Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa
File: 326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa (raw, json)
Hash identifier: vA54r+KOp5+PscS1XOWAUJZ8wHBBIy0uKiwt+tVl7WQ=
Subject key identifier: F9:3C:5E:46:E2:10:D7:3C:96:5B:CB:E9:6A:C7:F6:A0:58:F2:40:15
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 13092371C5591FFAEF8C4E19DE7EF98A5D4D4745
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa
Signing time: Thu 07 Mar 2024 16:12:42 +0000
ROA not before: Thu 07 Mar 2024 16:07:42 +0000
ROA not after: Thu 06 Mar 2025 16:12:42 +0000
asID: 215365
IP address blocks: 2a14:7c0:1000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:09:23:71:c5:59:1f:fa:ef:8c:4e:19:de:7e:f9:8a:5d:4d:47:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 7 16:07:42 2024 GMT
Not After : Mar 6 16:12:42 2025 GMT
Subject: CN=F93C5E46E210D73C965BCBE96AC7F6A058F24015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5e:d0:3f:5a:3b:75:40:ef:e9:8f:28:03:4a:
51:f0:9e:56:41:e7:9c:d2:e5:5e:4f:ff:4f:80:50:
f5:40:ab:77:d7:24:a8:bb:1a:82:af:14:47:e7:17:
cf:4f:1f:69:f1:ab:99:42:c2:77:fc:2e:8a:72:dc:
79:70:2b:c4:bf:1c:26:17:6f:80:b9:3e:bb:35:12:
76:f9:1a:f0:fe:59:d1:74:a7:a5:38:cd:ee:8c:8b:
fd:25:f3:2d:73:66:49:ef:e3:6e:b0:19:d5:91:ea:
d1:9e:18:55:9f:1b:15:9a:37:45:ba:a3:18:b8:79:
f1:fa:a0:c5:81:d1:f9:ff:fb:89:3f:a7:41:0e:15:
35:04:eb:90:c3:6c:a6:5c:2d:8a:ac:10:2b:d2:a2:
40:66:cc:77:20:47:7a:12:37:a4:20:8e:8e:2e:d3:
1a:94:3f:7f:12:ac:e1:39:b5:3b:60:f1:95:0a:f3:
de:e9:42:b1:1e:65:29:58:5e:2a:8e:b9:3c:23:41:
27:2d:91:bf:49:b8:7c:0d:ad:cc:18:e3:8f:d1:fa:
7e:fc:4a:0e:db:82:74:38:ef:ef:44:8b:21:eb:0e:
e7:34:07:76:cf:c9:bf:6f:5d:7d:36:94:26:9d:49:
41:06:8c:a3:37:3a:94:3d:a7:73:c7:d8:bf:a7:22:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3C:5E:46:E2:10:D7:3C:96:5B:CB:E9:6A:C7:F6:A0:58:F2:40:15
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:1000::/38
Signature Algorithm: sha256WithRSAEncryption
36:bd:09:1b:0d:28:ce:8f:fb:ce:5e:30:60:27:73:d9:de:c8:
2c:26:6b:49:fd:5e:2b:5d:39:92:97:9c:f3:bf:e0:8b:18:16:
33:b8:38:bf:bc:22:4c:ae:71:ed:d7:d4:59:ff:2e:da:73:e0:
4a:d4:eb:9b:ea:1b:4c:d1:26:20:6a:ca:27:85:d3:d9:ea:7a:
3d:f7:0e:ea:c7:cd:d7:ef:4b:46:3c:05:0d:b2:44:73:1f:2b:
30:31:06:25:ee:e8:d7:6d:a5:80:c6:99:1b:9f:43:1c:1e:25:
f6:86:fd:91:48:a0:b7:da:24:88:d4:32:4e:a9:00:72:03:e5:
8e:58:b2:85:fd:58:38:7c:05:e3:39:f0:74:82:fc:8b:0e:52:
cc:a9:00:d1:cb:4b:d4:50:ce:e1:d8:6f:3e:db:7c:79:03:fa:
50:64:86:e3:0b:ca:15:55:cd:42:b3:61:7f:03:bc:e6:44:55:
4a:a2:ef:ab:f6:d9:f5:43:28:ef:9a:9a:85:2e:c2:9c:b4:06:
3a:d4:e0:8f:ae:16:55:45:d5:d7:bf:e8:9d:24:bd:a6:aa:86:
b9:c8:08:df:bf:1f:81:b1:64:29:8b:05:de:18:e1:f3:4d:87:
a6:e0:05:47:77:00:44:da:34:8b:87:75:a7:98:e6:fd:9f:e4:
93:47:fe:7f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUEwkjccVZH/rvjE4Z3n75il1NR0UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDAzMDcxNjA3NDJaFw0yNTAzMDYxNjEyNDJaMDMxMTAvBgNV
BAMTKEY5M0M1RTQ2RTIxMEQ3M0M5NjVCQ0JFOTZBQzdGNkEwNThGMjQwMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2XtA/Wjt1QO/pjygDSlHwnlZB
55zS5V5P/0+AUPVAq3fXJKi7GoKvFEfnF89PH2nxq5lCwnf8Lopy3HlwK8S/HCYX
b4C5Prs1Enb5GvD+WdF0p6U4ze6Mi/0l8y1zZknv426wGdWR6tGeGFWfGxWaN0W6
oxi4efH6oMWB0fn/+4k/p0EOFTUE65DDbKZcLYqsECvSokBmzHcgR3oSN6Qgjo4u
0xqUP38SrOE5tTtg8ZUK897pQrEeZSlYXiqOuTwjQSctkb9JuHwNrcwY44/R+n78
Sg7bgnQ47+9EiyHrDuc0B3bPyb9vXX02lCadSUEGjKM3OpQ9p3PH2L+nIt1DAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU+TxeRuIQ1zyWW8vpasf2oFjyQBUwHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzMDNh
MzEzMDMwMzAzYTNhMmYzMzM4MmQzMzM4MjAzZDNlMjAzMjMxMzUzMzM2MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgIqFAfAEDANBgkqhkiG9w0BAQsFAAOCAQEANr0JGw0ozo/7zl4wYCdz
2d7ILCZrSf1eK105kpec87/gixgWM7g4v7wiTK5x7dfUWf8u2nPgStTrm+obTNEm
IGrKJ4XT2ep6PfcO6sfN1+9LRjwFDbJEcx8rMDEGJe7o122lgMaZG59DHB4l9ob9
kUigt9okiNQyTqkAcgPljliyhf1YOHwF4znwdIL8iw5SzKkA0ctL1FDO4dhvPtt8
eQP6UGSG4wvKFVXNQrNhfwO85kRVSqLvq/bZ9UMo75qahS7CnLQGOtTgj64WVUXV
17/onSS9pqqGucgI378fgbFkKYsF3hjh802HpuAFR3cARNo0i4d1p5jm/Z/kk0f+
fw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org