Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436343a3a2f34372d3438203d3e20323135393536.roa
File: 326131343a373538303a656436343a3a2f34372d3438203d3e20323135393536.roa (raw, json)
Hash identifier: dtCHKVVK8KAOqV/eycsypDEDUcEZAIfXsuNiLq8uz9U=
Subject key identifier: 03:15:F8:A6:4D:59:A0:BC:7F:42:11:12:CB:F1:63:EC:FC:07:71:63
Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial: 09E1AD1E850EDE0855EFFD449ACA0136A427D840
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436343a3a2f34372d3438203d3e20323135393536.roa
Signing time: Sat 08 Mar 2025 00:09:48 +0000
ROA not before: Sat 08 Mar 2025 00:04:48 +0000
ROA not after: Sat 07 Mar 2026 00:09:48 +0000
asID: 215956
IP address blocks: 2a14:7580:ed64::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e1:ad:1e:85:0e:de:08:55:ef:fd:44:9a:ca:01:36:a4:27:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Validity
Not Before: Mar 8 00:04:48 2025 GMT
Not After : Mar 7 00:09:48 2026 GMT
Subject: CN=0315F8A64D59A0BC7F421112CBF163ECFC077163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5c:fb:c6:32:3c:43:ae:28:4e:86:78:89:69:
30:a4:24:ee:0b:57:7d:7b:eb:f3:09:79:bd:c5:3f:
8b:d9:c3:02:df:c5:ab:22:76:ee:64:d3:0d:a9:93:
7f:0c:e7:b0:49:5f:74:f8:26:3f:7f:0f:2e:29:f6:
e9:cd:8f:c4:15:5c:bd:1e:d2:29:a6:7b:14:40:fe:
44:dd:73:6f:62:c5:3b:39:88:46:0f:36:0f:54:c9:
2b:86:32:fd:07:cd:b0:22:b7:3e:3c:d8:a0:96:cb:
9b:a8:fb:37:3e:34:2c:23:34:d3:16:15:25:46:c5:
1b:c2:db:bd:32:2d:91:b6:95:a5:44:36:c1:28:fe:
70:6c:03:fa:37:43:38:ac:c8:03:38:25:e2:8c:c5:
69:38:8b:6d:19:4d:cd:6b:b4:14:6c:21:81:09:27:
38:70:44:03:d8:19:40:85:39:44:0b:64:10:6b:9e:
67:97:3e:59:15:f1:18:1e:a7:5e:9f:04:fd:eb:89:
09:88:60:92:a1:5c:b0:86:42:00:b1:64:22:4a:fe:
9c:fb:ae:d9:e8:5f:78:c3:8a:4c:5b:32:06:65:13:
da:da:62:b9:ac:23:f1:92:7d:cb:c8:45:27:8a:71:
27:31:e4:8d:3f:df:3d:f8:08:52:7f:70:e7:c5:0c:
79:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:15:F8:A6:4D:59:A0:BC:7F:42:11:12:CB:F1:63:EC:FC:07:71:63
X509v3 Authority Key Identifier:
keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436343a3a2f34372d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ed64::/47
Signature Algorithm: sha256WithRSAEncryption
a6:1c:b8:d3:dd:bb:76:94:0f:a2:49:08:32:f0:81:88:0e:e0:
6e:8f:25:f0:03:a7:70:ed:3d:12:4a:c7:f7:d6:0e:e3:30:7c:
32:39:7c:13:2f:07:23:f8:07:7c:42:09:f6:37:7f:3f:c5:99:
53:f1:54:eb:45:49:64:52:e6:07:55:cb:ca:78:0b:ea:32:10:
29:4b:85:d5:b8:7d:53:22:21:a7:32:cb:c9:b3:17:50:8f:4f:
e6:92:40:98:59:62:03:a4:4c:39:3e:80:df:0a:47:e4:df:de:
96:1a:9b:00:f1:77:c0:72:9e:57:82:c9:52:06:c6:ac:ea:17:
ef:56:f3:01:3e:ed:fd:90:e8:f7:4e:39:8e:81:6b:9c:e2:ee:
5a:72:7f:b1:d1:8c:e1:02:20:d0:7a:85:74:79:a0:6a:56:92:
66:7c:46:b4:46:f5:4a:f6:fa:e0:5d:a4:36:2b:ee:a0:c7:8b:
fb:bc:79:21:c7:ff:d2:e0:18:dd:73:6f:17:97:f6:64:3c:4c:
87:6a:d0:43:5e:2b:3c:33:34:f5:15:7e:a0:b7:bc:11:f4:40:
2d:bd:7e:88:14:25:0e:67:3b:c2:0e:2a:d5:1a:09:85:b0:0b:
14:fe:0f:56:6a:1d:61:ac:ea:08:86:5e:7e:92:88:73:3e:a6:
a4:5f:ea:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:37:10 2025 by rpki-client