Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234303a3a2f34332d3433203d3e20323035333239.roa
File: 326131323a646434373a383234303a3a2f34332d3433203d3e20323035333239.roa (raw, json)
Hash identifier: 7BTDMukd467KKImpSeoQucuCaSaHSsjWq/4cNHDzZBU=
Subject key identifier: 7C:68:80:25:E6:8C:AB:27:52:AC:C3:51:34:B4:37:20:2D:72:54:66
Certificate issuer: /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial: 14196A12C47DF34AD554F446C2F0B5091D8D2E4B
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234303a3a2f34332d3433203d3e20323035333239.roa
Signing time: Fri 13 Sep 2024 20:09:37 +0000
ROA not before: Fri 13 Sep 2024 20:04:37 +0000
ROA not after: Fri 12 Sep 2025 20:09:37 +0000
asID: 205329
IP address blocks: 2a12:dd47:8240::/43 maxlen: 43
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:19:6a:12:c4:7d:f3:4a:d5:54:f4:46:c2:f0:b5:09:1d:8d:2e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
Validity
Not Before: Sep 13 20:04:37 2024 GMT
Not After : Sep 12 20:09:37 2025 GMT
Subject: CN=7C688025E68CAB2752ACC35134B437202D725466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:67:77:93:10:bc:fd:cb:4a:ec:dd:fa:eb:56:
09:eb:d9:30:9f:83:39:00:c7:87:c5:fc:6f:be:52:
b2:9b:98:6c:9f:2d:25:94:b5:a6:2f:cd:94:98:cb:
94:18:4d:94:fa:c1:4b:04:cf:7f:60:9d:2a:5e:f8:
45:35:56:9b:1c:9e:bb:1b:2c:3e:f5:77:e2:bc:bd:
39:ea:c8:31:56:0f:e2:30:7a:a8:79:53:66:3a:75:
ed:09:31:20:6e:6d:46:72:27:9a:c0:79:9c:9f:ae:
43:6f:69:af:4f:25:71:0e:5e:47:b2:64:79:4b:dd:
6a:f2:67:ce:11:be:5f:01:06:e9:eb:e0:90:73:3d:
14:57:5b:d8:2a:69:3e:fe:fe:c8:36:77:2d:3f:9f:
03:39:55:81:6a:42:04:9d:f5:ad:76:f7:ae:0d:a1:
38:ea:f8:4d:72:fb:db:e2:3a:88:96:dc:b4:c9:ba:
fd:b4:23:27:c9:cc:12:eb:af:37:5e:62:04:04:59:
07:26:00:1b:9e:99:ed:81:63:71:e6:71:32:67:c0:
7a:a9:cc:b0:cb:32:14:1a:98:3b:0f:32:96:d1:41:
c2:2a:38:f0:50:ca:45:c2:58:de:e6:c5:c0:66:41:
a6:4b:c4:7b:bc:77:dc:ea:9a:ed:9e:90:52:dc:27:
f1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:68:80:25:E6:8C:AB:27:52:AC:C3:51:34:B4:37:20:2D:72:54:66
X509v3 Authority Key Identifier:
keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234303a3a2f34332d3433203d3e20323035333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8240::/43
Signature Algorithm: sha256WithRSAEncryption
7f:52:ba:23:c5:ac:ee:58:4f:a7:21:bc:3a:51:17:90:a2:2e:
d9:0c:1a:48:1c:8c:cb:b3:71:e2:96:11:11:5a:1e:2e:81:c2:
77:65:c2:64:24:c0:5b:2b:74:b8:ba:bc:51:b3:92:25:07:16:
7f:8f:80:0c:8c:b3:3c:ca:2f:1a:91:1f:8c:b7:34:01:74:08:
63:ec:a7:ed:2c:f8:74:7a:5d:04:1c:b6:dd:3e:8f:c6:13:fa:
29:82:af:88:9b:f2:61:92:d6:bb:6d:3a:cb:a9:eb:9c:5c:f6:
0a:6f:64:79:ed:db:7a:f0:44:a1:fb:f4:c4:71:f4:9f:3e:13:
7c:27:23:36:10:7b:48:ca:d7:98:8b:07:f8:8f:e8:e0:54:00:
79:71:c7:89:2e:0a:0a:5e:0a:fe:da:cd:79:4c:c8:0d:f7:a1:
02:47:83:20:13:e4:86:10:ec:5b:a6:ff:02:82:fc:09:cf:e7:
0c:1d:c9:33:0f:e6:bf:86:1a:b9:bb:bc:73:b0:51:be:77:69:
c8:a0:3f:67:fb:e7:dc:1a:52:79:96:64:02:f8:9f:b6:04:b5:
5c:f3:79:f4:ad:bc:a7:16:ae:e0:7c:ff:dc:a5:ef:40:55:96:
a4:2c:e7:a8:af:2a:2a:de:73:fe:da:5a:68:08:01:8d:e3:93:
0b:94:e0:e6
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUFBlqEsR980rVVPRGwvC1CR2NLkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ1N0Q0NDA5MDYyNjUzNDlGNkRFRjk4NTU3QUMyOEQw
MzgxQzQ3RTAeFw0yNDA5MTMyMDA0MzdaFw0yNTA5MTIyMDA5MzdaMDMxMTAvBgNV
BAMTKDdDNjg4MDI1RTY4Q0FCMjc1MkFDQzM1MTM0QjQzNzIwMkQ3MjU0NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnZ3eTELz9y0rs3frrVgnr2TCf
gzkAx4fF/G++UrKbmGyfLSWUtaYvzZSYy5QYTZT6wUsEz39gnSpe+EU1Vpscnrsb
LD71d+K8vTnqyDFWD+Iweqh5U2Y6de0JMSBubUZyJ5rAeZyfrkNvaa9PJXEOXkey
ZHlL3WryZ84Rvl8BBunr4JBzPRRXW9gqaT7+/sg2dy0/nwM5VYFqQgSd9a12964N
oTjq+E1y+9viOoiW3LTJuv20IyfJzBLrrzdeYgQEWQcmABueme2BY3HmcTJnwHqp
zLDLMhQamDsPMpbRQcIqOPBQykXCWN7mxcBmQaZLxHu8d9zqmu2ekFLcJ/H1AgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUfGiAJeaMqydSrMNRNLQ3IC1yVGYwHwYDVR0j
BBgwFoAUjVfUQJBiZTSfbe+YVXrCjQOBxH4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2
OTgwLzQvOEQ1N0Q0NDA5MDYyNjUzNDlGNkRFRjk4NTU3QUMyOEQwMzgxQzQ3RS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMzNk
YmRlY2M0ZmE0LzEvOEQ1N0Q0NDA5MDYyNjUzNDlGNkRFRjk4NTU3QUMyOEQwMzgx
QzQ3RS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMt
YWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2OTgwLzQvMzI2MTMxMzIzYTY0NjQzNDM3
M2EzODMyMzQzMDNhM2EyZjM0MzMyZDM0MzMyMDNkM2UyMDMyMzAzNTMzMzIzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHBSoS3UeCQDANBgkqhkiG9w0BAQsFAAOCAQEAf1K6I8Ws7lhPpyG8
OlEXkKIu2QwaSByMy7Nx4pYREVoeLoHCd2XCZCTAWyt0uLq8UbOSJQcWf4+ADIyz
PMovGpEfjLc0AXQIY+yn7Sz4dHpdBBy23T6PxhP6KYKviJvyYZLWu206y6nrnFz2
Cm9kee3bevBEofv0xHH0nz4TfCcjNhB7SMrXmIsH+I/o4FQAeXHHiS4KCl4K/trN
eUzIDfehAkeDIBPkhhDsW6b/AoL8Cc/nDB3JMw/mv4Yaubu8c7BRvndpyKA/Z/vn
3BpSeZZkAviftgS1XPN59K28pxau4Hz/3KXvQFWWpCznqK8qKt5z/tpaaAgBjeOT
C5Tg5g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:26 2025 by rpki-client