Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/5/326130373a323438363a3a2f34382d3438203d3e20323135383238.roa
File: 326130373a323438363a3a2f34382d3438203d3e20323135383238.roa (raw, json)
Hash identifier: AtEXC7Xj3VFBrg8EM4kvYh4q19lVhremPLr8T3SoB2k=
Subject key identifier: 53:95:70:71:B1:8F:EE:31:75:25:38:34:90:5B:13:9A:A7:99:38:B4
Certificate issuer: /CN=28FA507C2092BDD1BBD1B0816C9D71CD4681096C
Certificate serial: 48993F1189BDE3D97B3EF02B55C51C97E85FD6E1
Authority key identifier: 28:FA:50:7C:20:92:BD:D1:BB:D1:B0:81:6C:9D:71:CD:46:81:09:6C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/28FA507C2092BDD1BBD1B0816C9D71CD4681096C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/5/326130373a323438363a3a2f34382d3438203d3e20323135383238.roa
Signing time: Sun 14 Apr 2024 18:24:19 +0000
ROA not before: Sun 14 Apr 2024 18:19:19 +0000
ROA not after: Sun 13 Apr 2025 18:24:19 +0000
asID: 215828
IP address blocks: 2a07:2486::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:99:3f:11:89:bd:e3:d9:7b:3e:f0:2b:55:c5:1c:97:e8:5f:d6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28FA507C2092BDD1BBD1B0816C9D71CD4681096C
Validity
Not Before: Apr 14 18:19:19 2024 GMT
Not After : Apr 13 18:24:19 2025 GMT
Subject: CN=53957071B18FEE3175253834905B139AA79938B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:f6:75:80:c3:df:b6:aa:ec:09:ca:54:76:
27:25:aa:5c:1c:c9:82:e7:31:41:09:8b:e1:d5:c3:
ae:7b:9e:fb:d8:74:fb:59:3c:2e:87:37:ba:23:51:
60:e2:3c:72:b7:7d:2f:28:ec:68:28:15:09:7a:9b:
9c:a6:53:41:ac:bb:f7:c1:ac:b6:ca:0b:88:8d:c8:
92:b0:94:8d:c3:2e:53:ee:26:bd:2f:58:c1:71:c8:
fa:e2:f0:1c:29:71:6e:06:f4:51:70:a4:56:a4:68:
ec:06:2e:d6:3c:88:3a:26:0f:50:d1:8a:49:54:ec:
09:e3:53:77:84:28:d1:f6:08:41:04:b3:d2:de:64:
bb:98:ad:e0:35:7c:d2:25:9e:26:88:ab:ab:6e:d7:
5e:e8:03:38:24:6f:12:a4:9c:a3:cb:dc:0f:82:12:
75:9f:30:6a:9f:77:6b:96:fd:a1:5e:b8:28:8d:3e:
4b:94:4b:6f:30:73:8f:6e:39:08:8e:86:b1:20:79:
14:ff:1f:16:be:74:d6:a4:2c:f3:ad:b3:f8:aa:34:
83:f1:ee:34:be:85:70:5f:58:46:53:fc:ea:ba:4f:
3f:1c:85:5d:86:f5:43:0e:7b:93:61:35:60:bb:00:
83:0a:ec:68:80:6d:bc:75:66:e0:57:a1:15:b4:d4:
8b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:95:70:71:B1:8F:EE:31:75:25:38:34:90:5B:13:9A:A7:99:38:B4
X509v3 Authority Key Identifier:
keyid:28:FA:50:7C:20:92:BD:D1:BB:D1:B0:81:6C:9D:71:CD:46:81:09:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/5/28FA507C2092BDD1BBD1B0816C9D71CD4681096C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/28FA507C2092BDD1BBD1B0816C9D71CD4681096C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/5/326130373a323438363a3a2f34382d3438203d3e20323135383238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486::/48
Signature Algorithm: sha256WithRSAEncryption
1c:ed:29:59:7d:b8:30:7c:ad:fe:1d:9a:c3:93:3a:69:fe:c0:
e7:5c:16:7e:26:0d:73:4a:53:89:7d:21:6c:91:0e:16:e1:05:
a0:43:26:16:34:60:dc:d1:7c:c5:38:42:6a:b8:5f:04:3a:12:
9d:c8:de:63:6d:9d:ef:7f:b2:fc:c8:58:e1:b6:47:a3:fd:90:
95:7a:b7:d4:00:fa:c3:4d:3a:37:b1:88:2a:0d:c0:db:f5:c9:
7b:2a:83:be:a8:71:93:bf:fd:c4:35:95:5b:c3:3a:7c:17:7f:
a7:a9:75:ef:45:9c:39:69:6c:14:6f:66:c8:5d:c1:6c:fe:02:
04:5f:3b:08:e8:13:12:33:ad:14:ed:13:b5:41:88:61:60:c4:
1d:bd:77:a6:a1:4e:e4:e3:72:f9:85:c2:27:3a:84:59:7a:e9:
4e:da:15:aa:98:38:a5:db:5f:a8:c7:83:5b:45:48:77:97:b5:
af:a1:7e:bc:f8:79:c5:00:a7:57:ce:65:96:ef:32:6f:ed:7d:
71:de:02:09:46:31:f5:61:1b:fd:2b:be:9c:e3:ad:0a:5a:ba:
f3:57:a8:a6:cd:b2:f3:0c:a0:6d:e8:d3:51:86:7d:cc:a6:3c:
af:93:f0:54:5f:e7:6e:fa:45:fe:5c:90:be:9c:97:47:bc:43:
6f:2a:ae:9f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIUSJk/EYm949l7PvArVcUcl+hf1uEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhGQTUwN0MyMDkyQkREMUJCRDFCMDgxNkM5RDcxQ0Q0
NjgxMDk2QzAeFw0yNDA0MTQxODE5MTlaFw0yNTA0MTMxODI0MTlaMDMxMTAvBgNV
BAMTKDUzOTU3MDcxQjE4RkVFMzE3NTI1MzgzNDkwNUIxMzlBQTc5OTM4QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSvZ1gMPftqrsCcpUdiclqlwc
yYLnMUEJi+HVw657nvvYdPtZPC6HN7ojUWDiPHK3fS8o7GgoFQl6m5ymU0Gsu/fB
rLbKC4iNyJKwlI3DLlPuJr0vWMFxyPri8BwpcW4G9FFwpFakaOwGLtY8iDomD1DR
iklU7AnjU3eEKNH2CEEEs9LeZLuYreA1fNIlniaIq6tu117oAzgkbxKknKPL3A+C
EnWfMGqfd2uW/aFeuCiNPkuUS28wc49uOQiOhrEgeRT/Hxa+dNakLPOts/iqNIPx
7jS+hXBfWEZT/Oq6Tz8chV2G9UMOe5NhNWC7AIMK7GiAbbx1ZuBXoRW01IstAgMB
AAGjggJ7MIICdzAdBgNVHQ4EFgQUU5VwcbGP7jF1JTg0kFsTmqeZOLQwHwYDVR0j
BBgwFoAUKPpQfCCSvdG70bCBbJ1xzUaBCWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll
OGJiLzUvMjhGQTUwN0MyMDkyQkREMUJCRDFCMDgxNkM5RDcxQ0Q0NjgxMDk2Qy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMWE3OTdmOS0zYzEwLTQ1
MzYtYWE2NC0wOWNhMmQ5NTQ1YzgvMC8yOEZBNTA3QzIwOTJCREQxQkJEMUIwODE2
QzlENzFDRDQ2ODEwOTZDLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUF
BzALhoGNcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS85YzBlZDA0Ni1mYTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvNS8zMjYxMzAz
NzNhMzIzNDM4MzYzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzODMyMzgu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqBySGAAAwDQYJKoZIhvcNAQELBQADggEBABztKVl9uDB8rf4d
msOTOmn+wOdcFn4mDXNKU4l9IWyRDhbhBaBDJhY0YNzRfMU4Qmq4XwQ6Ep3I3mNt
ne9/svzIWOG2R6P9kJV6t9QA+sNNOjexiCoNwNv1yXsqg76ocZO//cQ1lVvDOnwX
f6epde9FnDlpbBRvZshdwWz+AgRfOwjoExIzrRTtE7VBiGFgxB29d6ahTuTjcvmF
wic6hFl66U7aFaqYOKXbX6jHg1tFSHeXta+hfrz4ecUAp1fOZZbvMm/tfXHeAglG
MfVhG/0rvpzjrQpauvNXqKbNsvMMoG3o01GGfcymPK+T8FRf5276Rf5ckL6cl0e8
Q28qrp8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:07 2025 by rpki-client