Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656434303a3a2f34372d3438203d3e20323135393536.roa
File: 326131343a373538303a656434303a3a2f34372d3438203d3e20323135393536.roa (raw, json)
Hash identifier: cpW5X2LGDWGO3Mq6IWFoKq0AVmcqV72j0ReYB8HWc6A=
Subject key identifier: 12:62:24:46:DD:44:B4:75:EB:14:E4:F6:AA:ED:59:C4:B6:FF:F3:EB
Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial: 1399ABA28026FFA0D81D1C5B37E996418ED46E08
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656434303a3a2f34372d3438203d3e20323135393536.roa
Signing time: Sat 08 Mar 2025 00:14:53 +0000
ROA not before: Sat 08 Mar 2025 00:09:53 +0000
ROA not after: Sat 07 Mar 2026 00:14:53 +0000
asID: 215956
IP address blocks: 2a14:7580:ed40::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:99:ab:a2:80:26:ff:a0:d8:1d:1c:5b:37:e9:96:41:8e:d4:6e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Validity
Not Before: Mar 8 00:09:53 2025 GMT
Not After : Mar 7 00:14:53 2026 GMT
Subject: CN=12622446DD44B475EB14E4F6AAED59C4B6FFF3EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:14:44:2c:c4:3d:d7:f4:03:a5:c2:1d:f4:
3f:91:05:d7:12:fb:de:47:ee:71:2f:1a:cf:d4:e7:
bd:45:0f:ca:80:ed:8d:45:07:9d:93:4f:e5:5d:9b:
30:7c:3d:73:26:e6:ae:76:e2:9e:2a:ef:42:59:4c:
d1:34:5d:bc:e4:e2:09:76:aa:9e:61:9f:f5:63:eb:
6b:28:ef:28:f1:61:69:6b:05:d8:83:dd:0a:6b:be:
2c:35:51:97:e2:d0:90:0a:8b:1b:d1:39:4f:17:8a:
0f:a1:54:35:87:46:4b:61:a8:03:89:98:4d:77:32:
58:e9:ed:34:6a:7f:49:75:84:b8:01:cc:fc:bc:7d:
3c:4f:49:77:91:58:ce:13:4b:09:50:e6:6d:b8:cd:
de:67:6b:b5:4e:68:34:a6:0b:33:cd:a9:30:46:17:
b7:a6:44:6d:50:0c:2e:7e:59:e8:50:e5:c1:d3:55:
a7:f4:b1:43:a4:54:ec:43:b6:7d:f6:92:5e:64:8e:
c5:84:11:4b:7c:ec:0a:f5:38:22:74:7a:8d:e1:87:
0f:f7:d2:af:70:0c:05:18:2f:ac:7f:e5:84:b0:ee:
db:21:87:c6:06:ea:3f:7f:dd:21:2a:ab:59:0b:b7:
de:a1:9b:48:5f:cc:59:91:27:66:2f:36:89:fe:eb:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:62:24:46:DD:44:B4:75:EB:14:E4:F6:AA:ED:59:C4:B6:FF:F3:EB
X509v3 Authority Key Identifier:
keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656434303a3a2f34372d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ed40::/47
Signature Algorithm: sha256WithRSAEncryption
a8:f0:d0:15:38:a1:b5:e4:30:2e:15:7d:f0:44:60:79:4d:0c:
ba:1e:6d:8c:56:15:40:98:b7:ff:39:be:d8:56:15:c3:32:c5:
72:21:db:af:00:14:ea:de:c9:e4:7c:68:86:05:f3:52:a2:a7:
3b:00:31:96:70:bb:b1:ad:ee:a8:de:58:41:46:46:36:45:99:
4f:d9:d3:fb:88:1a:5e:67:e3:f5:29:99:99:c6:79:7d:e6:21:
e3:8d:a2:fd:b8:69:21:25:0c:20:4f:a5:14:66:2e:62:d9:ea:
1e:d6:52:b8:2a:e5:b6:c3:86:a7:c2:d5:52:40:17:f8:9b:01:
77:5e:89:39:06:b3:c9:1a:b4:d7:b5:55:56:79:39:9a:7b:57:
79:77:84:b4:e3:78:f6:2c:2d:cf:60:ee:34:ab:70:9c:c5:f1:
a2:a9:e8:31:fd:58:6c:cf:0a:a4:ef:53:c9:a4:3a:88:47:ee:
bc:f9:26:57:dc:07:44:e7:e2:d3:85:85:dc:17:3e:61:ed:cb:
a1:97:4c:1b:43:16:cd:34:ed:25:5b:0c:c7:88:b5:71:65:7c:
97:4e:47:d1:51:2a:21:ca:6b:41:75:d0:1c:97:51:4c:75:36:
28:00:0e:e5:bf:ec:e4:69:15:ab:d4:5b:d4:cd:6a:70:23:c8:
de:0c:1b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:42 2025 by rpki-client