Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530353a3a2f34382d3438203d3e20323135393536.roa
File: 326131343a373538303a656530353a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier: XEeNqK7YkE14OYGoH5IsFHLKrbY3feuKy7Y5ww9fcA0=
Subject key identifier: 42:9C:EA:46:17:DF:A4:43:2F:EA:89:B7:4E:B0:8C:94:C4:3F:6A:74
Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial: 33F9EB96532762F042FCBCEDDE10444886BE33B5
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530353a3a2f34382d3438203d3e20323135393536.roa
Signing time: Mon 03 Mar 2025 00:07:21 +0000
ROA not before: Mon 03 Mar 2025 00:02:21 +0000
ROA not after: Mon 02 Mar 2026 00:07:21 +0000
asID: 215956
IP address blocks: 2a14:7580:ee05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f9:eb:96:53:27:62:f0:42:fc:bc:ed:de:10:44:48:86:be:33:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Validity
Not Before: Mar 3 00:02:21 2025 GMT
Not After : Mar 2 00:07:21 2026 GMT
Subject: CN=429CEA4617DFA4432FEA89B74EB08C94C43F6A74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ed:75:1f:35:86:74:3e:b9:de:c8:30:0c:84:
18:04:38:9e:4a:e9:71:24:a5:f6:8f:98:3b:50:eb:
4f:9b:0d:f2:98:40:11:81:48:fb:0a:cd:88:b8:7f:
d1:7b:16:35:7b:c2:20:11:d9:03:31:17:f9:2b:17:
84:34:9e:63:13:3a:7a:69:30:03:ae:ed:7f:85:b8:
e1:e8:35:5a:87:6a:c8:48:0e:b9:cd:3c:b3:78:27:
65:75:1d:ea:e3:28:6f:60:be:25:bc:ae:da:5c:a9:
ca:2f:53:71:ea:69:e9:df:88:b4:27:f6:40:63:35:
4d:c0:48:2d:0e:8d:07:a1:01:58:f8:3b:b3:7a:e6:
d6:7c:c1:21:53:4a:ca:84:a8:fb:68:2c:ba:86:e9:
30:01:6c:65:bd:3b:8a:26:40:66:49:fb:35:05:b1:
b9:99:e0:ed:29:ee:19:c2:3e:d5:3b:31:de:08:5d:
4f:4f:20:47:26:86:eb:0f:4b:3c:c1:d9:53:97:0f:
5b:15:cf:63:f8:de:f5:89:e4:aa:02:18:be:67:5c:
ab:a0:c5:a9:30:18:0b:75:ff:4c:1d:2d:c7:3e:c9:
e8:87:6b:71:ac:be:ef:82:35:75:2f:f9:b2:4e:38:
44:ad:3c:1a:c1:4d:12:8d:a8:03:ac:fb:cf:b4:58:
db:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9C:EA:46:17:DF:A4:43:2F:EA:89:B7:4E:B0:8C:94:C4:3F:6A:74
X509v3 Authority Key Identifier:
keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530353a3a2f34382d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ee05::/48
Signature Algorithm: sha256WithRSAEncryption
70:19:b2:d1:1c:06:bb:57:85:aa:9b:6c:29:13:0b:ec:23:64:
f0:37:66:f4:2d:ce:a7:d7:5d:89:d2:6a:c6:86:ab:e4:e0:f9:
fd:60:b7:55:ad:63:73:30:5e:09:06:af:a7:2e:b3:0f:ce:42:
09:2d:4b:fe:33:fc:c6:3f:5f:ef:8d:04:46:2f:dc:a9:2e:e1:
f9:d8:8d:92:dc:5d:3b:a9:be:c5:d5:41:ea:36:12:4d:de:d1:
4f:23:63:28:73:ac:e8:e6:b3:ae:d5:43:be:9b:6f:5b:ec:41:
a8:a5:f5:34:95:15:29:79:4c:74:a4:01:e7:dd:07:6b:43:08:
fe:77:b5:28:8d:57:5c:df:50:cd:b0:48:4f:fc:5e:fe:b4:cf:
fe:bc:07:be:c3:7f:4f:2b:09:bd:c3:ec:59:68:ef:cf:68:5b:
f5:93:24:96:e1:34:67:ef:7d:a6:52:05:f7:25:be:c0:09:43:
f9:4b:90:2e:68:c4:32:2f:36:e3:e7:aa:17:38:56:db:d6:b7:
f0:fe:a1:5b:27:8f:a5:34:2b:98:47:27:28:97:60:f6:1d:1b:
fc:ba:a7:1e:68:a1:ab:17:57:b5:1d:9f:67:a8:2e:fd:48:9d:
4c:0e:af:3d:a7:65:10:fd:b6:87:c2:58:37:a6:82:99:a9:60:
92:20:e9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:09 2025 by rpki-client