Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a323430303a3a2f33382d3438203d3e20323135313538.roa
File: 326131343a3763303a323430303a3a2f33382d3438203d3e20323135313538.roa (raw, json)
Hash identifier: +LTmhbW+a3Tzy8jvAsJ9nWb11Lcm6hh/lMBLNqi54EY=
Subject key identifier: 97:82:4A:F3:EC:08:30:93:CD:97:12:74:4F:7E:01:35:F0:B6:DF:7B
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 5D86536251FA8EEF8AA171317C5698110B9E12F5
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a323430303a3a2f33382d3438203d3e20323135313538.roa
Signing time: Fri 05 Apr 2024 11:53:59 +0000
ROA not before: Fri 05 Apr 2024 11:48:59 +0000
ROA not after: Fri 04 Apr 2025 11:53:59 +0000
asID: 215158
IP address blocks: 2a14:7c0:2400::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:86:53:62:51:fa:8e:ef:8a:a1:71:31:7c:56:98:11:0b:9e:12:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Apr 5 11:48:59 2024 GMT
Not After : Apr 4 11:53:59 2025 GMT
Subject: CN=97824AF3EC083093CD9712744F7E0135F0B6DF7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:f9:b2:fe:06:ca:3d:65:02:05:c8:3d:15:
be:28:e3:ef:2c:0e:a0:12:a0:37:ec:97:66:5f:92:
41:42:68:99:d5:04:71:a2:85:54:68:51:4c:50:ef:
d0:96:03:17:52:1e:d8:e7:1d:d3:e2:ab:08:48:33:
9d:9a:fe:81:f1:8b:08:9b:f1:c8:02:29:5a:a9:d2:
c9:96:65:85:64:b9:fd:6f:ad:d3:56:7d:f8:ae:56:
2a:a7:16:7d:a6:7d:aa:3f:52:d3:2f:c3:46:1b:b4:
bb:3e:5f:23:bc:fa:09:b5:e6:a8:16:e8:b3:69:69:
53:75:e4:5c:75:a4:e5:8b:f8:ca:83:b7:c8:1b:4b:
da:be:ee:4f:a8:82:ae:8e:86:04:0d:21:ea:a2:d3:
9e:72:38:42:3f:03:57:58:73:6f:03:cf:8c:77:49:
ab:7c:26:6b:df:1e:ad:5c:78:37:55:79:4f:37:bd:
29:95:8d:ee:7a:33:76:e3:b4:80:43:c5:ea:6a:18:
46:67:cb:e2:07:4d:1f:5e:50:d1:44:cf:e9:98:bf:
c0:29:da:b2:e6:ba:40:8b:1c:30:8c:19:77:6c:8a:
43:43:74:2b:21:50:02:89:89:e6:fb:db:0a:f4:0e:
d5:4b:d8:0c:0b:b0:83:6f:12:b7:2d:9d:a3:a9:88:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:82:4A:F3:EC:08:30:93:CD:97:12:74:4F:7E:01:35:F0:B6:DF:7B
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a323430303a3a2f33382d3438203d3e20323135313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:2400::/38
Signature Algorithm: sha256WithRSAEncryption
33:74:d0:e2:3f:14:81:d3:b2:09:bc:aa:6d:68:23:d7:51:b4:
d7:35:6e:b2:7f:84:c1:7c:40:32:4f:83:62:0d:01:df:e1:b2:
32:aa:17:0e:13:03:38:1d:20:45:6e:94:fa:53:ec:b1:d8:ca:
e3:b6:f8:4b:e2:3e:bf:dc:35:88:6a:13:54:4d:14:5a:98:66:
1c:f2:ef:78:42:e1:8e:3a:ae:68:1b:c2:f7:a9:9a:70:09:10:
66:34:ae:27:29:a5:2e:89:db:3e:1c:d5:42:49:de:1b:5e:ed:
01:78:10:b8:27:91:f4:44:3a:6d:d5:ea:97:d0:38:45:b9:87:
f0:6d:14:5f:d6:0d:5d:9f:88:a4:4e:a1:c9:62:9c:03:8a:ee:
dc:34:2d:16:51:6b:69:91:ce:46:3b:c9:bf:bb:12:2e:f5:f9:
65:71:7f:1f:7f:7c:0a:d1:41:ec:19:aa:02:10:84:a0:5c:b4:
34:51:bf:fe:60:3d:02:75:30:d1:d0:f3:e9:77:cd:28:1b:fa:
4a:d2:c1:ac:5b:fa:2f:67:13:b6:6b:e9:11:da:a4:d1:c6:c6:
3b:b1:f5:bb:c1:e9:c9:75:27:ac:88:29:e6:c0:6d:da:02:07:
17:ad:be:e6:17:03:3e:c5:4b:b2:c5:46:13:00:5f:11:08:8d:
45:15:ec:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org