Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa
File: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (raw, json)
Hash identifier: DJIGVPPFdKw8WztsRwxSv88N7qWJk5uvTreoiT8psfU=
Subject key identifier: 37:5C:C9:DE:AD:4E:9E:58:92:96:B4:97:61:21:C8:37:05:6D:E9:34
Certificate issuer: /CN=178395FF98E8AEA645CFCD7DF742855D46457BAF
Certificate serial: 3F7F9F388CCDC78207EC551DCEFB2E47844B9685
Authority key identifier: 17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa
Signing time: Fri 14 Feb 2025 13:57:59 +0000
ROA not before: Fri 14 Feb 2025 13:52:59 +0000
ROA not after: Fri 13 Feb 2026 13:57:59 +0000
asID: 214723
IP address blocks: 2a0a:6044:ba02::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:7f:9f:38:8c:cd:c7:82:07:ec:55:1d:ce:fb:2e:47:84:4b:96:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178395FF98E8AEA645CFCD7DF742855D46457BAF
Validity
Not Before: Feb 14 13:52:59 2025 GMT
Not After : Feb 13 13:57:59 2026 GMT
Subject: CN=375CC9DEAD4E9E589296B4976121C837056DE934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7c:75:db:6b:37:17:4a:1e:02:17:fe:7a:e0:
cd:0c:56:6f:dd:6f:01:f9:9c:3c:dc:82:66:4f:bd:
2f:f4:48:75:40:db:40:22:7c:ef:1e:f6:ca:5b:35:
9e:86:25:9c:18:fa:12:59:8e:8c:e8:a3:35:c4:7b:
de:e1:e5:4c:02:10:e0:5d:74:1f:05:dc:30:d5:c8:
e9:fe:5a:19:2b:17:41:fc:e3:5d:ee:1b:31:4a:b1:
3e:ed:55:81:5d:59:1e:bd:b1:bb:b7:16:32:cb:41:
d5:c7:49:59:e8:27:35:d5:37:5b:44:73:d8:10:db:
85:82:3b:ba:40:67:9e:c8:1b:3d:f2:bf:1a:b4:2c:
f9:f8:97:8d:66:f6:25:de:12:9e:34:88:35:ca:e5:
85:f2:76:6e:73:f1:9e:39:ac:eb:31:0c:5e:f5:b8:
29:06:11:d8:4c:6b:93:e9:39:08:11:3f:b1:54:6c:
e5:eb:34:11:fd:09:0a:ce:7a:46:05:65:13:39:3a:
d3:41:32:7d:a3:36:c3:e1:1a:b6:59:ab:50:7b:bd:
ed:1b:58:b8:d1:78:ff:58:c7:51:ed:15:05:cc:c5:
14:26:e4:25:eb:08:e1:2c:86:d2:e4:59:af:91:18:
48:dc:70:66:10:2f:b8:e9:80:f8:ee:c6:e0:2d:95:
02:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5C:C9:DE:AD:4E:9E:58:92:96:B4:97:61:21:C8:37:05:6D:E9:34
X509v3 Authority Key Identifier:
keyid:17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ba02::/47
Signature Algorithm: sha256WithRSAEncryption
69:cf:52:fc:71:07:6d:25:05:3c:4e:63:d5:17:b6:64:76:de:
11:a1:ea:ec:2c:3a:b4:aa:ea:42:4c:37:d5:bf:49:06:a0:c4:
59:e4:9b:e1:d3:94:9c:33:1b:8f:9b:b7:f7:ef:4f:b2:12:46:
b4:2b:45:2a:9c:b1:27:da:7a:b4:4f:d8:6e:e9:24:ef:2d:f0:
64:72:b3:87:a3:67:23:4b:3d:37:37:53:d7:2a:c7:10:53:91:
55:d0:60:8c:2e:9f:a5:c1:1d:07:d6:1d:9c:e0:0d:e0:26:75:
98:c2:65:c5:ac:17:f7:93:3e:97:25:05:54:19:70:7f:87:87:
e6:00:f6:5d:7e:b9:2f:2c:b1:e3:12:9a:6c:5e:c8:50:f1:b4:
4a:8e:9f:5a:3c:20:1b:cf:40:3f:3c:4c:34:73:ed:df:8e:8c:
41:ad:83:17:9c:f5:0f:62:6b:33:ea:5f:a7:d8:45:73:99:a0:
cd:f4:ac:3f:e6:1b:f3:31:f3:a9:45:12:ab:f1:37:75:a6:32:
bf:17:5b:ae:d2:54:d8:75:ac:cf:06:c1:8d:71:a3:f3:3b:fd:
9d:59:51:fa:4e:ba:e4:78:5e:97:c8:d1:ab:eb:e6:52:5c:34:
58:a7:07:d7:f6:51:91:03:c2:62:ec:ef:49:3a:5c:69:d3:a6:
61:d6:c6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:59 2025 by rpki-client