Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3430303a3a2f33382d3338203d3e20323135353331.roa
File: 326131343a3763303a3430303a3a2f33382d3338203d3e20323135353331.roa (raw, json)
Hash identifier: yl4KSDZtM8P6TktCW6uSuYw/daE3rxxpRSXtrjb3EoE=
Subject key identifier: C7:76:0B:19:59:26:BE:4B:99:90:2C:56:8D:17:A5:80:D9:D4:65:71
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 3B931B71FB5EEE97EF92D0997764D0647BDE5009
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3430303a3a2f33382d3338203d3e20323135353331.roa
Signing time: Sun 25 Feb 2024 11:03:33 +0000
ROA not before: Sun 25 Feb 2024 10:58:33 +0000
ROA not after: Sun 23 Feb 2025 11:03:33 +0000
asID: 215531
IP address blocks: 2a14:7c0:400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:93:1b:71:fb:5e:ee:97:ef:92:d0:99:77:64:d0:64:7b:de:50:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Feb 25 10:58:33 2024 GMT
Not After : Feb 23 11:03:33 2025 GMT
Subject: CN=C7760B195926BE4B99902C568D17A580D9D46571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:58:08:21:cf:7a:4a:38:0b:ee:6f:2d:4f:c7:
7d:19:1a:b9:00:1c:c4:8e:35:4e:7a:7d:8d:8b:b7:
b9:ec:0f:8a:13:48:4f:dd:35:3e:c7:17:d7:b3:01:
ad:1a:30:36:4d:f5:48:04:36:8a:0b:91:6b:4d:1b:
91:49:da:33:2f:e6:60:b3:93:89:fd:08:f0:6a:35:
68:2e:15:0d:14:a3:c1:6a:d4:53:27:ee:1b:aa:7d:
7f:5b:ce:20:4f:e3:e9:76:b3:08:14:e4:3c:90:a6:
34:ac:a1:ee:bc:21:d4:6b:a8:64:ad:f7:bd:a1:ac:
61:b5:2d:0b:af:a8:46:6f:bb:5c:c2:6c:52:fb:56:
07:8c:38:9a:8e:35:39:b4:d3:5a:87:e7:1b:2d:46:
2b:56:34:e6:15:36:70:c3:4d:d9:97:3e:fa:29:66:
d3:6e:61:c4:1a:88:23:4e:da:38:fd:cc:3f:23:2e:
57:12:57:81:97:8f:a2:cb:57:ec:b9:88:02:74:44:
63:24:67:cf:99:17:3f:09:00:84:99:8b:98:04:36:
a4:05:b0:1f:76:48:b1:8e:5a:d7:c6:52:ed:d2:a1:
12:b7:d2:84:83:bf:b9:a8:45:31:c2:6c:cf:7c:5e:
5d:69:c4:fb:5a:68:ba:9a:dd:87:4e:2f:3f:db:47:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:76:0B:19:59:26:BE:4B:99:90:2C:56:8D:17:A5:80:D9:D4:65:71
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3430303a3a2f33382d3338203d3e20323135353331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:400::/38
Signature Algorithm: sha256WithRSAEncryption
73:16:6f:96:28:00:58:e0:6b:8b:be:48:40:d7:20:8a:ad:01:
cd:5f:87:95:37:67:e2:8b:4b:c1:f7:0a:45:83:0a:d0:66:12:
ba:77:48:6b:6d:c3:b6:24:c2:0b:8e:79:b1:a2:81:cc:87:65:
9e:91:58:75:5b:eb:a4:e0:16:4d:6a:b2:c6:3c:71:9b:60:11:
18:ef:29:36:43:dc:87:37:4f:85:7a:e4:e3:02:e6:97:c7:c8:
35:54:66:d1:72:2c:0f:f6:21:cd:8e:00:57:c9:1a:80:f8:e6:
2f:c1:bb:5b:ae:3f:3d:43:35:c9:46:2a:a7:81:89:18:1d:85:
f6:6e:80:9e:77:4b:3a:37:50:b8:80:e9:2e:cc:2b:5a:04:b6:
af:58:d7:9e:83:17:1e:b3:cb:60:88:54:2e:47:be:99:4f:cb:
d4:2c:a7:b4:64:27:f8:29:22:c8:16:55:5a:ea:79:d9:43:ad:
d2:01:a9:fc:a4:e7:80:64:d4:6b:90:cf:f7:c9:59:33:9c:cb:
33:6d:2c:e4:38:fe:a4:c5:b3:e1:93:b3:ba:58:70:7c:6c:7a:
d8:1f:4b:d1:97:be:7a:4f:6f:52:62:9a:b8:d1:ad:39:08:34:
7d:f1:ac:ee:d4:5f:c9:dc:45:5c:be:d9:3e:81:83:82:05:1c:
55:e8:d3:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:07 2024 by rpki-client on console-ams.rpki-client.org