Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa
File: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (raw, json)
Hash identifier: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=
Subject key identifier: E7:1A:91:78:52:20:06:24:31:38:3B:7D:9F:C9:BC:A4:24:EC:E3:C5
Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial: 6E7D42BBD9C5CB9ACF344934745A9407312A969A
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa
Signing time: Sat 08 Feb 2025 03:47:35 +0000
ROA not before: Sat 08 Feb 2025 03:42:35 +0000
ROA not after: Sat 07 Feb 2026 03:47:35 +0000
asID: 215242
IP address blocks: 2a0f:85c1:7fb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:7d:42:bb:d9:c5:cb:9a:cf:34:49:34:74:5a:94:07:31:2a:96:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Validity
Not Before: Feb 8 03:42:35 2025 GMT
Not After : Feb 7 03:47:35 2026 GMT
Subject: CN=E71A91785220062431383B7D9FC9BCA424ECE3C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:96:d3:0f:5e:53:c5:6b:47:a8:e1:cd:e2:
57:8b:4e:01:18:b6:f8:82:7c:2d:90:46:f2:a3:12:
d4:31:9c:40:45:98:12:1a:9d:0e:b4:1d:0d:95:6a:
86:a4:cf:ae:0b:9f:67:be:52:7e:07:fd:67:fd:db:
62:90:8d:6e:68:b8:67:ad:06:b7:36:39:73:b2:53:
54:ad:86:a4:42:dc:ba:00:d9:ff:8e:07:4d:1c:79:
d0:8b:03:1a:51:72:9e:34:66:96:e8:e9:7f:59:24:
a5:d7:44:74:46:dc:b8:84:6d:ca:21:c7:51:28:e9:
48:cf:ff:77:b2:a5:2f:fc:a0:90:62:8b:1e:5f:96:
7d:4a:0c:d5:8b:d7:2b:61:e6:22:aa:e5:79:68:ce:
d1:f5:76:39:6a:98:bf:55:8c:b3:23:12:ec:b8:be:
31:dd:f2:53:5f:af:d4:7d:de:40:9c:0d:45:3f:f8:
5f:e5:88:0c:b2:d7:51:13:18:11:ed:e8:c3:06:59:
c9:95:78:83:84:b2:4f:94:87:b9:8f:85:fe:b3:59:
26:56:a1:c1:67:a0:3d:39:71:9e:45:a2:c5:46:65:
d7:80:7b:e6:b3:af:b1:1f:52:e3:e7:95:4b:25:df:
38:62:68:b4:fd:cd:c1:98:3d:85:a6:2a:a6:83:fc:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1A:91:78:52:20:06:24:31:38:3B:7D:9F:C9:BC:A4:24:EC:E3:C5
X509v3 Authority Key Identifier:
keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:7fb::/48
Signature Algorithm: sha256WithRSAEncryption
76:bd:5e:75:a7:84:11:e8:1d:c7:2d:91:7e:fa:93:3b:d2:ef:
00:b2:cd:3d:56:0b:14:7e:18:04:88:18:88:34:33:9e:01:63:
47:2e:2c:d3:a3:01:2e:ca:f9:e4:ef:52:38:98:00:81:d0:73:
b6:df:ba:c8:e3:8d:30:36:47:49:af:c4:e7:98:30:fc:a5:40:
0a:58:2f:c7:67:16:8f:3b:3b:4a:81:e2:e7:aa:31:45:be:57:
1b:b6:0b:62:3f:dc:a6:26:7f:cc:63:a5:0f:5d:a5:c7:85:12:
3d:98:ba:85:75:ca:d1:ca:4d:89:61:94:95:0f:e8:7c:ec:87:
a6:40:b6:1d:8d:67:eb:d9:7d:ad:c9:99:5b:04:50:83:11:7f:
7d:3b:4a:03:c4:7a:ca:12:ff:e5:5d:3f:c5:d7:f1:d5:1e:ed:
cf:de:73:b3:92:3a:52:da:63:e4:b7:e9:77:9d:8c:08:8c:6c:
ab:40:cd:23:ec:ae:70:79:d7:6b:99:6a:77:66:62:58:94:c1:
39:37:20:7c:f8:73:3c:ee:be:98:b3:b5:5e:43:20:cf:68:8e:
5e:a6:98:c4:ce:33:36:28:29:bc:76:bc:ad:0b:3c:ea:22:53:
af:bc:89:75:7a:c3:c1:5f:f8:6d:83:4c:f3:b1:27:36:95:cf:
db:fd:44:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:20 2025 by rpki-client