Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a313530303a3a2f34302d3438203d3e20323135333235.roa
File: 326131343a3763303a313530303a3a2f34302d3438203d3e20323135333235.roa (raw, json)
Hash identifier: 9gMb7v+2TO1mCQIzUmomvOqvgdyzUm+l0/qjeOspe+Y=
Subject key identifier: 78:80:37:12:1A:38:DF:4C:26:D9:6A:A7:54:3C:48:06:DB:2F:77:8D
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 2F66D6B85D370293E9C4ACBE73B5CDA7E0BEA3DD
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a313530303a3a2f34302d3438203d3e20323135333235.roa
Signing time: Thu 28 Mar 2024 23:18:10 +0000
ROA not before: Thu 28 Mar 2024 23:13:10 +0000
ROA not after: Thu 27 Mar 2025 23:18:10 +0000
asID: 215325
IP address blocks: 2a14:7c0:1500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:66:d6:b8:5d:37:02:93:e9:c4:ac:be:73:b5:cd:a7:e0:be:a3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 28 23:13:10 2024 GMT
Not After : Mar 27 23:18:10 2025 GMT
Subject: CN=788037121A38DF4C26D96AA7543C4806DB2F778D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:52:59:a7:45:84:02:36:15:5c:5f:3f:9f:
39:4d:48:f6:cb:b7:10:d7:0e:1b:71:df:e8:d5:e2:
31:57:8b:b4:93:f9:be:cf:d4:24:6c:96:b8:97:ca:
36:07:52:c7:7d:51:28:21:39:32:3a:b7:a9:2d:3a:
d9:3b:c9:2c:1a:b8:7a:ad:ae:a3:24:be:40:98:97:
2b:d2:d1:11:4a:fb:65:ee:dd:4c:35:b9:a0:01:4b:
6a:fa:db:cb:d2:31:f2:e0:3b:05:b6:0b:58:34:0a:
11:72:75:6b:e0:e1:8c:9b:9e:1e:a4:36:bd:02:a7:
48:65:66:cc:ca:78:a6:00:74:65:d4:3c:8e:4f:9f:
51:66:49:13:ac:7b:b9:45:69:71:cf:16:23:33:60:
05:23:89:5f:1c:02:e7:15:ee:1d:da:75:a0:3b:d3:
68:30:57:78:32:fe:d2:dc:b4:01:49:8c:91:ae:84:
08:c0:1c:6d:e2:8d:05:86:c5:2e:7b:0c:55:9b:21:
5b:25:96:ca:32:8f:79:25:76:dc:02:c9:7f:40:04:
b4:3e:1e:1e:f7:37:36:52:21:97:23:f1:92:22:87:
18:96:df:f1:83:db:69:91:68:48:e8:00:32:1b:08:
65:91:a6:e9:85:99:2a:c5:28:a3:13:6b:22:c6:53:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:80:37:12:1A:38:DF:4C:26:D9:6A:A7:54:3C:48:06:DB:2F:77:8D
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a313530303a3a2f34302d3438203d3e20323135333235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:1500::/40
Signature Algorithm: sha256WithRSAEncryption
40:72:1d:0d:fc:f7:d3:d0:03:73:69:f5:66:67:81:73:89:72:
6c:a9:a5:44:02:a9:28:d3:b7:ea:0d:6e:9e:02:fd:05:fa:9a:
93:d6:dd:ce:68:91:ec:c2:35:08:11:7f:28:b3:ce:9a:8d:61:
28:ae:62:86:16:b9:8e:d4:e8:b9:ce:77:61:75:9d:d0:18:60:
f2:57:f0:da:3d:35:10:80:af:ef:ca:1c:81:72:03:18:50:90:
80:c5:96:f5:f8:69:e2:a9:3a:77:0d:93:81:5c:9b:dd:4a:19:
27:c7:81:6a:2b:55:ac:4b:b9:8a:1e:61:a0:c8:03:be:08:be:
fc:18:8e:18:d2:c2:62:b2:78:e4:b0:60:e5:3e:ad:fc:7c:49:
53:97:83:0b:ea:fa:f5:d2:d3:f9:b0:71:94:09:e4:bf:54:58:
77:2a:e0:c9:13:c5:bf:14:5d:a0:23:88:c3:eb:9f:4b:73:e0:
8e:ad:f8:2c:fa:78:c0:61:05:29:62:7f:9a:4e:b6:94:84:62:
c3:eb:5b:79:19:3a:02:4d:eb:61:f5:2c:8b:db:00:59:7d:08:
de:75:4d:f1:33:3e:54:aa:9a:9b:e5:2c:61:54:0b:fc:b9:06:
36:04:74:d8:68:dd:d0:d1:91:3a:fb:b6:53:08:df:5e:2e:24:
8c:99:8d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org