Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6532303a3a2f34342d3438203d3e20323032313937.roa
File: 326130373a323438363a6532303a3a2f34342d3438203d3e20323032313937.roa (raw, json)
Hash identifier: tYFClJueM1BRqjtIlXzQzGPNqPXCnR4iSYlzB0y4pTM=
Subject key identifier: 22:33:5B:F9:57:45:73:E3:A1:74:68:7A:58:0B:26:84:D3:4D:04:EE
Certificate issuer: /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial: 45790714D2D0328A8364E6ED0A5B9013E6F6F794
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6532303a3a2f34342d3438203d3e20323032313937.roa
Signing time: Wed 10 Apr 2024 23:00:06 +0000
ROA not before: Wed 10 Apr 2024 22:55:06 +0000
ROA not after: Wed 09 Apr 2025 23:00:06 +0000
asID: 202197
IP address blocks: 2a07:2486:e20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:79:07:14:d2:d0:32:8a:83:64:e6:ed:0a:5b:90:13:e6:f6:f7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Validity
Not Before: Apr 10 22:55:06 2024 GMT
Not After : Apr 9 23:00:06 2025 GMT
Subject: CN=22335BF9574573E3A174687A580B2684D34D04EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:19:8c:d6:ca:05:f7:fb:70:23:d1:2f:3d:
1f:04:59:ed:a8:b3:6d:3e:c5:6c:9c:72:56:6f:26:
f3:a4:f0:fa:4c:f1:90:0d:db:e4:c0:b1:2a:fb:b2:
04:78:b9:53:4a:7c:bf:fd:08:d4:f5:65:b6:3a:1f:
65:b7:2b:0f:74:61:7d:e4:b0:b9:35:82:69:76:e9:
51:46:8d:a0:2d:ff:4c:3a:76:65:b7:92:31:7a:4d:
8a:b0:7d:64:b6:a7:3c:13:5a:19:20:99:03:5a:eb:
cd:64:c6:d0:ad:a0:c4:1e:82:ba:59:24:66:ac:2d:
7c:46:ea:b0:8f:ac:0c:1d:4a:a2:06:a9:f1:28:2c:
fe:98:d5:56:3f:fc:e5:b6:25:db:12:46:4e:3c:fd:
49:a9:19:87:03:b8:08:8a:38:0d:82:9b:e8:ee:f5:
c7:8a:56:39:33:9c:c8:88:ff:d7:5a:52:ca:d2:9e:
e2:bc:bf:d1:e7:8c:c6:8b:e8:a3:c2:d3:3e:42:c4:
87:77:38:4c:b0:92:1b:4c:01:97:8e:66:ce:1f:31:
08:df:7d:2b:2a:5c:7b:34:97:17:4b:df:7e:05:20:
7d:0c:b7:55:73:20:04:83:d9:d4:b6:f8:18:e9:66:
70:b4:70:91:5a:8a:3a:91:94:f8:20:a7:0b:0a:17:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:33:5B:F9:57:45:73:E3:A1:74:68:7A:58:0B:26:84:D3:4D:04:EE
X509v3 Authority Key Identifier:
keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6532303a3a2f34342d3438203d3e20323032313937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:e20::/44
Signature Algorithm: sha256WithRSAEncryption
5f:a1:5e:13:9f:c8:5d:41:bf:61:d4:c6:0b:79:77:71:42:91:
21:f9:db:f7:a8:9e:01:c9:5c:c9:59:80:f5:6e:c5:b0:07:63:
8c:eb:be:67:4f:0c:d6:9c:15:47:d5:be:1f:54:cd:70:cb:5c:
d0:3a:4c:8c:b7:0f:3e:70:63:28:da:9a:9f:17:02:2a:ce:70:
98:5d:4d:1d:be:a4:08:0f:9f:c7:98:9c:86:76:29:e6:40:c3:
85:38:7c:c3:c3:27:2d:d1:8e:2e:37:5e:11:3c:04:d9:81:36:
26:e2:da:6a:22:8a:2b:13:f0:50:3b:01:3e:35:77:65:19:85:
5c:3a:80:86:8b:c9:f7:95:45:9f:5b:ae:13:b4:3b:ac:a7:7d:
55:c5:44:c4:4b:57:e5:5c:d5:1c:1e:99:c8:90:22:f1:d4:04:
f2:d8:86:6f:4a:8b:3b:ae:93:00:d0:ac:31:95:6e:8b:48:ec:
15:87:c4:9c:51:85:94:93:62:a8:3e:63:02:59:d3:fe:e1:23:
12:e5:3d:84:51:c8:7d:e1:f1:62:e6:ae:67:dd:76:a8:60:e1:
f5:f9:ae:e0:f8:ec:02:27:93:66:69:4c:66:e4:3f:b8:bb:eb:
50:06:da:43:8d:42:13:25:44:ff:d1:3b:cc:0d:80:2c:d1:b0:
97:b9:a3:4c
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIURXkHFNLQMoqDZObtCluQE+b295QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMyQjA4M0VFMzdCQ0YyRDczN0M1NzZFRjlENTMyRUQ3
MTdBMTcxMTAeFw0yNDA0MTAyMjU1MDZaFw0yNTA0MDkyMzAwMDZaMDMxMTAvBgNV
BAMTKDIyMzM1QkY5NTc0NTczRTNBMTc0Njg3QTU4MEIyNjg0RDM0RDA0RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8BmM1soF9/twI9EvPR8EWe2o
s20+xWycclZvJvOk8PpM8ZAN2+TAsSr7sgR4uVNKfL/9CNT1ZbY6H2W3Kw90YX3k
sLk1gml26VFGjaAt/0w6dmW3kjF6TYqwfWS2pzwTWhkgmQNa681kxtCtoMQegrpZ
JGasLXxG6rCPrAwdSqIGqfEoLP6Y1VY//OW2JdsSRk48/UmpGYcDuAiKOA2Cm+ju
9ceKVjkznMiI/9daUsrSnuK8v9HnjMaL6KPC0z5CxId3OEywkhtMAZeOZs4fMQjf
fSsqXHs0lxdL334FIH0Mt1VzIASD2dS2+BjpZnC0cJFaijqRlPggpwsKF9Q/AgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUIjNb+VdFc+OhdGh6WAsmhNNNBO4wHwYDVR0j
BBgwFoAUrCsIPuN7zy1zfFdu+dUy7XF6FxEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2Q3YTU1MjctZmIxOS00NTY1LTk3MzMtZDQ1YTg3MDA1
MGU1LzEvQUMyQjA4M0VFMzdCQ0YyRDczN0M1NzZFRjlENTMyRUQ3MTdBMTcxMS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMWE3OTdmOS0zYzEwLTQ1
MzYtYWE2NC0wOWNhMmQ5NTQ1YzgvMC9BQzJCMDgzRUUzN0JDRjJENzM3QzU3NkVG
OUQ1MzJFRDcxN0ExNzExLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9jZDdhNTUyNy1mYjE5LTQ1NjUtOTczMy1kNDVhODcwMDUwZTUvMS8zMjYxMzAz
NzNhMzIzNDM4MzYzYTY1MzIzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzAz
MjMxMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHBCoHJIYOIDANBgkqhkiG9w0BAQsFAAOCAQEAX6Fe
E5/IXUG/YdTGC3l3cUKRIfnb96ieAclcyVmA9W7FsAdjjOu+Z08M1pwVR9W+H1TN
cMtc0DpMjLcPPnBjKNqanxcCKs5wmF1NHb6kCA+fx5ichnYp5kDDhTh8w8MnLdGO
LjdeETwE2YE2JuLaaiKKKxPwUDsBPjV3ZRmFXDqAhovJ95VFn1uuE7Q7rKd9VcVE
xEtX5VzVHB6ZyJAi8dQE8tiGb0qLO66TANCsMZVui0jsFYfEnFGFlJNiqD5jAlnT
/uEjEuU9hFHIfeHxYuauZ912qGDh9fmu4PjsAieTZmlMZuQ/uLvrUAbaQ41CEyVE
/9E7zA2ALNGwl7mjTA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 01:41:07 2025 by rpki-client