Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638373a623030623a3a2f34382d3438203d3e203537383730.roa
File: 326131333a646638373a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier: IbWDM1o8gKVbbWthBrB4ceP3DpzTmC+6PXOuWG5PPqs=
Subject key identifier: CF:E5:91:BB:5D:71:10:C0:E1:38:17:65:B9:79:E2:81:29:1B:3A:C7
Certificate issuer: /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial: 376907DEC025DEC038C4D1D9576C9D96BFA6C605
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638373a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time: Mon 24 Apr 2023 00:44:12 +0000
ROA not before: Mon 24 Apr 2023 00:39:12 +0000
ROA not after: Mon 22 Apr 2024 00:44:12 +0000
asID: 57870
IP address blocks: 2a13:df87:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:69:07:de:c0:25:de:c0:38:c4:d1:d9:57:6c:9d:96:bf:a6:c6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
Validity
Not Before: Apr 24 00:39:12 2023 GMT
Not After : Apr 22 00:44:12 2024 GMT
Subject: CN=CFE591BB5D7110C0E1381765B979E281291B3AC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:5b:01:a4:9e:53:3e:72:82:6e:6d:c3:6d:
34:d5:3e:53:c8:d1:62:63:6c:2d:01:61:8f:4e:0d:
2d:85:e1:8f:72:0d:ee:81:03:de:b1:30:15:96:75:
98:8d:4d:76:0d:fd:47:7e:41:1c:ce:6e:4e:43:c1:
4a:f8:99:f2:09:2c:20:d4:af:83:f6:66:c1:47:b9:
17:57:0c:58:be:69:aa:03:6e:09:3d:82:5c:c9:44:
5b:8c:9e:5e:d9:c1:2f:6c:83:e8:08:99:f8:3a:89:
83:f2:d2:1d:45:da:d4:f5:b3:92:15:ff:17:78:10:
70:d1:4c:c2:ce:97:4c:52:3b:54:6d:54:ff:08:97:
9f:c4:d0:38:13:0e:81:3a:3d:41:87:3f:90:68:7f:
ac:2b:65:f5:0f:87:a6:d6:7f:41:8e:05:b2:49:ef:
64:d9:4a:d0:4d:2d:f3:93:50:58:13:08:ab:fb:3a:
ba:5e:4c:e1:b2:4b:e5:0f:00:e6:f2:bc:1d:ae:34:
09:c9:a0:e4:ad:f4:1d:1c:b6:23:b5:6f:e7:a1:57:
20:65:c8:37:06:17:8d:28:d5:6b:7b:03:18:6a:be:
ce:ba:f5:d4:c6:e5:0d:be:ee:b8:f7:94:f0:bb:90:
a0:a1:68:dd:9b:eb:21:32:6a:f9:b9:51:5e:64:ad:
99:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E5:91:BB:5D:71:10:C0:E1:38:17:65:B9:79:E2:81:29:1B:3A:C7
X509v3 Authority Key Identifier:
keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/326131333a646638373a623030623a3a2f34382d3438203d3e203537383730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df87:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
8d:7a:85:75:17:b4:bc:8d:08:12:57:0b:8a:04:db:1b:2c:32:
1c:8d:27:f7:04:1f:22:c5:e7:70:b0:bb:a7:a6:17:e8:54:3d:
65:24:1e:e5:b6:6d:ef:48:1a:c6:ff:66:1b:9c:a6:94:63:83:
ee:af:99:e7:5c:09:48:c6:a0:42:7b:31:83:c9:36:c4:4d:07:
c7:ad:08:10:87:3d:09:a2:29:3e:71:ee:7d:44:60:28:ea:56:
4d:8d:69:d7:b3:6e:89:93:e3:a8:52:4b:de:0a:32:94:c0:5b:
4c:3b:05:2d:65:66:04:ba:7e:d2:79:98:a5:2a:ec:05:ad:88:
27:d4:c7:90:85:0c:c7:55:c7:2e:02:1e:6e:1f:ae:aa:4f:60:
1e:93:10:be:df:05:00:45:3a:a3:61:5f:b3:b1:6e:c8:90:3e:
84:41:45:c2:e1:8a:2c:54:42:15:cd:15:a4:8e:33:1f:cb:42:
32:61:09:82:c5:96:36:41:a8:41:74:56:ce:04:1c:77:f9:e3:
fc:2f:1f:af:03:9e:89:2f:b3:25:77:43:26:ba:5d:34:47:18:
63:cc:8f:14:d3:12:a6:e8:43:ed:34:b6:cd:07:ea:9a:d6:30:
fd:0c:09:03:34:20:87:e9:96:e7:08:2b:cc:85:b3:fb:99:27:
fd:65:2b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:39 2025 by rpki-client