0yMzA0MjQwMDM5MDlaFw0yNDA0MjIwMDQ0MDlaMDMxMTAvBgNV
BAMTKDIyNTVDRThCRjZFQzNCMURDQzVBNThCMDcwMzBDQkM4OEUyM0Q1NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEpTdCaygPrg1RnibYE9i6FE+b
fe21pwp59M8fJF9LA/x4stAYZYuNI0hRBGqfA1YpmS2hmJgs3XeMWEMoeZ0oEHxP
IY4M5Esabaaf6fR0IMuF9xxU+8Pp7qB8HL66a4noKTkdZk8kHY7J840VkvSv4gwq
AxRJ3h9Ukkm0RwaZpqgFfALXAwuoRVStVFx1DIh659xwoD4BJspXDkC/Xxtdlo7F
qhr+SGx7Ph3JNl1nfb+oWSNEfQp8Fnzb5+gkLlzxE7TLH8+VuY3/0jTUgQW/6X4d
eWvoEEeYnGMzMY4q8sxlXB7akvP9cy5Lf9JuzmJGXnucu22IgFgsM/XRl+C7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIlXOi/bsOx3MWliwcDDLyI4j1WQwHwYDVR0j
BBgwFoAUdLkKJ9hvahkUwmHCFGnfhT4yvrUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTRmYzQ3NTItZjgxYS00N2I2LThmMGQtZmY3NGM4YjBi
MGE0LzAvNzRCOTBBMjdEODZGNkExOTE0QzI2MUMyMTQ2OURGODUzRTMyQkVCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RMa0tKOWh2YWhrVXdtSENGR25maFQ0
eXZyVS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTRmYzQ3NTIt
ZjgxYS00N2I2LThmMGQtZmY3NGM4YjBiMGE0LzAvMzI2MTMxMzMzYTY0NjYzODM3
M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzNzM4MzczMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoT
34cwDQYJKoZIhvcNAQELBQADggEBANnIBJeJGsyoRnEqV+LGnRyLLCwuMK5ae7vW
VulhDGQCI994v3j5WqQ833kkSg2aCUXW10sheFn3kOzQ3ZOSB0mWsFsIX5an2snV
Grbl7Buiq65tYq7errVrZBgE63qwkmEEvYgtyaGNL6ZmuciJo1mUm2otr96sKao9
vNqSbJxUdVjwhTfTeQ5OWubn285d6FRRK9fV6WVpfoxAHHF+4KJfD/7+raNqu+Iq
2pYbw7UvPEX9A0d73bS+ag48IX/5QLNINIMdMlzqBuUgDcIji8CwCmLLp7XnOnf8
VeODTa3p9sV21ikYtZOEepMVnzjulw2/vNQtfSxs7ZhwSqcXJMc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:53 2025 by rpki-client