Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435633a3a2f34362d3438203d3e20323135393536.roa
File: 326131343a373538303a656435633a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier: jevL3d6TTOzkxi3ZNaZX4Cgq0RHHKBz0nBQrG1EMVtQ=
Subject key identifier: 2C:46:2E:F4:0B:2F:9E:7D:8B:11:15:44:4E:0E:A7:BA:99:2E:06:EF
Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial: 1078768D010EE4F66652E4132748D145F1E4E8C2
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435633a3a2f34362d3438203d3e20323135393536.roa
Signing time: Sat 08 Mar 2025 00:11:33 +0000
ROA not before: Sat 08 Mar 2025 00:06:33 +0000
ROA not after: Sat 07 Mar 2026 00:11:33 +0000
asID: 215956
IP address blocks: 2a14:7580:ed5c::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:78:76:8d:01:0e:e4:f6:66:52:e4:13:27:48:d1:45:f1:e4:e8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Validity
Not Before: Mar 8 00:06:33 2025 GMT
Not After : Mar 7 00:11:33 2026 GMT
Subject: CN=2C462EF40B2F9E7D8B1115444E0EA7BA992E06EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4b:a3:46:11:a4:a8:2a:ed:0a:4b:5c:b1:6c:
5f:d3:25:39:ae:83:50:bc:80:c6:80:48:4a:c8:61:
4f:0f:60:ef:70:2c:cb:0a:8d:a3:a1:90:a8:2b:3b:
78:16:62:e4:8d:3e:05:f0:74:27:20:ca:0a:4b:6f:
c3:c3:4c:6a:ea:e7:f0:b4:c6:14:51:70:82:07:00:
0b:67:55:f4:95:bf:13:03:37:92:56:19:c8:61:8b:
77:c4:59:f0:ba:2f:a3:1c:25:c1:1a:d4:f6:25:35:
3c:e3:66:8e:8c:03:65:a2:a9:0c:74:bc:ea:6d:52:
c9:ce:d2:a0:e1:f4:b6:99:63:4f:62:4b:b5:db:c8:
0f:d5:d4:7b:8e:6c:3b:6c:6e:2d:07:d0:1b:42:ac:
00:90:79:43:68:51:ad:be:b3:0f:1b:49:1b:d4:d9:
b8:0e:88:57:d5:c9:82:c1:9c:29:a8:7e:6f:67:96:
48:db:4a:b3:c1:6c:76:97:3b:05:b9:46:87:e3:8e:
34:f3:3b:69:74:72:04:f5:c9:dd:91:6a:21:a0:5f:
b9:ef:49:b8:41:66:d0:32:c7:87:ad:61:66:ab:c9:
30:dc:03:c8:38:ab:5b:b6:cb:f0:21:93:e1:8e:ca:
72:11:fe:2c:8e:54:a0:5b:30:f0:6e:b7:a5:51:7e:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:46:2E:F4:0B:2F:9E:7D:8B:11:15:44:4E:0E:A7:BA:99:2E:06:EF
X509v3 Authority Key Identifier:
keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435633a3a2f34362d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ed5c::/46
Signature Algorithm: sha256WithRSAEncryption
51:c4:a8:c0:08:08:1d:a6:c3:67:ea:ea:64:8d:b4:3a:26:4f:
be:80:ca:47:f5:ee:f7:bb:9a:70:fd:7a:b2:29:d7:bf:f7:81:
a2:a9:0d:51:2b:39:56:d9:c1:c5:f4:c2:34:64:e6:3a:c2:13:
f8:e5:5c:c8:89:ae:92:64:19:30:d4:e8:c1:be:53:16:c8:41:
96:60:3f:5b:6a:fd:c2:b0:33:ba:54:42:11:ac:65:58:3a:c8:
43:33:52:bf:30:99:0f:a8:36:bf:eb:15:54:6b:e7:ee:14:44:
a8:ba:d5:8f:31:0f:53:b1:5a:95:a3:68:65:a9:22:59:98:e7:
e3:d5:ef:9e:b8:f4:3c:67:8f:a2:2c:85:78:0f:09:56:43:07:
6c:55:9e:b2:eb:14:fd:32:2b:ce:75:3b:26:c6:15:e2:bd:61:
ce:07:3b:d3:8e:a2:81:14:96:32:08:58:5f:4e:1f:04:42:64:
6a:1a:1e:fc:f4:42:7d:9f:29:b0:28:52:ad:c2:0c:a2:37:49:
49:cc:a6:54:51:f6:f0:1b:f4:05:a1:25:99:f7:a0:37:37:91:
c0:69:d4:a8:00:bc:e5:10:d3:6e:43:a5:84:ce:83:7e:a3:26:
6e:4a:01:3e:1d:20:f5:c9:8e:17:1b:ec:d7:51:b9:8f:00:45:
ea:25:49:62
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUEHh2jQEO5PZmUuQTJ0jRRfHk6MIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5
QjhEOTAyQjAeFw0yNTAzMDgwMDA2MzNaFw0yNjAzMDcwMDExMzNaMDMxMTAvBgNV
BAMTKDJDNDYyRUY0MEIyRjlFN0Q4QjExMTU0NDRFMEVBN0JBOTkyRTA2RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDS6NGEaSoKu0KS1yxbF/TJTmu
g1C8gMaASErIYU8PYO9wLMsKjaOhkKgrO3gWYuSNPgXwdCcgygpLb8PDTGrq5/C0
xhRRcIIHAAtnVfSVvxMDN5JWGchhi3fEWfC6L6McJcEa1PYlNTzjZo6MA2WiqQx0
vOptUsnO0qDh9LaZY09iS7XbyA/V1HuObDtsbi0H0BtCrACQeUNoUa2+sw8bSRvU
2bgOiFfVyYLBnCmofm9nlkjbSrPBbHaXOwW5RofjjjTzO2l0cgT1yd2RaiGgX7nv
SbhBZtAyx4etYWaryTDcA8g4q1u2y/Ahk+GOynIR/iyOVKBbMPBut6VRfq6nAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQULEYu9Asvnn2LERVETg6nupkuBu8wHwYDVR0j
BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz
REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz
NDNhMzczNTM4MzAzYTY1NjQzNTYzM2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcCKhR1gO1cMA0GCSqGSIb3DQEBCwUAA4IBAQBR
xKjACAgdpsNn6upkjbQ6Jk++gMpH9e73u5pw/XqyKde/94GiqQ1RKzlW2cHF9MI0
ZOY6whP45VzIia6SZBkw1OjBvlMWyEGWYD9bav3CsDO6VEIRrGVYOshDM1K/MJkP
qDa/6xVUa+fuFESoutWPMQ9TsVqVo2hlqSJZmOfj1e+euPQ8Z4+iLIV4DwlWQwds
VZ6y6xT9MivOdTsmxhXivWHOBzvTjqKBFJYyCFhfTh8EQmRqGh789EJ9nymwKFKt
wgyiN0lJzKZUUfbwG/QFoSWZ96A3N5HAadSoALzlENNuQ6WEzoN+oyZuSgE+HSD1
yY4XG+zXUbmPAEXqJUli
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:30 2025 by rpki-client