Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa
File: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (raw, json)
Hash identifier: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=
Subject key identifier: 61:D4:2C:F5:7D:6F:76:88:C2:4A:82:14:78:47:82:57:B2:49:0F:B5
Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial: 79464C32F6F28CC4D6C569AD66C4C4ABF66B3D43
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa
Signing time: Sat 08 Feb 2025 01:37:58 +0000
ROA not before: Sat 08 Feb 2025 01:32:58 +0000
ROA not after: Sat 07 Feb 2026 01:37:58 +0000
asID: 215242
IP address blocks: 2a0f:85c1:7f9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:46:4c:32:f6:f2:8c:c4:d6:c5:69:ad:66:c4:c4:ab:f6:6b:3d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Validity
Not Before: Feb 8 01:32:58 2025 GMT
Not After : Feb 7 01:37:58 2026 GMT
Subject: CN=61D42CF57D6F7688C24A821478478257B2490FB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:f6:d2:bd:1d:64:74:7b:30:c5:cf:98:80:
61:0d:bc:51:c9:76:27:40:45:6f:ce:c2:7c:ef:60:
7c:de:0e:06:3d:8a:25:cb:e9:5f:7b:6b:90:23:e7:
2f:29:01:f0:a4:c2:18:1a:ee:75:0c:1e:5e:99:af:
28:cc:ae:1c:1d:03:c9:42:af:b5:34:ce:5c:8f:5a:
a8:26:8a:0f:ae:30:7b:59:6b:b2:18:94:f3:73:2a:
da:b7:92:f0:94:8a:7a:9e:77:9f:f9:ff:29:e5:d0:
ef:69:1d:f7:88:9f:3d:0b:0a:70:f6:10:75:db:85:
7e:0c:ee:20:c7:dd:1b:1c:35:ab:29:c4:0c:09:d9:
02:2b:97:17:fd:16:b4:ee:d8:c3:ea:9a:8f:89:7b:
e3:57:ef:f3:0a:6f:dc:c2:26:56:4e:3f:9e:4c:5a:
25:00:47:60:bf:4e:30:92:18:ed:37:ac:8d:ce:fb:
79:6e:92:53:10:83:f3:85:66:50:af:b0:64:c1:82:
84:bd:a5:a5:af:8c:3a:e2:3f:29:06:b5:40:4d:73:
ff:d6:49:fe:1a:6c:3f:09:dc:4e:78:ce:46:43:91:
a7:a0:12:61:6b:1a:a8:57:82:4b:a1:d9:37:6e:36:
8a:9c:04:75:a8:a5:e7:49:0e:1b:bf:f6:fd:bd:33:
b6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D4:2C:F5:7D:6F:76:88:C2:4A:82:14:78:47:82:57:B2:49:0F:B5
X509v3 Authority Key Identifier:
keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:7f9::/48
Signature Algorithm: sha256WithRSAEncryption
4b:fe:ae:e0:ff:55:a8:55:ec:a5:c7:3e:12:77:e6:2d:bc:25:
92:9c:fd:26:1f:4f:bc:92:7e:66:73:85:21:1f:59:1d:70:d5:
1f:26:9d:03:14:0e:80:af:64:60:f2:48:70:52:3c:c9:d7:f2:
f7:ab:55:4a:93:02:52:d3:9b:f6:49:65:f0:0d:cb:73:98:90:
5c:94:25:c9:c2:96:cb:97:99:90:4a:61:e9:05:22:f4:09:4d:
0e:cb:cc:01:5f:67:3b:5a:fe:1d:47:9a:63:41:da:0b:9a:2d:
02:89:75:6d:f4:a9:00:e8:09:a2:7b:0e:3d:9d:4d:e6:63:fb:
f5:6a:c7:91:6d:ef:d1:c0:65:65:30:f1:d7:e7:a5:e3:d3:a2:
8a:f6:b1:54:56:f5:b7:4c:a5:8a:22:5e:d0:91:4d:e0:ed:3c:
be:26:07:1f:44:4c:16:72:fc:a3:31:e8:37:76:de:92:b6:8d:
14:e1:eb:ed:85:a2:17:69:55:2b:f6:cf:2a:ba:c6:ef:2e:bb:
3b:db:70:34:31:c2:4d:a3:e3:57:31:e8:41:6e:af:5f:74:cd:
5e:50:52:09:38:91:be:86:a9:f9:7c:b4:c7:6b:48:b5:21:f7:
14:b1:2d:51:6d:d4:d3:21:f0:e5:df:54:cc:48:fc:d5:08:ea:
32:47:bd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:05 2025 by rpki-client