Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/326130373a323438363a6666303a3a2f34342d3434203d3e20323136333930.roa
File: 326130373a323438363a6666303a3a2f34342d3434203d3e20323136333930.roa (raw, json)
Hash identifier: SwfFJcx0OoI8pri4+dUTHUn9mK0eTTFgmDjxTZRL2+k=
Subject key identifier: 94:9A:02:15:63:98:42:12:7D:C0:CE:09:72:C7:94:74:A1:49:9A:84
Certificate issuer: /CN=18fec82431047ecdac19db3bd93c1c3fe79197d3
Certificate serial: 3328CEBF3D88B08C2C332D1296E32C9F1BBD649C
Authority key identifier: 18:FE:C8:24:31:04:7E:CD:AC:19:DB:3B:D9:3C:1C:3F:E7:91:97:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GP7IJDEEfs2sGds72TwcP-eRl9M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/326130373a323438363a6666303a3a2f34342d3434203d3e20323136333930.roa
Signing time: Mon 04 Mar 2024 10:25:06 +0000
ROA not before: Mon 04 Mar 2024 10:20:06 +0000
ROA not after: Mon 03 Mar 2025 10:25:06 +0000
asID: 216390
IP address blocks: 2a07:2486:ff0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:28:ce:bf:3d:88:b0:8c:2c:33:2d:12:96:e3:2c:9f:1b:bd:64:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18fec82431047ecdac19db3bd93c1c3fe79197d3
Validity
Not Before: Mar 4 10:20:06 2024 GMT
Not After : Mar 3 10:25:06 2025 GMT
Subject: CN=949A0215639842127DC0CE0972C79474A1499A84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:88:cd:61:f9:c4:86:6f:0d:6a:67:7c:71:
1f:ac:ee:9b:12:58:f9:28:7e:ab:ed:05:59:14:d4:
5b:4a:5f:eb:30:d2:a3:d4:a6:a9:3e:96:1a:c4:c6:
97:2d:16:8e:8b:1b:de:d0:f1:28:45:f4:6e:c3:dd:
46:a3:d7:6c:2a:85:5c:d4:59:a3:36:1b:70:d9:6d:
bd:1e:65:33:7a:60:67:c2:9c:35:91:6f:f6:e2:87:
5b:50:d4:5f:0f:9d:a4:d0:71:8f:14:c8:ee:3b:4e:
ae:97:52:d4:5e:eb:8a:de:15:80:bb:ed:9a:6c:a3:
59:e7:5f:52:f2:e7:ec:dd:bf:b1:4e:ec:cf:39:ab:
7e:94:1b:c1:ca:03:05:1d:ae:38:51:b8:86:58:d4:
e0:a1:00:8c:24:f3:37:01:7c:fb:f8:4a:03:0d:58:
70:ca:12:91:4f:fc:34:2d:db:3e:8d:90:bd:22:14:
7e:db:19:44:20:c0:59:62:a2:47:0c:02:18:9f:fe:
64:69:b7:dc:d0:0d:a1:98:62:3f:f7:74:35:a2:27:
fd:07:ad:b0:b4:af:2d:a5:d5:d7:39:af:6b:2f:61:
7c:24:40:9b:13:dc:38:f1:2d:77:84:22:e9:e6:bc:
4b:e4:a1:6a:ef:5c:3b:a8:7f:13:a1:a4:f5:87:95:
58:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9A:02:15:63:98:42:12:7D:C0:CE:09:72:C7:94:74:A1:49:9A:84
X509v3 Authority Key Identifier:
keyid:18:FE:C8:24:31:04:7E:CD:AC:19:DB:3B:D9:3C:1C:3F:E7:91:97:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GP7IJDEEfs2sGds72TwcP-eRl9M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/326130373a323438363a6666303a3a2f34342d3434203d3e20323136333930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:ff0::/44
Signature Algorithm: sha256WithRSAEncryption
09:22:69:db:a5:dc:d5:3c:3f:2d:e0:f9:13:f4:26:a5:26:39:
b8:c5:4c:74:31:52:d7:87:75:ae:35:e3:80:35:b7:d0:3d:c0:
5c:f4:52:72:8b:c5:0e:bc:cd:b5:de:67:04:f2:f7:a1:94:8b:
dd:44:5b:0a:63:86:7e:24:65:ce:4d:d9:a3:43:61:62:0d:64:
44:33:f0:0b:c1:79:75:1e:e9:69:c9:86:ef:89:22:cb:4d:c8:
a5:d5:98:96:ad:e9:bd:0b:f0:b7:7e:8d:be:80:93:16:bd:bb:
af:e2:23:8d:e7:c9:3a:fe:24:8f:24:7c:a4:51:88:be:28:7f:
8c:2a:af:95:c8:89:27:24:11:0b:2d:df:92:cc:d8:6a:32:f8:
c9:b0:47:91:d5:b6:91:27:e5:1f:d6:64:4b:9e:f0:a2:29:4c:
be:39:61:2a:94:6b:e6:37:be:0b:21:cd:9d:e3:cf:a0:53:66:
95:bc:cd:8a:ad:e6:3d:bb:f2:97:d4:41:11:18:c5:b0:41:72:
5c:ef:78:71:07:fd:6b:11:10:0a:e9:fe:20:1c:bd:bf:5c:45:
1c:2f:fe:d6:36:f9:ae:9a:34:23:13:79:5a:48:e7:f5:15:f2:
4e:1a:1c:f8:ba:d7:09:6d:67:95:65:41:57:2f:cc:39:ae:5a:
09:15:57:ea
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUMyjOvz2IsIwsMy0SluMsnxu9ZJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThmZWM4MjQzMTA0N2VjZGFjMTlkYjNiZDkzYzFjM2Zl
NzkxOTdkMzAeFw0yNDAzMDQxMDIwMDZaFw0yNTAzMDMxMDI1MDZaMDMxMTAvBgNV
BAMTKDk0OUEwMjE1NjM5ODQyMTI3REMwQ0UwOTcyQzc5NDc0QTE0OTlBODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClLIjNYfnEhm8Namd8cR+s7psS
WPkofqvtBVkU1FtKX+sw0qPUpqk+lhrExpctFo6LG97Q8ShF9G7D3Uaj12wqhVzU
WaM2G3DZbb0eZTN6YGfCnDWRb/bih1tQ1F8PnaTQcY8UyO47Tq6XUtRe64reFYC7
7Zpso1nnX1Ly5+zdv7FO7M85q36UG8HKAwUdrjhRuIZY1OChAIwk8zcBfPv4SgMN
WHDKEpFP/DQt2z6NkL0iFH7bGUQgwFliokcMAhif/mRpt9zQDaGYYj/3dDWiJ/0H
rbC0ry2l1dc5r2svYXwkQJsT3DjxLXeEIunmvEvkoWrvXDuofxOhpPWHlVg3AgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUlJoCFWOYQhJ9wM4JcseUdKFJmoQwHwYDVR0j
BBgwFoAUGP7IJDEEfs2sGds72TwcP+eRl9MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkxYzgyNjktNDUxZS00ZDBkLTkzZTQtZDExMWVjOGRk
Y2VlLzAvMThGRUM4MjQzMTA0N0VDREFDMTlEQjNCRDkzQzFDM0ZFNzkxOTdEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0dQN0lKREVFZnMyc0dkczcyVHdjUC1l
Umw5TS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTkxYzgyNjkt
NDUxZS00ZDBkLTkzZTQtZDExMWVjOGRkY2VlLzAvMzI2MTMwMzczYTMyMzQzODM2
M2E2NjY2MzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMjMxMzYzMzM5MzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwQqBySGD/AwDQYJKoZIhvcNAQELBQADggEBAAkiadul3NU8Py3g+RP0
JqUmObjFTHQxUteHda4144A1t9A9wFz0UnKLxQ68zbXeZwTy96GUi91EWwpjhn4k
Zc5N2aNDYWINZEQz8AvBeXUe6WnJhu+JIstNyKXVmJat6b0L8Ld+jb6Akxa9u6/i
I43nyTr+JI8kfKRRiL4of4wqr5XIiSckEQst35LM2Goy+MmwR5HVtpEn5R/WZEue
8KIpTL45YSqUa+Y3vgshzZ3jz6BTZpW8zYqt5j278pfUQREYxbBBclzveHEH/WsR
EArp/iAcvb9cRRwv/tY2+a6aNCMTeVpI5/UV8k4aHPi61wltZ5VlQVcvzDmuWgkV
V+o=
-----END CERTIFICATE-----
Generated at Thu Mar 7 01:10:35 2024 by rpki-client on console-ams.rpki-client.org