Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435323a3a2f34372d3438203d3e20323135393536.roa
File: 326131343a373538303a656435323a3a2f34372d3438203d3e20323135393536.roa (raw, json)
Hash identifier: 5LBsCAzjASb6G1ME+AJzOffwvS3wGMpN+GN7+FO3R7Q=
Subject key identifier: 32:3E:C6:D8:10:3B:D2:7A:60:15:B4:39:34:E0:09:14:39:29:92:2A
Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial: 2626AF0A49AD9BA860D9FD6A92FD905583D6DB41
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435323a3a2f34372d3438203d3e20323135393536.roa
Signing time: Sat 08 Mar 2025 00:13:05 +0000
ROA not before: Sat 08 Mar 2025 00:08:05 +0000
ROA not after: Sat 07 Mar 2026 00:13:05 +0000
asID: 215956
IP address blocks: 2a14:7580:ed52::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:26:af:0a:49:ad:9b:a8:60:d9:fd:6a:92:fd:90:55:83:d6:db:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Validity
Not Before: Mar 8 00:08:05 2025 GMT
Not After : Mar 7 00:13:05 2026 GMT
Subject: CN=323EC6D8103BD27A6015B43934E009143929922A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:5b:c2:50:fe:e1:a1:c7:dc:c9:98:b4:9f:
b2:27:02:81:73:7d:a6:e0:12:38:56:1e:dd:ae:12:
be:fd:11:04:ba:84:44:a0:f2:33:3b:19:62:25:9b:
93:6a:46:c4:b5:09:c0:c8:bb:91:0e:e8:98:b9:5c:
49:0a:41:d0:4f:3a:cd:50:17:71:63:3b:89:42:22:
06:9c:c8:cd:80:a5:15:1f:9a:64:c4:8a:b7:30:f6:
fd:ac:32:a3:73:4d:fc:1a:85:cf:6c:f7:ee:0f:09:
9f:11:b6:49:bc:06:12:df:41:1c:c7:ba:d1:86:72:
0b:3f:7e:ce:5f:a4:1f:e7:2c:30:0f:ef:3a:46:5f:
f0:13:d8:68:b9:96:7a:fa:2b:25:68:a7:de:44:da:
82:04:1e:46:ba:f8:66:7b:15:51:35:1f:8a:c2:6e:
ae:14:48:6f:08:c9:a5:2b:b2:c5:bb:fd:87:2f:b5:
72:4e:de:4c:e0:91:2f:e2:27:4e:66:ab:00:ea:94:
46:d2:32:58:1a:bb:e1:57:53:69:be:00:1c:51:39:
07:2a:5d:2a:74:62:55:5f:9c:5f:e3:e7:75:e9:e6:
60:f0:de:3d:97:df:22:0a:ef:2f:56:af:bb:b6:d6:
a6:ef:b0:13:f1:88:8c:ea:2e:2a:92:95:4f:d5:ef:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3E:C6:D8:10:3B:D2:7A:60:15:B4:39:34:E0:09:14:39:29:92:2A
X509v3 Authority Key Identifier:
keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435323a3a2f34372d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ed52::/47
Signature Algorithm: sha256WithRSAEncryption
a5:26:93:99:21:72:ed:2c:d4:b8:e7:9e:72:a5:8f:3c:bd:54:
50:ec:5c:c7:a1:85:2d:f4:1f:c5:d9:ce:a1:4e:ff:35:02:cc:
3c:83:4d:dd:50:19:ad:5d:03:a5:f1:52:e2:bb:f2:02:c8:73:
f3:af:af:a3:d5:57:8c:4a:a0:f5:04:94:7c:43:05:f5:0a:a4:
81:f8:9b:e0:e9:37:85:95:d8:ef:ff:c9:53:de:59:a4:0a:fd:
5f:2d:31:cb:b2:b9:d7:eb:0d:64:30:af:94:74:6c:2f:71:3b:
4d:9b:af:05:5a:85:04:7a:cf:aa:96:d3:94:91:16:cb:11:f1:
1c:7d:f9:bc:80:0a:90:ee:f7:0e:c2:77:b0:b1:9d:ac:59:af:
b9:e5:11:bf:2b:7f:92:ca:d0:82:5c:24:d5:f0:15:36:d3:ec:
5c:78:0f:97:6d:70:cd:b5:10:05:a6:d3:db:c9:02:73:d5:3d:
f5:65:e2:a2:34:49:d2:99:34:cb:f4:a6:65:ca:28:27:45:45:
30:7e:44:af:9d:20:94:1b:2b:86:24:b7:7d:5b:e4:a4:37:f1:
0f:62:12:f2:77:b2:d4:e3:cb:f3:b7:d6:93:8a:af:b7:2b:2e:
b0:d1:ff:11:d7:fe:ff:41:08:7b:1d:be:f6:d1:84:73:2f:46:
68:37:36:76
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUJiavCkmtm6hg2f1qkv2QVYPW20EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5
QjhEOTAyQjAeFw0yNTAzMDgwMDA4MDVaFw0yNjAzMDcwMDEzMDVaMDMxMTAvBgNV
BAMTKDMyM0VDNkQ4MTAzQkQyN0E2MDE1QjQzOTM0RTAwOTE0MzkyOTkyMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TFvCUP7hocfcyZi0n7InAoFz
fabgEjhWHt2uEr79EQS6hESg8jM7GWIlm5NqRsS1CcDIu5EO6Ji5XEkKQdBPOs1Q
F3FjO4lCIgacyM2ApRUfmmTEircw9v2sMqNzTfwahc9s9+4PCZ8Rtkm8BhLfQRzH
utGGcgs/fs5fpB/nLDAP7zpGX/AT2Gi5lnr6KyVop95E2oIEHka6+GZ7FVE1H4rC
bq4USG8IyaUrssW7/YcvtXJO3kzgkS/iJ05mqwDqlEbSMlgau+FXU2m+ABxROQcq
XSp0YlVfnF/j53Xp5mDw3j2X3yIK7y9Wr7u21qbvsBPxiIzqLiqSlU/V71l7AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUMj7G2BA70npgFbQ5NOAJFDkpkiowHwYDVR0j
BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz
REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz
NDNhMzczNTM4MzAzYTY1NjQzNTMyM2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcBKhR1gO1SMA0GCSqGSIb3DQEBCwUAA4IBAQCl
JpOZIXLtLNS4555ypY88vVRQ7FzHoYUt9B/F2c6hTv81Asw8g03dUBmtXQOl8VLi
u/ICyHPzr6+j1VeMSqD1BJR8QwX1CqSB+Jvg6TeFldjv/8lT3lmkCv1fLTHLsrnX
6w1kMK+UdGwvcTtNm68FWoUEes+qltOUkRbLEfEcffm8gAqQ7vcOwnewsZ2sWa+5
5RG/K3+SytCCXCTV8BU20+xceA+XbXDNtRAFptPbyQJz1T31ZeKiNEnSmTTL9KZl
yignRUUwfkSvnSCUGyuGJLd9W+SkN/EPYhLyd7LU48vzt9aTiq+3Ky6w0f8R1/7/
QQh7Hb720YRzL0ZoNzZ2
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:26 2025 by rpki-client