Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530303a3a2f34382d3438203d3e20323135393536.roa
File: 326131343a373538303a656530303a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier: 5a8j2++17nNiorsFJpHeqHz8EMAsvxoBsPo3lbx1QS4=
Subject key identifier: 06:82:97:A2:AF:B6:65:F2:C9:A0:F5:2A:C6:41:96:FB:63:69:CA:B9
Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial: 110358B23FEDD43ADB61A0FC20A0A1F8CD7B3546
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530303a3a2f34382d3438203d3e20323135393536.roa
Signing time: Mon 03 Mar 2025 00:05:07 +0000
ROA not before: Mon 03 Mar 2025 00:00:07 +0000
ROA not after: Mon 02 Mar 2026 00:05:07 +0000
asID: 215956
IP address blocks: 2a14:7580:ee00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:03:58:b2:3f:ed:d4:3a:db:61:a0:fc:20:a0:a1:f8:cd:7b:35:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Validity
Not Before: Mar 3 00:00:07 2025 GMT
Not After : Mar 2 00:05:07 2026 GMT
Subject: CN=068297A2AFB665F2C9A0F52AC64196FB6369CAB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a5:a8:66:29:8e:7b:63:6c:8a:e9:8c:c7:af:
2a:cc:f2:a0:25:df:22:0c:4c:b5:fb:53:81:da:53:
4c:0f:21:0e:78:eb:ef:fc:19:99:3b:8e:ae:77:27:
fc:c4:57:ba:64:b7:99:c9:15:0b:c9:3b:8e:d3:b9:
08:65:a5:89:ca:ff:95:8f:72:29:d4:95:9b:14:4e:
21:fd:f7:cf:84:75:c7:8b:cb:2a:89:30:2a:b5:47:
66:10:43:f8:e7:7d:a1:a4:92:aa:e9:bb:09:13:a6:
a9:b7:2b:25:06:9f:75:76:16:7b:6d:c5:40:a1:75:
20:e0:53:39:99:ce:3f:c8:8b:fe:c3:4f:84:e3:20:
58:ef:df:ee:82:56:8c:f5:c9:61:19:bc:a0:f5:a2:
99:ae:9a:ca:58:90:96:fb:6f:6c:91:37:f3:a2:48:
4c:07:c1:72:f8:32:3b:4c:70:a4:2d:87:76:90:65:
15:9e:db:6b:52:4a:0e:70:6f:bc:c0:46:2f:f4:cf:
72:16:83:d5:8d:2c:f3:0f:f6:45:87:5f:49:5f:43:
98:64:58:d4:58:99:d4:8a:82:fe:08:fe:6c:60:a9:
38:4d:25:03:ff:fa:97:fd:db:00:7c:b9:38:b9:40:
0e:1b:80:aa:c2:cc:31:68:cc:a5:16:5e:a4:83:20:
32:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:82:97:A2:AF:B6:65:F2:C9:A0:F5:2A:C6:41:96:FB:63:69:CA:B9
X509v3 Authority Key Identifier:
keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530303a3a2f34382d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ee00::/48
Signature Algorithm: sha256WithRSAEncryption
7c:f5:71:18:49:82:ff:62:15:d4:f1:d5:15:73:c7:cf:7d:e9:
df:33:16:06:80:e3:8a:84:fd:fb:3a:c6:88:11:ad:24:0c:ed:
c3:ad:0b:96:a8:a6:1e:e9:cb:37:71:b9:01:a5:dc:d7:8e:94:
1c:8a:97:4b:e5:e6:af:30:3b:61:3b:1a:28:7f:77:84:91:70:
85:62:3a:11:c1:39:09:7d:62:9e:ad:e9:d6:1f:69:19:ff:f4:
59:f1:64:16:19:12:85:12:da:fd:80:ee:8a:b8:f2:3b:d5:10:
9b:60:a1:6c:05:c0:db:c7:64:d6:63:40:15:fc:1d:c8:71:2b:
34:d6:82:9e:3e:4e:78:1c:5f:3a:75:f1:1e:01:60:f3:9a:59:
92:cc:98:a0:e8:5e:74:94:e7:2e:22:c0:9a:68:f1:44:35:b7:
22:3b:cb:0b:c3:4a:61:d6:1d:db:1e:f7:c1:9b:5b:4a:4b:53:
46:23:e4:df:06:c3:f6:db:cc:02:9b:b1:84:17:1a:f4:96:62:
4b:d6:35:c3:74:14:bb:8f:9c:0d:70:85:cc:9e:bc:2d:40:45:
c2:6f:fd:99:ce:f4:32:69:50:5c:f3:1b:91:f5:90:e1:0a:b7:
48:e3:7c:07:88:e3:fc:51:97:1c:f3:1a:dc:23:8c:08:56:92:
ca:6c:33:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:18 2025 by rpki-client