Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa
File: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (raw, json)
Hash identifier: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=
Subject key identifier: 18:E8:C8:8D:03:55:E7:28:11:E6:2A:B1:F3:94:6F:48:B2:5C:81:0C
Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial: 5EBB16D0AADCBF545C7448CC29D32621ED9B9C9F
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa
Signing time: Fri 07 Feb 2025 21:20:59 +0000
ROA not before: Fri 07 Feb 2025 21:15:59 +0000
ROA not after: Fri 06 Feb 2026 21:20:59 +0000
asID: 215242
IP address blocks: 2a0f:85c1:7f7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:bb:16:d0:aa:dc:bf:54:5c:74:48:cc:29:d3:26:21:ed:9b:9c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Validity
Not Before: Feb 7 21:15:59 2025 GMT
Not After : Feb 6 21:20:59 2026 GMT
Subject: CN=18E8C88D0355E72811E62AB1F3946F48B25C810C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:be:19:db:bd:57:10:91:1c:54:38:11:9e:42:
2e:16:7f:f1:96:8c:74:c7:8c:86:6f:e1:c1:78:3e:
fc:e9:93:a9:df:eb:90:eb:37:85:21:ea:75:c8:87:
b0:05:ea:13:b7:78:ff:84:33:12:65:a0:b5:ee:1f:
39:c4:fb:8b:87:3a:cb:ea:67:9d:f1:08:9a:e9:04:
45:d3:7d:65:7c:53:ef:ba:9a:72:2c:da:d2:34:18:
a2:f6:ee:c8:22:1c:61:ee:da:2f:b6:f3:b5:19:e4:
39:57:70:6a:eb:90:b7:2b:b5:5a:25:13:f7:59:45:
55:c2:67:b8:44:5c:ff:9d:8e:12:21:3b:4f:da:3c:
f0:3e:fa:95:9c:6a:8d:79:23:77:cb:bf:1c:7d:05:
55:f7:87:40:37:e5:cb:ef:47:a7:c8:c2:10:f2:90:
36:12:97:01:fc:d1:43:c3:69:b9:d0:59:d3:82:ea:
ba:5f:93:05:b2:0a:d0:cb:3b:58:9c:21:8f:b2:ff:
33:60:cf:52:0c:61:a8:c8:95:49:45:3c:89:e3:65:
2a:12:42:0e:0a:e0:ac:62:35:9a:bd:1b:78:d0:76:
17:3f:1f:f4:6d:bd:d7:07:73:84:79:04:2a:95:5d:
5b:9b:a9:77:2b:7c:1e:94:0c:4e:c9:81:42:be:9e:
9a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E8:C8:8D:03:55:E7:28:11:E6:2A:B1:F3:94:6F:48:B2:5C:81:0C
X509v3 Authority Key Identifier:
keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:7f7::/48
Signature Algorithm: sha256WithRSAEncryption
83:80:8c:d1:80:61:78:eb:59:1e:19:e4:06:0f:52:80:6e:52:
45:ba:9e:81:ac:74:0b:e6:71:d1:ee:0f:a8:e2:ca:e4:da:de:
f5:7a:7b:84:8e:d0:9c:b2:a0:84:b4:0b:66:fd:89:da:31:7f:
f4:ff:b4:14:b5:59:0b:fd:bf:62:e8:f0:3f:d9:f4:e8:a4:ea:
af:c9:30:b7:e3:ae:70:48:3a:54:7a:7f:ab:98:d8:2b:ff:9e:
b1:9d:58:9f:17:6d:36:0e:8c:0b:3b:5e:46:58:61:05:cd:57:
51:b0:22:39:22:71:0e:cf:40:81:ac:11:37:2e:05:f5:73:f0:
94:84:0b:8b:03:46:16:fe:11:b5:9e:2d:5e:b7:d7:e0:57:db:
11:44:50:39:92:89:a9:00:de:8e:e7:af:52:f9:16:ad:2d:76:
7b:a7:85:3b:b4:e7:7f:a8:bc:7f:7a:13:07:55:87:c5:6d:20:
25:69:2c:c0:df:5e:5c:4e:ad:b7:3b:52:ac:48:86:cc:9d:3d:
18:34:88:c2:e5:77:f0:13:cc:41:78:be:2f:85:4b:40:5b:d6:
dd:e9:54:17:eb:37:67:be:7d:b0:a4:d3:d9:03:f3:9f:4b:97:
ee:e5:d8:43:37:03:d2:d2:74:51:57:da:8c:98:09:ea:38:f4:
90:8a:70:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:39 2025 by rpki-client