Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436323a3a2f34372d3438203d3e20323135393536.roa
File: 326131343a373538303a656436323a3a2f34372d3438203d3e20323135393536.roa (raw, json)
Hash identifier: Kqzub2qIs1qegd52eIRw8Wsd7KmqqBpaDbntybnXZCs=
Subject key identifier: CB:C9:A9:82:21:63:46:B1:3D:97:60:E8:03:6E:F7:DC:76:F8:81:3B
Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial: 2C5A97BAD70572C88361CE6477134A385C461249
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436323a3a2f34372d3438203d3e20323135393536.roa
Signing time: Sat 08 Mar 2025 00:10:29 +0000
ROA not before: Sat 08 Mar 2025 00:05:29 +0000
ROA not after: Sat 07 Mar 2026 00:10:29 +0000
asID: 215956
IP address blocks: 2a14:7580:ed62::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:5a:97:ba:d7:05:72:c8:83:61:ce:64:77:13:4a:38:5c:46:12:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Validity
Not Before: Mar 8 00:05:29 2025 GMT
Not After : Mar 7 00:10:29 2026 GMT
Subject: CN=CBC9A982216346B13D9760E8036EF7DC76F8813B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:50:77:f7:c8:ad:ab:ec:09:ae:56:a1:4f:5b:
a5:5d:a7:ce:b5:29:20:57:69:29:21:e2:0a:d4:49:
ec:bb:6a:f1:86:54:ee:a7:12:95:06:c4:a8:17:f9:
83:56:44:53:53:38:ab:1c:0e:36:8f:c7:07:b6:88:
28:3f:9b:b1:ca:e7:75:00:55:3c:3e:f5:6b:38:72:
d0:95:85:31:2c:0c:7e:71:66:12:24:4e:7e:75:6f:
1d:43:b0:85:13:f6:45:49:ce:75:aa:03:eb:a1:64:
64:6b:75:f6:8f:7b:b4:b4:8c:72:e6:08:d6:72:8b:
24:cb:76:a6:b5:fb:87:9f:28:4c:be:5b:be:8f:36:
8d:ba:1a:d0:10:f4:bf:4a:81:25:22:93:fa:0f:51:
f1:c3:e9:ec:69:a2:ae:d2:bb:0f:ab:fd:14:56:a1:
b2:3b:76:28:23:70:61:01:4f:8c:66:00:5f:d1:02:
91:fa:80:26:ae:5c:89:1b:ab:dc:c2:a6:17:8a:92:
92:40:73:de:fa:cf:d5:2d:23:73:90:88:c7:7c:b2:
6a:7f:98:b7:4a:5e:4d:21:98:4e:36:6c:ab:7d:36:
07:41:b9:d7:e3:6f:44:a5:3c:90:d8:13:7d:85:c5:
b4:99:b2:4f:9b:48:cc:ea:e4:c0:13:11:cd:a5:dd:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C9:A9:82:21:63:46:B1:3D:97:60:E8:03:6E:F7:DC:76:F8:81:3B
X509v3 Authority Key Identifier:
keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436323a3a2f34372d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ed62::/47
Signature Algorithm: sha256WithRSAEncryption
80:81:57:79:d0:13:1e:ae:dc:6b:a6:c7:09:34:13:90:85:cd:
61:ba:ec:cd:68:74:7b:a4:c7:13:61:24:7e:98:8c:63:70:c2:
07:bb:f5:51:be:80:ce:68:37:08:37:ef:69:e0:90:7d:f2:7f:
89:8a:5a:be:b9:ad:94:75:00:a1:ba:ed:08:58:e3:55:0a:64:
21:18:f2:a5:fe:9a:af:bc:b7:40:f4:5d:82:51:d6:32:65:c8:
e1:86:b4:2f:e1:66:dd:f3:bf:4a:11:0c:3a:95:1e:4d:fa:dd:
c2:4e:33:69:7a:8f:c3:0c:69:e3:b1:1f:db:b5:05:5c:7c:63:
5a:01:fe:59:c4:0a:a2:05:29:ec:ac:78:de:a3:6e:b8:40:8b:
c7:76:a8:87:36:e6:1d:7d:fd:cb:67:e2:38:21:06:c6:f0:96:
b2:8a:36:f3:5c:f0:bc:2c:a1:57:e4:d8:9f:76:ac:80:18:01:
ad:7f:02:26:f8:13:f0:06:af:d3:cc:84:2f:34:e6:a5:b7:18:
d4:bf:42:56:be:a8:02:10:2a:b9:ed:08:fe:e1:d8:27:32:02:
ed:2c:38:68:eb:e2:84:b3:56:6e:aa:67:39:91:c6:76:29:49:
ff:05:a2:a5:05:ab:7c:a9:c1:ba:00:ce:48:ac:ab:6b:12:f3:
a7:b1:0e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:01 2025 by rpki-client