Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830353a3a2f34382d3438203d3e203437323732.roa
File: 326130373a353463313a333830353a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier: DECPu/EdnaESaybEn/HBocG1GMZsQL5OQ1rimRvUS2U=
Subject key identifier: A7:F8:33:48:E9:BE:26:B9:29:66:E5:C2:F5:04:48:23:8F:E2:D8:60
Certificate issuer: /CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
Certificate serial: 63342DB15364E989CB8BF5583AA492308DA04D68
Authority key identifier: CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830353a3a2f34382d3438203d3e203437323732.roa
Signing time: Sun 24 Sep 2023 09:53:17 +0000
ROA not before: Sun 24 Sep 2023 09:48:17 +0000
ROA not after: Sun 22 Sep 2024 09:53:17 +0000
asID: 47272
IP address blocks: 2a07:54c1:3805::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:34:2d:b1:53:64:e9:89:cb:8b:f5:58:3a:a4:92:30:8d:a0:4d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
Validity
Not Before: Sep 24 09:48:17 2023 GMT
Not After : Sep 22 09:53:17 2024 GMT
Subject: CN=A7F83348E9BE26B92966E5C2F50448238FE2D860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:78:8f:54:1f:05:c0:12:97:51:5c:22:b0:
2e:37:45:f3:5d:f0:cb:9e:eb:13:90:bb:87:00:8b:
dd:f5:b6:ef:90:55:bd:11:ef:98:ab:c5:f2:ac:22:
db:a2:fc:51:6a:53:e0:38:96:d2:04:da:22:50:a4:
ba:a7:72:c9:da:f1:3f:0a:01:83:8f:7c:2b:61:9d:
95:b9:9a:6c:40:0f:56:2d:51:fd:5b:91:75:1a:a6:
06:33:f8:41:4b:11:1f:e1:ad:5d:ea:37:34:6e:6b:
a1:1c:0f:62:d5:62:6a:75:73:13:35:4f:9c:c9:61:
8b:8d:08:89:75:08:16:3e:dc:ea:77:a1:b4:28:29:
77:f8:ed:15:b6:bb:7e:72:22:93:0a:2f:b4:f3:50:
22:33:de:94:37:43:15:da:2a:df:b5:6f:4d:06:23:
02:8c:45:fa:e2:5c:a9:c7:04:d9:7a:11:ad:09:a0:
84:10:7a:aa:54:53:c8:c2:67:8f:f1:de:b8:a1:c5:
31:99:c6:c5:43:27:7b:64:e1:d7:78:1b:fb:b9:b2:
78:50:a4:1c:22:cb:2c:f5:e4:05:d1:3a:bd:b3:74:
0b:ff:fa:41:cd:60:63:9b:86:4f:b5:be:b5:51:45:
d7:f0:29:5d:5d:6b:af:ba:22:ec:4e:98:85:f4:20:
2e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F8:33:48:E9:BE:26:B9:29:66:E5:C2:F5:04:48:23:8F:E2:D8:60
X509v3 Authority Key Identifier:
keyid:CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830353a3a2f34382d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c1:3805::/48
Signature Algorithm: sha256WithRSAEncryption
16:ba:ba:da:30:50:67:0c:0e:81:af:ed:79:d9:c6:e4:8e:3a:
b2:4a:8e:91:b5:a6:dd:36:13:ee:de:13:f9:12:28:fc:64:6e:
96:9a:74:2b:76:2c:c7:75:5b:8f:7e:06:25:3c:2e:7f:fc:a4:
b3:a6:8b:eb:1d:79:af:ad:7a:06:6e:19:ad:3e:2d:a1:28:f1:
15:86:fc:17:0d:a0:79:0d:96:7e:6a:a7:c4:b7:1c:48:34:93:
07:0a:ba:46:05:01:dd:7d:55:52:64:b7:76:26:56:f6:b1:0d:
29:9c:dc:13:b4:e1:f8:98:fb:d5:80:b3:ed:db:22:19:dd:33:
e4:3b:59:9d:eb:2c:66:80:d3:2b:27:6d:6f:f2:00:53:06:e2:
2a:16:c5:d8:cd:23:42:1f:55:6c:97:11:30:f9:45:cb:1c:71:
cc:2c:79:6d:64:8e:e0:82:55:8d:06:99:a1:34:e2:86:cf:e7:
8d:8d:77:4f:8f:7c:1a:c1:0c:ce:27:ea:fe:52:5f:8c:f2:b4:
f4:0d:d8:12:ec:87:89:29:cd:3d:f2:8c:1c:22:d7:ad:f2:55:
4b:79:4e:34:63:b3:1f:e1:fd:4f:64:7f:a6:8d:b1:b7:b9:f6:
2f:4a:e5:39:ed:e9:49:1a:fd:b5:75:03:38:34:ea:3c:6e:63:
9e:4f:d9:dc
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUYzQtsVNk6YnLi/VYOqSSMI2gTWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VFNTBGODY1NDQyNkI1QTYwRUU4QzUyQTlBRTk1OEY4
RDc3Qjg0ODAeFw0yMzA5MjQwOTQ4MTdaFw0yNDA5MjIwOTUzMTdaMDMxMTAvBgNV
BAMTKEE3RjgzMzQ4RTlCRTI2QjkyOTY2RTVDMkY1MDQ0ODIzOEZFMkQ4NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxHiPVB8FwBKXUVwisC43RfNd
8Mue6xOQu4cAi931tu+QVb0R75irxfKsItui/FFqU+A4ltIE2iJQpLqncsna8T8K
AYOPfCthnZW5mmxAD1YtUf1bkXUapgYz+EFLER/hrV3qNzRua6EcD2LVYmp1cxM1
T5zJYYuNCIl1CBY+3Op3obQoKXf47RW2u35yIpMKL7TzUCIz3pQ3QxXaKt+1b00G
IwKMRfriXKnHBNl6Ea0JoIQQeqpUU8jCZ4/x3rihxTGZxsVDJ3tk4dd4G/u5snhQ
pBwiyyz15AXROr2zdAv/+kHNYGObhk+1vrVRRdfwKV1da6+6IuxOmIX0IC7BAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUp/gzSOm+JrkpZuXC9QRII4/i2GAwHwYDVR0j
BBgwFoAUzuUPhlRCa1pg7oxSqa6Vj413uEgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmM5MGY0ZjYtZjJjNC00ODgyLTkxY2YtOWI4ZjBiMzhk
N2RhLzEvQ0VFNTBGODY1NDQyNkI1QTYwRUU4QzUyQTlBRTk1OEY4RDc3Qjg0OC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk
YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9DRUU1MEY4NjU0NDI2QjVBNjBFRThDNTJB
OUFFOTU4RjhENzdCODQ4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9iYzkwZjRmNi1mMmM0LTQ4ODItOTFjZi05YjhmMGIzOGQ3ZGEvMS8zMjYxMzAz
NzNhMzUzNDYzMzEzYTMzMzgzMDM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQz
NzMyMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACoHVME4BTANBgkqhkiG9w0BAQsFAAOCAQEAFrq6
2jBQZwwOga/tednG5I46skqOkbWm3TYT7t4T+RIo/GRulpp0K3Ysx3Vbj34GJTwu
f/yks6aL6x15r616Bm4ZrT4toSjxFYb8Fw2geQ2WfmqnxLccSDSTBwq6RgUB3X1V
UmS3diZW9rENKZzcE7Th+Jj71YCz7dsiGd0z5DtZnessZoDTKydtb/IAUwbiKhbF
2M0jQh9VbJcRMPlFyxxxzCx5bWSO4IJVjQaZoTTihs/njY13T498GsEMzifq/lJf
jPK09A3YEuyHiSnNPfKMHCLXrfJVS3lONGOzH+H9T2R/po2xt7n2L0rlOe3pSRr9
tXUDODTqPG5jnk/Z3A==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:38:35 2025 by rpki-client