Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613533303a3a2f34362d3438203d3e20323135393536.roa
File: 326130613a363034343a613533303a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier: A06CmwlykpG4E/amnrfe7mvQ2qKKOH1D465B9qWNvOs=
Subject key identifier: 94:C6:5C:01:6C:54:DD:05:E1:78:61:24:83:4E:C4:4C:B2:D8:4D:CB
Certificate issuer: /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Certificate serial: 1AD3B94F99ADB41F641EA306DD7B32F13662205C
Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613533303a3a2f34362d3438203d3e20323135393536.roa
Signing time: Wed 04 Dec 2024 01:19:44 +0000
ROA not before: Wed 04 Dec 2024 01:14:44 +0000
ROA not after: Wed 03 Dec 2025 01:19:44 +0000
asID: 215956
IP address blocks: 2a0a:6044:a530::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d3:b9:4f:99:ad:b4:1f:64:1e:a3:06:dd:7b:32:f1:36:62:20:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Validity
Not Before: Dec 4 01:14:44 2024 GMT
Not After : Dec 3 01:19:44 2025 GMT
Subject: CN=94C65C016C54DD05E1786124834EC44CB2D84DCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:c1:25:9d:b5:d8:24:04:ef:fe:f9:25:74:
94:23:38:e7:b4:07:e4:e2:cc:31:fe:4b:fb:cc:fa:
2b:f8:2e:c4:27:80:54:4c:a1:e5:99:c0:e4:a5:fd:
0b:7e:ba:b8:bb:1d:2b:ca:9d:ad:65:dd:b7:8e:66:
e1:e6:0f:5a:37:c3:7f:a7:dd:9d:f0:7f:8c:05:53:
dc:54:37:43:c9:ae:a3:c0:7f:87:b9:70:a6:c2:68:
5f:df:71:97:05:51:71:19:fd:c5:48:a5:4a:2e:32:
8a:4d:9d:f1:1a:3d:1e:94:53:2d:b1:6c:28:8c:07:
44:f6:4b:f5:c6:74:64:a4:e6:de:4d:c2:9c:74:ea:
9b:bf:a0:3b:18:89:6c:9a:8e:c4:b5:56:07:37:f5:
f6:34:22:8e:71:c9:eb:c6:42:4e:ae:06:54:70:80:
b9:32:81:c8:db:07:d4:59:2a:85:41:f2:17:25:da:
c6:b6:1b:db:1d:9b:75:05:8e:be:4c:dd:15:b7:88:
9c:91:9a:a7:73:a9:9f:91:58:97:5d:df:71:7f:98:
e3:47:83:65:ee:ff:4f:51:14:25:a0:39:f3:bb:3d:
6c:09:de:58:95:61:3a:a8:07:3f:71:37:77:7a:e4:
72:ff:66:6b:b9:21:45:f0:35:4d:6f:3e:74:04:2f:
2d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C6:5C:01:6C:54:DD:05:E1:78:61:24:83:4E:C4:4C:B2:D8:4D:CB
X509v3 Authority Key Identifier:
keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613533303a3a2f34362d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a530::/46
Signature Algorithm: sha256WithRSAEncryption
ac:0c:ee:92:f6:8b:84:27:ad:95:b8:27:0c:18:64:ff:87:d8:
3e:8b:13:7b:e5:47:87:e8:e5:50:53:71:d8:86:09:0f:51:7f:
82:5f:6b:0e:0f:2e:92:7d:22:ec:a4:3b:f9:52:ce:b7:2f:3d:
69:34:41:60:1e:6d:bb:15:e8:fe:96:5a:a2:44:b8:4b:dc:37:
2b:63:af:95:6f:39:06:32:19:1d:7c:00:09:1e:73:13:f1:6c:
d1:97:10:30:5d:a2:df:76:d5:98:7a:71:ca:20:84:b2:01:17:
4f:12:ab:1e:f6:08:1c:de:03:5a:7f:7d:1c:bc:76:da:cb:d5:
d7:b2:bb:75:d3:4e:3a:4f:e4:a6:02:88:b8:af:99:d6:ff:41:
55:33:20:d0:52:8c:db:15:08:8a:16:4c:a6:eb:67:9e:82:6a:
43:ce:3f:4f:f5:76:d1:bb:bb:99:17:3e:71:b4:45:c1:9b:48:
9f:52:3d:21:ee:27:cb:ae:3d:cb:39:21:c3:0a:7e:6f:37:94:
72:1d:50:bb:1a:75:03:a5:f6:d5:ba:97:5b:7b:9d:60:4e:64:
26:bf:dc:f8:e4:8b:3b:42:06:82:2c:15:bb:dd:3b:90:68:e4:
8f:44:a0:2c:7f:4d:55:39:e3:c7:76:22:36:af:83:a6:60:bd:
32:2f:6b:63
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUGtO5T5mttB9kHqMG3Xsy8TZiIFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwM0JCODgwOEY3NjZCNzNENTQ3M0NGQTdCODg0RTk4
QkNGRTk3RDAeFw0yNDEyMDQwMTE0NDRaFw0yNTEyMDMwMTE5NDRaMDMxMTAvBgNV
BAMTKDk0QzY1QzAxNkM1NEREMDVFMTc4NjEyNDgzNEVDNDRDQjJEODREQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvosElnbXYJATv/vkldJQjOOe0
B+TizDH+S/vM+iv4LsQngFRMoeWZwOSl/Qt+uri7HSvKna1l3beOZuHmD1o3w3+n
3Z3wf4wFU9xUN0PJrqPAf4e5cKbCaF/fcZcFUXEZ/cVIpUouMopNnfEaPR6UUy2x
bCiMB0T2S/XGdGSk5t5Nwpx06pu/oDsYiWyajsS1Vgc39fY0Io5xyevGQk6uBlRw
gLkygcjbB9RZKoVB8hcl2sa2G9sdm3UFjr5M3RW3iJyRmqdzqZ+RWJdd33F/mONH
g2Xu/09RFCWgOfO7PWwJ3liVYTqoBz9xN3d65HL/Zmu5IUXwNU1vPnQELy3XAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUlMZcAWxU3QXheGEkg07ETLLYTcswHwYDVR0j
BBgwFoAUEwO7iAj3Zrc9VHPPp7iE6YvP6X0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzEvMTMwM0JCODgwOEY3NjZCNzNENTQ3M0NGQTdCODg0RTk4QkNGRTk3RC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8xMzAzQkI4ODA4Rjc2NkI3M0Q1NDczQ0ZB
N0I4ODRFOThCQ0ZFOTdELmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYxMzUzMzMwM2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcCKgpgRKUwMA0GCSqGSIb3DQEBCwUAA4IBAQCs
DO6S9ouEJ62VuCcMGGT/h9g+ixN75UeH6OVQU3HYhgkPUX+CX2sODy6SfSLspDv5
Us63Lz1pNEFgHm27Fej+llqiRLhL3DcrY6+VbzkGMhkdfAAJHnMT8WzRlxAwXaLf
dtWYenHKIISyARdPEqse9ggc3gNaf30cvHbay9XXsrt10046T+SmAoi4r5nW/0FV
MyDQUozbFQiKFkym62eegmpDzj9P9XbRu7uZFz5xtEXBm0ifUj0h7ifLrj3LOSHD
Cn5vN5RyHVC7GnUDpfbVupdbe51gTmQmv9z45Is7QgaCLBW73TuQaOSPRKAsf01V
OePHdiI2r4OmYL0yL2tj
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:23 2025 by rpki-client