Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a313630303a3a2f34302d3430203d3e20323135393738.roa
File: 326131343a3763303a313630303a3a2f34302d3430203d3e20323135393738.roa (raw, json)
Hash identifier: xhPgkAraHj6Prw/sKexwgLrEQf74sGkQ2j+/pigZuxA=
Subject key identifier: A8:FC:37:4A:C4:96:67:AB:26:29:E0:09:05:EA:58:91:62:34:64:79
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 28BA2D73AAB0378962680C538802E34FEE549938
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a313630303a3a2f34302d3430203d3e20323135393738.roa
Signing time: Fri 15 Mar 2024 21:11:57 +0000
ROA not before: Fri 15 Mar 2024 21:06:57 +0000
ROA not after: Fri 14 Mar 2025 21:11:57 +0000
asID: 215978
IP address blocks: 2a14:7c0:1600::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ba:2d:73:aa:b0:37:89:62:68:0c:53:88:02:e3:4f:ee:54:99:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 15 21:06:57 2024 GMT
Not After : Mar 14 21:11:57 2025 GMT
Subject: CN=A8FC374AC49667AB2629E00905EA589162346479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:00:f3:a6:ee:6a:7d:b2:e4:27:47:6c:0a:
08:1b:64:c1:f9:1f:92:42:c3:3d:50:ab:ec:35:4d:
cf:42:6d:98:23:9f:77:d9:dc:57:41:03:60:89:c4:
58:98:28:3e:0f:be:62:15:5c:82:ef:24:be:42:32:
9c:4a:3e:4b:88:8b:4c:7e:1f:d0:e7:0d:e9:58:16:
6c:0a:f3:b1:fd:85:ff:4d:42:85:76:f4:79:1d:7f:
78:33:72:32:74:a7:fe:8f:55:2c:7b:9a:84:bc:42:
af:6a:cc:49:fe:35:49:22:87:10:3d:16:ce:da:8b:
73:71:4a:57:47:6a:0a:1e:24:e1:c5:c7:b3:24:d5:
a3:b4:76:15:ab:66:7a:11:71:3c:ca:e7:de:86:a4:
5b:a0:d3:9e:9f:30:66:f4:ca:82:7b:b6:96:df:4b:
78:5e:a3:f0:a9:84:d4:53:0f:da:9d:e0:8e:bf:99:
7b:f5:72:73:f7:7f:9c:9e:c1:cf:c2:a5:03:e2:21:
09:2d:71:f5:3e:bd:9a:f2:40:71:35:e9:6e:d5:45:
f1:8f:49:e8:0a:64:5e:74:fb:9c:ed:60:ac:42:e4:
17:9b:e0:e9:51:66:48:a9:7a:e9:fe:c9:cb:8a:2a:
5a:97:54:67:9d:e2:cd:2b:0e:87:63:f1:90:d0:9c:
4e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FC:37:4A:C4:96:67:AB:26:29:E0:09:05:EA:58:91:62:34:64:79
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a313630303a3a2f34302d3430203d3e20323135393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:1600::/40
Signature Algorithm: sha256WithRSAEncryption
4a:29:01:5a:aa:40:55:3e:82:cb:0d:2b:11:e5:fd:fa:e9:42:
76:3f:b2:a5:55:7f:21:35:28:19:8e:2c:35:75:a2:41:e4:38:
72:63:bc:ae:5a:4b:c0:b7:0b:f2:bf:38:eb:44:48:6e:3b:0e:
66:c2:f2:c2:02:47:08:5c:3d:3a:ad:ac:43:5e:65:01:3d:f1:
98:95:91:16:5a:d9:85:8d:a7:87:1f:8c:ad:21:72:80:a8:1f:
55:6c:be:d5:6f:3d:c0:fe:20:4a:56:68:9a:2b:ef:12:0c:eb:
0e:a7:ec:89:71:fc:ab:12:32:e9:d4:12:d8:1a:20:08:f6:ff:
55:b9:2e:2e:c9:31:e3:30:30:60:6b:27:9b:b9:2b:b5:3c:d2:
5c:e0:81:4c:1d:e9:99:1a:ef:29:54:41:0e:91:66:53:13:d3:
7f:e3:2e:e0:09:c2:f6:5b:38:ec:4f:8f:27:26:64:4d:0c:b1:
8c:23:7f:e4:08:b8:58:01:48:37:84:4a:6f:60:6f:29:2b:e3:
e0:80:dd:7b:7c:79:6f:4b:80:7c:fc:75:19:d7:8f:55:ca:c0:
5d:33:16:36:7d:ee:81:06:97:c9:2f:40:11:60:9b:e2:f3:66:
92:c9:64:bf:c3:00:ce:67:f7:81:22:f0:a6:4a:3a:c3:c4:60:
a7:70:3d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org