Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a343430303a3a2f33382d3438203d3e20313939303532.roa
File: 326131343a3763303a343430303a3a2f33382d3438203d3e20313939303532.roa (raw, json)
Hash identifier: CEsPNnR7FxaTgTiOlJXtbIc1ZyFyZy5JmapkiY41Ir8=
Subject key identifier: 50:C3:C3:02:CE:4E:7B:A3:BB:2C:EB:71:5C:3C:2D:58:6C:46:56:38
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 708BD4AD3F4AA298376F35E92A8444AE2E5FA791
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a343430303a3a2f33382d3438203d3e20313939303532.roa
Signing time: Tue 07 May 2024 21:48:14 +0000
ROA not before: Tue 07 May 2024 21:43:14 +0000
ROA not after: Tue 06 May 2025 21:48:14 +0000
asID: 199052
IP address blocks: 2a14:7c0:4400::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:8b:d4:ad:3f:4a:a2:98:37:6f:35:e9:2a:84:44:ae:2e:5f:a7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: May 7 21:43:14 2024 GMT
Not After : May 6 21:48:14 2025 GMT
Subject: CN=50C3C302CE4E7BA3BB2CEB715C3C2D586C465638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:db:d5:fc:44:65:f0:e6:01:52:56:09:cf:9d:
9d:f6:21:1b:de:ad:36:eb:6c:c9:13:6e:4a:e2:0b:
31:61:d0:85:71:22:0f:7d:23:82:f5:47:10:43:e6:
ab:5d:98:93:d3:4f:80:67:43:bf:0f:57:eb:e2:cf:
3b:b5:27:37:98:d1:fe:e0:73:25:63:87:f8:2a:41:
2d:5e:24:b6:3c:0a:0d:8e:50:bf:08:48:94:42:3a:
71:32:80:4b:00:77:55:8c:90:e7:3d:de:d0:e4:fe:
9a:85:b3:0c:fc:11:b2:9a:40:7a:2c:24:ba:a9:a2:
57:ae:2f:a2:25:ee:56:7d:34:17:aa:80:f7:08:48:
15:87:5c:33:ea:b2:fc:2e:5c:b8:7f:a5:84:6d:69:
5c:34:97:d6:c5:37:7e:21:56:ef:fb:c5:7e:45:9d:
f1:14:ba:d8:60:c5:5e:2f:d2:eb:79:52:e4:a9:d3:
1c:57:f5:3f:d7:53:d5:ae:28:72:08:c0:0c:48:b3:
ba:bb:5f:78:5e:96:38:81:cd:24:40:cc:c0:ad:ec:
6e:0c:50:1d:50:f1:c2:8b:f7:19:c6:4a:7e:92:d0:
b9:c1:f0:ad:73:42:9d:13:e0:6d:40:9a:c9:10:3d:
96:7d:07:c9:79:f1:c6:a0:1c:4f:a5:4a:8f:5b:ac:
d6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C3:C3:02:CE:4E:7B:A3:BB:2C:EB:71:5C:3C:2D:58:6C:46:56:38
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a343430303a3a2f33382d3438203d3e20313939303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:4400::/38
Signature Algorithm: sha256WithRSAEncryption
9f:e7:1b:95:0a:d6:01:04:c7:7f:f9:13:f8:72:81:a1:f4:b8:
5e:88:58:ce:03:2b:92:79:07:9a:53:8d:73:5d:b6:cb:49:7c:
b0:4a:27:56:b9:c7:de:8d:32:83:ad:e6:09:b5:e9:1f:6e:4f:
c1:16:b4:00:f2:a6:12:14:64:b3:a2:04:4f:45:01:cf:43:72:
f3:05:fe:27:d3:ac:5a:fb:13:60:c1:4b:60:a7:2b:a1:e6:bc:
e2:e1:64:f8:3f:68:38:8a:42:99:ef:89:30:e2:85:0e:a2:cc:
51:78:f7:f3:ff:19:2f:2f:c3:78:4b:31:de:5e:bf:66:d7:af:
ef:14:9a:a1:b6:c3:2c:f1:3b:46:0e:64:87:74:98:10:56:48:
2a:64:34:e7:86:24:43:78:b3:b4:a5:b7:43:06:99:8b:88:71:
db:10:80:25:6e:be:3f:0f:a4:14:e4:d0:ac:19:f8:68:c8:02:
ed:b4:8e:23:37:f1:52:0e:51:7a:f2:5c:8c:2d:d2:0d:13:6b:
7a:3c:6e:b0:af:5c:18:22:08:b0:4a:68:04:9d:5f:86:92:f1:
96:3c:a3:7f:eb:6e:66:61:2e:95:3a:07:b4:37:ab:2a:78:34:
37:cd:dc:18:bd:1c:37:6d:b1:13:c9:e3:af:87:f6:d6:d5:ab:
f2:a9:6d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org