Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/326131343a373538313a396662303a3a2f34342d3434203d3e20323133343330.roa
File: 326131343a373538313a396662303a3a2f34342d3434203d3e20323133343330.roa (raw, json)
Hash identifier: RNeN2RyvWrzORyjJcOdqaCjXTGyChhFIgS7g0DeHkHY=
Subject key identifier: 14:3E:8C:D0:5E:C1:03:8C:B4:90:4E:4A:12:F7:BC:CD:8C:DE:E4:0C
Certificate issuer: /CN=BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6
Certificate serial: 2066BAA5E9F5A2627E696A215015D4676B35B8D3
Authority key identifier: BD:8F:16:9B:24:F2:8F:F7:FF:47:FC:60:2D:29:0C:BA:7B:DA:AB:F6
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/326131343a373538313a396662303a3a2f34342d3434203d3e20323133343330.roa
Signing time: Fri 14 Feb 2025 03:39:36 +0000
ROA not before: Fri 14 Feb 2025 03:34:36 +0000
ROA not after: Fri 13 Feb 2026 03:39:36 +0000
asID: 213430
IP address blocks: 2a14:7581:9fb0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:66:ba:a5:e9:f5:a2:62:7e:69:6a:21:50:15:d4:67:6b:35:b8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6
Validity
Not Before: Feb 14 03:34:36 2025 GMT
Not After : Feb 13 03:39:36 2026 GMT
Subject: CN=143E8CD05EC1038CB4904E4A12F7BCCD8CDEE40C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:02:23:63:82:3f:22:59:fb:c6:5e:91:d0:
a4:69:4c:13:7f:35:4b:3d:08:13:2b:22:7b:27:51:
1a:b4:e2:80:9c:90:69:02:52:4b:15:de:f7:4e:80:
07:cc:ff:c5:60:4e:12:c9:0e:62:4e:d2:3a:00:03:
d7:c0:43:3b:0d:c4:6b:dc:a8:99:5c:36:ab:ec:69:
ad:97:cb:de:75:1d:5e:0a:46:0e:16:37:dc:27:8d:
50:7e:21:ec:55:de:d3:22:f4:64:3a:2a:cc:cb:00:
88:50:48:f0:c1:16:a2:f1:78:be:45:1e:64:e0:ed:
7f:c5:12:0d:a4:f7:45:f7:80:2f:53:d7:7b:6b:3d:
62:c3:f0:4b:f3:b8:4e:1c:09:5e:bd:2a:88:aa:8e:
6e:8b:a7:b4:cd:0e:d1:ef:70:99:54:54:d6:c3:90:
5f:4c:e2:15:c3:44:a2:c9:49:45:c9:1a:cc:44:6b:
9a:f3:87:ac:3d:49:38:14:b5:37:0e:d1:eb:d4:f0:
94:93:3e:dc:c4:28:9f:8f:78:ef:d4:d1:7f:c9:dc:
e0:ab:08:b1:8f:a1:1a:59:36:5c:9e:14:ee:b2:dc:
1e:dc:04:45:16:cd:21:e0:1e:dc:b5:5a:cc:51:71:
c3:54:ab:d6:97:44:aa:d0:c1:05:85:e6:38:7e:d9:
42:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3E:8C:D0:5E:C1:03:8C:B4:90:4E:4A:12:F7:BC:CD:8C:DE:E4:0C
X509v3 Authority Key Identifier:
keyid:BD:8F:16:9B:24:F2:8F:F7:FF:47:FC:60:2D:29:0C:BA:7B:DA:AB:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BD8F169B24F28FF7FF47FC602D290CBA7BDAABF6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/1/326131343a373538313a396662303a3a2f34342d3434203d3e20323133343330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9fb0::/44
Signature Algorithm: sha256WithRSAEncryption
69:70:23:40:2f:6a:b1:10:33:fa:4a:0a:b6:6a:d5:86:6f:de:
87:db:26:3e:6a:5c:f4:9d:b4:93:98:12:72:42:f7:0d:ab:ef:
d8:49:b2:67:2a:1b:ce:b4:9c:32:bf:c2:3c:22:6d:9c:91:ad:
bb:8f:9a:91:0c:5f:6c:8b:50:0b:d3:a0:79:53:2e:89:7b:b8:
0f:42:9c:c3:31:97:f7:e5:76:05:5a:69:05:64:56:2f:80:d8:
84:9c:cf:ce:db:06:10:61:cc:4a:9a:c6:3b:50:8e:70:99:8a:
54:9a:00:a4:6a:87:0a:ad:c8:6f:f7:eb:0c:39:13:e7:32:31:
2d:d7:ab:88:c1:b6:36:bc:ef:a4:75:e3:aa:1d:6e:91:89:2c:
c6:02:4e:e8:ac:59:01:a5:b4:04:75:43:9a:4f:62:56:68:00:
2e:d2:d5:f3:f4:c8:eb:45:2b:18:24:56:48:65:8b:b8:a9:1e:
b3:2a:64:7f:6a:87:35:ab:6a:48:89:84:d4:a9:01:c3:a9:dd:
8d:d0:8e:3a:48:6b:24:19:61:26:bf:29:f0:d0:18:68:9e:15:
39:a9:a6:df:b5:dd:df:12:8c:02:9f:bf:28:2a:89:71:8d:6b:
c0:33:13:93:ff:10:ff:cd:90:99:77:c4:27:bb:e5:60:05:c6:
60:b9:4d:b7
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUIGa6pen1omJ+aWohUBXUZ2s1uNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ4RjE2OUIyNEYyOEZGN0ZGNDdGQzYwMkQyOTBDQkE3
QkRBQUJGNjAeFw0yNTAyMTQwMzM0MzZaFw0yNjAyMTMwMzM5MzZaMDMxMTAvBgNV
BAMTKDE0M0U4Q0QwNUVDMTAzOENCNDkwNEU0QTEyRjdCQ0NEOENERUU0MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmVAIjY4I/Iln7xl6R0KRpTBN/
NUs9CBMrInsnURq04oCckGkCUksV3vdOgAfM/8VgThLJDmJO0joAA9fAQzsNxGvc
qJlcNqvsaa2Xy951HV4KRg4WN9wnjVB+IexV3tMi9GQ6KszLAIhQSPDBFqLxeL5F
HmTg7X/FEg2k90X3gC9T13trPWLD8EvzuE4cCV69Koiqjm6Lp7TNDtHvcJlUVNbD
kF9M4hXDRKLJSUXJGsxEa5rzh6w9STgUtTcO0evU8JSTPtzEKJ+PeO/U0X/J3OCr
CLGPoRpZNlyeFO6y3B7cBEUWzSHgHty1WsxRccNUq9aXRKrQwQWF5jh+2UJtAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUFD6M0F7BA4y0kE5KEve8zYze5AwwHwYDVR0j
BBgwFoAUvY8WmyTyj/f/R/xgLSkMunvaq/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTdhYmE5ZTktZWVjOC00OTViLTllMjAtZDZiM2NjZWJk
ZTQ1LzEvQkQ4RjE2OUIyNEYyOEZGN0ZGNDdGQzYwMkQyOTBDQkE3QkRBQUJGNi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CRDhGMTY5QjI0RjI4RkY3RkY0N0ZDNjAy
RDI5MENCQTdCREFBQkY2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS85N2FiYTllOS1lZWM4LTQ5NWItOWUyMC1kNmIzY2NlYmRlNDUvMS8zMjYxMzEz
NDNhMzczNTM4MzEzYTM5NjY2MjMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz
MTMzMzQzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gZ+wMA0GCSqGSIb3DQEBCwUAA4IBAQBp
cCNAL2qxEDP6Sgq2atWGb96H2yY+alz0nbSTmBJyQvcNq+/YSbJnKhvOtJwyv8I8
Im2cka27j5qRDF9si1AL06B5Uy6Je7gPQpzDMZf35XYFWmkFZFYvgNiEnM/O2wYQ
YcxKmsY7UI5wmYpUmgCkaocKrchv9+sMORPnMjEt16uIwbY2vO+kdeOqHW6RiSzG
Ak7orFkBpbQEdUOaT2JWaAAu0tXz9MjrRSsYJFZIZYu4qR6zKmR/aoc1q2pIiYTU
qQHDqd2N0I46SGskGWEmvynw0BhonhU5qabftd3fEowCn78oKolxjWvAMxOT/xD/
zZCZd8Qnu+VgBcZguU23
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:25 2025 by rpki-client