Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431343a3a2f34362d3438203d3e20323135393536.roa
File: 326131343a373538303a656431343a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier: CBinVNP14p3fJKjz8cJdLh4NiErv8Lc4GRjI4Fj+49U=
Subject key identifier: 1B:34:72:4F:7F:55:8C:8C:F3:5D:AA:35:8F:A7:20:3F:DA:9C:5C:5C
Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial: 64D87B2EA2544F0F831F907E4419F278E4A811E3
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431343a3a2f34362d3438203d3e20323135393536.roa
Signing time: Sat 08 Mar 2025 00:06:15 +0000
ROA not before: Sat 08 Mar 2025 00:01:15 +0000
ROA not after: Sat 07 Mar 2026 00:06:15 +0000
asID: 215956
IP address blocks: 2a14:7580:ed14::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d8:7b:2e:a2:54:4f:0f:83:1f:90:7e:44:19:f2:78:e4:a8:11:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Validity
Not Before: Mar 8 00:01:15 2025 GMT
Not After : Mar 7 00:06:15 2026 GMT
Subject: CN=1B34724F7F558C8CF35DAA358FA7203FDA9C5C5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c0:08:af:3d:1e:e1:4b:bc:e0:13:33:df:e4:
18:12:cc:a6:24:74:4c:a5:76:3e:22:3a:ca:ce:9e:
0e:09:75:b7:26:47:fa:ea:53:f2:a1:9c:86:fe:f2:
45:a6:2c:75:64:b2:ab:5e:2b:5d:a0:b5:c6:d9:3c:
65:bf:fc:69:83:f8:84:60:1a:7e:cc:61:a2:a6:8b:
de:09:43:44:17:99:e7:4a:c5:12:37:f0:ab:71:03:
c2:da:cf:c7:03:25:fc:21:d2:62:73:4d:f1:0d:3f:
20:89:0f:d2:de:e8:3d:f4:c4:a5:bb:b5:58:15:ab:
3f:ba:68:76:fb:fc:41:a0:ca:f0:4d:2e:e5:f7:95:
76:37:c4:d5:c8:a6:f5:ff:b6:06:bf:46:45:33:4f:
36:01:35:df:58:eb:b6:53:11:33:85:f7:bc:fa:16:
a0:22:a3:09:9a:bc:b5:e7:24:4c:6f:b7:79:b9:ee:
fe:20:24:96:3a:ab:e5:cf:f0:ac:c8:f5:c9:06:ba:
37:94:68:75:02:8b:10:3e:c3:69:93:dd:49:a5:2c:
5c:05:4b:02:59:4d:04:a5:ac:37:ad:86:5f:65:87:
d2:85:68:e6:26:67:33:d9:6e:8f:f9:2a:b8:8e:ca:
e0:f8:82:ef:82:8a:d5:7e:b1:32:4b:db:19:72:fd:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:34:72:4F:7F:55:8C:8C:F3:5D:AA:35:8F:A7:20:3F:DA:9C:5C:5C
X509v3 Authority Key Identifier:
keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431343a3a2f34362d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ed14::/46
Signature Algorithm: sha256WithRSAEncryption
4f:d4:f1:7f:ed:af:3e:d2:03:08:56:30:fe:16:91:f7:7e:4a:
97:04:d2:45:49:a9:3f:f8:30:36:db:e3:9c:01:5e:e4:06:0b:
f0:bb:95:21:79:5e:06:f4:ef:e4:05:bd:a9:84:82:28:ae:f3:
f1:60:d0:21:62:dc:b1:cd:f6:07:e0:32:af:86:4f:a2:05:82:
c9:da:31:3f:1b:36:83:46:c2:30:31:07:89:70:55:91:f4:c0:
70:a2:06:f8:b1:05:54:10:17:19:2c:e8:a9:cf:9a:59:53:68:
ca:03:89:a8:57:5d:47:1f:3f:6e:44:b1:59:64:f1:ba:a9:5b:
e0:fe:c2:63:5d:bd:5b:06:39:8a:a7:98:d7:fb:31:7d:07:99:
14:bb:bc:10:e2:17:ae:9d:3b:d8:62:11:7c:50:b4:17:62:02:
09:9e:6a:50:d4:fb:e3:fe:fb:25:42:3e:81:37:87:05:6b:27:
58:c9:0e:54:5b:6c:57:26:da:46:c7:b8:44:6c:33:37:82:97:
6b:f9:3d:b3:6d:4f:3a:4f:ef:61:48:b0:ee:0b:cd:d0:1f:73:
a0:d4:52:dd:b3:e4:dd:64:55:69:f8:1a:63:b2:8c:ec:59:15:
3d:5c:15:38:57:48:51:10:df:e2:6e:06:45:ce:7b:01:69:a7:
38:99:63:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:23 2025 by rpki-client