Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a323830303a3a2f33382d3438203d3e203531333936.roa
File: 326131343a3763303a323830303a3a2f33382d3438203d3e203531333936.roa (raw, json)
Hash identifier: bvyC3PuoAJho06EAtABYdKXIYcKdlkofn7rq7GOdlKA=
Subject key identifier: EE:E1:8E:C3:49:2C:C4:F7:CE:CE:5F:68:86:38:F9:35:92:BA:DC:77
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 7CD296AEA391ED34A51B11FAEEDF3BD3223904C6
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a323830303a3a2f33382d3438203d3e203531333936.roa
Signing time: Fri 05 Apr 2024 13:53:56 +0000
ROA not before: Fri 05 Apr 2024 13:48:56 +0000
ROA not after: Fri 04 Apr 2025 13:53:56 +0000
asID: 51396
IP address blocks: 2a14:7c0:2800::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:d2:96:ae:a3:91:ed:34:a5:1b:11:fa:ee:df:3b:d3:22:39:04:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Apr 5 13:48:56 2024 GMT
Not After : Apr 4 13:53:56 2025 GMT
Subject: CN=EEE18EC3492CC4F7CECE5F688638F93592BADC77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:3e:10:39:4d:a9:d7:21:59:1d:34:1d:56:
11:af:61:d7:37:90:48:20:ed:12:54:b0:99:e0:0f:
fb:2f:a8:9f:fe:ba:36:f3:f1:55:de:49:ab:69:78:
ef:bd:aa:68:99:f4:cd:1e:1b:ee:c8:b9:83:26:ca:
d5:29:a8:69:4a:f5:89:cd:38:d1:d4:28:e9:e8:ef:
a3:5b:90:9c:26:09:f9:bc:b8:82:d2:b9:3d:ff:56:
91:e9:ec:93:f2:43:89:ed:3c:3f:df:46:bd:3a:c6:
51:66:44:14:1e:a5:83:d5:b7:e2:00:f2:cf:f0:f8:
12:46:29:a6:42:4e:f6:43:d2:05:88:16:05:71:c9:
49:8b:e5:08:1a:0f:11:bc:f1:76:b5:06:60:4d:98:
60:a8:4d:9f:e9:e1:61:e0:22:ce:cc:8d:8d:cb:c4:
00:5f:99:84:73:36:0f:ef:56:1e:1a:97:b2:1a:c9:
ef:b4:a6:44:28:1b:fd:f9:60:fc:68:52:30:3f:39:
58:ee:2b:68:a4:d1:1b:a1:11:20:8e:fd:62:4a:18:
00:8c:65:be:75:ec:92:b4:24:39:38:21:ac:67:2e:
ca:8c:99:f9:17:85:44:d4:a0:cc:bf:5c:e4:9e:7e:
f0:9e:2c:6f:03:ff:bc:22:50:cb:56:c4:5e:a5:93:
5e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E1:8E:C3:49:2C:C4:F7:CE:CE:5F:68:86:38:F9:35:92:BA:DC:77
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a323830303a3a2f33382d3438203d3e203531333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:2800::/38
Signature Algorithm: sha256WithRSAEncryption
1d:86:a6:9c:8e:f5:81:fa:21:e0:94:73:b8:90:b7:c9:a8:36:
52:c8:55:6d:5a:2f:c2:12:21:45:d7:3a:85:32:2c:8f:84:8c:
36:bc:05:b3:da:d4:28:61:f6:be:4b:32:cd:26:63:40:f4:2c:
7f:a0:f0:f3:2d:82:2f:21:7a:b9:12:e2:32:1c:8d:9e:72:59:
69:a3:1e:67:14:70:60:fa:6c:9c:48:d2:43:d8:d3:62:e4:4c:
00:85:61:6a:8e:10:5a:d4:17:bd:e8:e4:01:92:a3:09:fc:42:
a4:87:94:8c:f7:8c:86:c0:53:68:86:81:74:f2:56:48:98:b3:
d2:56:d5:fb:bc:e8:80:74:a8:25:8d:c9:b0:c7:6a:1f:0f:5d:
c2:74:8a:27:23:49:12:6a:3b:fa:72:a8:34:9c:26:c4:59:8d:
0b:0f:bb:e8:8c:07:c8:12:69:f0:be:7d:6b:e4:14:8d:c2:2d:
12:97:6a:d3:ae:27:d2:58:67:1b:17:97:0e:0b:65:fa:c6:00:
c7:14:47:51:24:68:24:4f:54:62:2e:93:c6:b3:89:13:60:c7:
ba:ad:86:3f:56:02:d0:6b:1a:45:7a:aa:8a:43:f7:6e:4e:7f:
89:c5:44:c6:cd:17:2e:22:3c:b1:a6:4a:2c:26:0b:2a:64:07:
f6:02:fc:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 28 17:10:52 2024 by rpki-client on console-fra.rpki-client.org