Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/326130373a323438373a3a2f33322d3332203d3e20323135383238.roa
File: 326130373a323438373a3a2f33322d3332203d3e20323135383238.roa (raw, json)
Hash identifier: u7xfU8N6OEMUWrGlScdQvVeRu6Mz9Ky2b2nV9fyqyfs=
Subject key identifier: DA:0E:15:41:6C:2A:FF:2A:1F:9A:7E:4F:28:DF:80:FC:35:73:6F:AA
Certificate issuer: /CN=18fec82431047ecdac19db3bd93c1c3fe79197d3
Certificate serial: 402BB179B0882424492E001A49906577BB2C95D9
Authority key identifier: 18:FE:C8:24:31:04:7E:CD:AC:19:DB:3B:D9:3C:1C:3F:E7:91:97:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GP7IJDEEfs2sGds72TwcP-eRl9M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/326130373a323438373a3a2f33322d3332203d3e20323135383238.roa
Signing time: Wed 06 Mar 2024 21:39:17 +0000
ROA not before: Wed 06 Mar 2024 21:34:17 +0000
ROA not after: Wed 05 Mar 2025 21:39:17 +0000
asID: 215828
IP address blocks: 2a07:2487::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:2b:b1:79:b0:88:24:24:49:2e:00:1a:49:90:65:77:bb:2c:95:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18fec82431047ecdac19db3bd93c1c3fe79197d3
Validity
Not Before: Mar 6 21:34:17 2024 GMT
Not After : Mar 5 21:39:17 2025 GMT
Subject: CN=DA0E15416C2AFF2A1F9A7E4F28DF80FC35736FAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:00:94:74:5d:50:13:5b:c0:56:d1:e8:4e:64:
d5:4d:5f:41:01:7f:bb:c9:13:96:7a:45:41:be:d0:
19:dc:a2:29:a5:1a:e6:f6:fa:c9:c7:11:7c:e9:e7:
07:8c:96:02:51:c1:74:ca:7c:94:df:1b:5b:51:83:
89:f0:e8:db:17:d3:c6:4b:e0:77:3d:a1:33:9b:19:
3a:3e:db:80:30:6e:af:19:eb:a5:64:58:c0:ca:68:
23:1b:c0:f7:f1:be:ad:5a:77:7f:fb:16:ca:9c:2b:
23:72:86:3b:a0:80:58:e2:49:d3:57:3d:80:cf:14:
f0:49:fd:dd:ed:ec:a7:38:21:a1:d5:e5:19:bb:5b:
c4:3d:b3:ea:1b:d8:45:08:0d:40:1b:1e:08:77:b1:
ec:a9:5c:1f:2f:af:e1:8d:8f:a6:6d:f7:c4:86:9e:
91:66:b0:1d:cd:89:ac:35:4d:08:2d:48:16:76:03:
63:fe:32:d2:14:93:c5:76:47:7f:ae:0c:94:20:87:
10:56:f7:4c:48:a5:79:03:03:2b:ba:64:4c:62:b2:
e2:02:69:8c:c6:66:92:51:69:b4:04:3b:b1:2b:96:
c8:7a:18:44:97:ea:3e:27:5b:1f:b1:9a:2b:16:25:
0f:03:c2:85:44:54:69:bd:bb:ea:af:e0:21:84:14:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0E:15:41:6C:2A:FF:2A:1F:9A:7E:4F:28:DF:80:FC:35:73:6F:AA
X509v3 Authority Key Identifier:
keyid:18:FE:C8:24:31:04:7E:CD:AC:19:DB:3B:D9:3C:1C:3F:E7:91:97:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GP7IJDEEfs2sGds72TwcP-eRl9M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/326130373a323438373a3a2f33322d3332203d3e20323135383238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2487::/32
Signature Algorithm: sha256WithRSAEncryption
07:02:70:35:2f:31:ad:9e:a0:4d:34:7e:c4:67:02:ce:98:ac:
b0:a0:80:dc:c4:57:9a:f1:34:57:36:52:5e:d5:13:41:67:28:
be:7f:2f:f8:3a:55:0f:67:44:89:22:05:fe:fa:64:e0:d2:5a:
3b:5a:2b:ca:95:26:86:10:4e:52:5f:8e:06:fe:66:32:a0:5e:
8c:3d:00:aa:7a:58:16:ad:6a:af:8f:d5:6a:a4:07:1b:ab:fd:
21:df:74:55:10:a7:ef:78:ca:72:74:c1:95:66:82:31:2e:5c:
e8:60:64:72:97:39:73:af:7d:bb:9a:53:10:86:0f:9d:bb:54:
a7:9d:3b:4d:5e:37:de:39:5e:97:b7:75:d2:c1:19:e5:c4:c0:
f2:31:f4:80:de:f0:64:dd:2a:ed:9e:8a:b8:6e:5d:e7:ad:11:
a8:d6:2a:da:f4:1a:ef:43:55:d0:78:9a:b8:40:e9:24:5d:86:
40:22:39:25:11:52:cd:6e:af:47:51:96:6d:14:ed:b9:3e:48:
07:50:cf:66:7d:07:f8:06:95:e6:5d:6e:c5:58:37:57:01:67:
fb:2c:9a:f8:92:f6:e4:bf:06:26:8d:30:46:76:2c:1e:64:64:
42:c0:9f:4b:bf:74:96:ed:91:a1:2c:be:d7:5f:bc:bc:66:b4:
82:5f:f1:60
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUQCuxebCIJCRJLgAaSZBld7ssldkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThmZWM4MjQzMTA0N2VjZGFjMTlkYjNiZDkzYzFjM2Zl
NzkxOTdkMzAeFw0yNDAzMDYyMTM0MTdaFw0yNTAzMDUyMTM5MTdaMDMxMTAvBgNV
BAMTKERBMEUxNTQxNkMyQUZGMkExRjlBN0U0RjI4REY4MEZDMzU3MzZGQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqAJR0XVATW8BW0ehOZNVNX0EB
f7vJE5Z6RUG+0BncoimlGub2+snHEXzp5weMlgJRwXTKfJTfG1tRg4nw6NsX08ZL
4Hc9oTObGTo+24Awbq8Z66VkWMDKaCMbwPfxvq1ad3/7FsqcKyNyhjuggFjiSdNX
PYDPFPBJ/d3t7Kc4IaHV5Rm7W8Q9s+ob2EUIDUAbHgh3seypXB8vr+GNj6Zt98SG
npFmsB3Niaw1TQgtSBZ2A2P+MtIUk8V2R3+uDJQghxBW90xIpXkDAyu6ZExisuIC
aYzGZpJRabQEO7Erlsh6GESX6j4nWx+xmisWJQ8DwoVEVGm9u+qv4CGEFMfxAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQU2g4VQWwq/yofmn5PKN+A/DVzb6owHwYDVR0j
BBgwFoAUGP7IJDEEfs2sGds72TwcP+eRl9MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkxYzgyNjktNDUxZS00ZDBkLTkzZTQtZDExMWVjOGRk
Y2VlLzAvMThGRUM4MjQzMTA0N0VDREFDMTlEQjNCRDkzQzFDM0ZFNzkxOTdEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0dQN0lKREVFZnMyc0dkczcyVHdjUC1l
Umw5TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTkxYzgyNjkt
NDUxZS00ZDBkLTkzZTQtZDExMWVjOGRkY2VlLzAvMzI2MTMwMzczYTMyMzQzODM3
M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzMTM1MzgzMjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA
KgckhzANBgkqhkiG9w0BAQsFAAOCAQEABwJwNS8xrZ6gTTR+xGcCzpissKCA3MRX
mvE0VzZSXtUTQWcovn8v+DpVD2dEiSIF/vpk4NJaO1orypUmhhBOUl+OBv5mMqBe
jD0AqnpYFq1qr4/VaqQHG6v9Id90VRCn73jKcnTBlWaCMS5c6GBkcpc5c699u5pT
EIYPnbtUp507TV433jlel7d10sEZ5cTA8jH0gN7wZN0q7Z6KuG5d560RqNYq2vQa
70NV0HiauEDpJF2GQCI5JRFSzW6vR1GWbRTtuT5IB1DPZn0H+AaV5l1uxVg3VwFn
+yya+JL25L8GJo0wRnYsHmRkQsCfS790lu2RoSy+11+8vGa0gl/xYA==
-----END CERTIFICATE-----
Generated at Thu Mar 7 01:10:35 2024 by rpki-client on console-ams.rpki-client.org