Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa
File: 326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa (raw, json)
Hash identifier: Jaa6MggYBqX+XgWhIE4tfPNmI98PzfcRSZxNT7MeNmY=
Subject key identifier: 7B:01:BC:04:0E:04:24:94:63:F6:8A:D7:CA:BA:7C:8B:EC:CA:DC:1C
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 0D2E752EE8F174A2ECE022EDC6EAD49E9DE5EE9C
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa
Signing time: Sun 05 May 2024 23:10:38 +0000
ROA not before: Sun 05 May 2024 23:05:38 +0000
ROA not after: Sun 04 May 2025 23:10:38 +0000
asID: 60223
IP address blocks: 2a14:7c0:3900::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:2e:75:2e:e8:f1:74:a2:ec:e0:22:ed:c6:ea:d4:9e:9d:e5:ee:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: May 5 23:05:38 2024 GMT
Not After : May 4 23:10:38 2025 GMT
Subject: CN=7B01BC040E04249463F68AD7CABA7C8BECCADC1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:f8:6b:6f:2f:b2:af:93:9f:03:41:72:bc:
7a:5f:49:4f:95:e2:c2:6a:49:e9:06:41:9e:26:35:
a9:2c:cc:32:56:f1:2b:ff:f3:43:e4:80:11:dd:93:
ac:82:e2:dd:d6:a3:09:2c:ca:d4:22:65:35:92:eb:
f6:7a:fa:9a:5e:48:e5:ef:fb:3d:e7:37:0a:9c:97:
40:d7:46:31:75:1d:c0:ed:88:99:98:b8:f9:94:58:
d3:84:2f:c1:7e:64:b9:e4:3c:23:f0:bb:92:9a:5b:
c9:71:e6:8e:90:47:1b:d0:4f:1f:f9:2a:f0:31:ef:
3e:d1:77:d2:32:22:9e:a0:ff:63:b4:a1:26:f3:41:
28:f8:ff:cb:7f:01:40:17:62:41:be:f3:ad:a6:5c:
78:f8:19:50:3f:03:6b:3a:fb:b5:45:ec:47:14:a5:
45:ba:cf:86:26:a5:bd:69:df:58:ef:de:0a:28:42:
e6:8e:70:c1:c0:c4:9e:dd:8a:74:be:e3:10:44:60:
76:88:e7:bf:7c:12:0f:26:9c:7f:06:82:35:fd:90:
8c:e3:e9:74:a0:99:9d:3b:83:54:1c:a0:76:09:4b:
f1:96:38:3d:7a:0a:ba:e5:35:de:bf:d0:ae:04:a5:
69:91:ed:93:90:f7:0e:9c:d6:93:23:f9:5c:ff:fc:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:01:BC:04:0E:04:24:94:63:F6:8A:D7:CA:BA:7C:8B:EC:CA:DC:1C
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:3900::/40
Signature Algorithm: sha256WithRSAEncryption
98:41:92:99:57:0f:8b:49:83:4c:7f:d9:1e:58:8b:31:36:4b:
67:f1:d0:3f:9b:27:5d:bf:78:80:49:6a:da:7c:9d:de:64:3f:
44:e6:02:e0:01:1b:b9:93:16:16:a9:50:6e:07:ea:a3:9b:61:
31:4f:c5:e2:e3:d7:87:38:2a:62:37:ab:61:81:b0:ef:c5:82:
69:80:57:23:af:4e:2b:64:cc:ea:9a:70:4e:f1:9f:3c:26:ab:
81:2e:9c:f6:d6:5f:dc:15:df:26:6e:23:83:d4:05:82:62:ba:
fb:5a:42:a5:38:3a:20:55:bf:4b:4d:87:90:0f:08:aa:90:98:
75:39:16:16:dd:12:82:c6:1b:7e:e4:55:94:9a:1d:16:73:53:
0a:b5:14:81:69:a0:96:b3:98:7e:c2:71:92:13:d9:8f:b1:4f:
69:2d:43:d3:4f:68:4c:4b:c4:12:3a:8d:5d:32:cf:b6:9d:33:
42:5c:c8:6b:c5:63:93:1f:ae:12:9a:5d:4f:9e:09:aa:f7:c3:
48:39:46:03:a9:9c:d6:ae:94:2a:55:d7:05:71:4a:a8:de:cc:
9e:23:e1:fe:a4:1a:21:25:43:af:f6:a4:e8:46:1b:3b:ed:11:
d5:3c:d2:23:87:45:99:1d:45:cf:f0:cb:0e:79:01:31:9b:34:
fc:8c:38:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:43 2025 by rpki-client