Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a343830303a3a2f34302d3438203d3e20323135323932.roa
File: 326131343a3763303a343830303a3a2f34302d3438203d3e20323135323932.roa (raw, json)
Hash identifier: uvZyieoD+puAs+saAopXNlaVq78zkv1rPNUuDyzHWV0=
Subject key identifier: 64:A5:A3:EE:88:25:FC:3B:B9:9C:13:D8:0B:B6:9E:C9:78:F6:00:D5
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 733D43908F251EC0684D308871B2C41A816B93E1
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a343830303a3a2f34302d3438203d3e20323135323932.roa
Signing time: Sun 12 May 2024 09:41:37 +0000
ROA not before: Sun 12 May 2024 09:36:37 +0000
ROA not after: Sun 11 May 2025 09:41:37 +0000
asID: 215292
IP address blocks: 2a14:7c0:4800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:3d:43:90:8f:25:1e:c0:68:4d:30:88:71:b2:c4:1a:81:6b:93:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: May 12 09:36:37 2024 GMT
Not After : May 11 09:41:37 2025 GMT
Subject: CN=64A5A3EE8825FC3BB99C13D80BB69EC978F600D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:e8:9c:44:3d:56:a2:9a:f4:13:85:e2:5a:
7f:42:b3:68:5f:8f:8f:95:e1:15:2d:a2:f6:03:d2:
a3:ff:f2:b2:09:fe:b4:8d:7a:f5:b0:e5:af:cc:f9:
be:d8:0b:82:b1:a2:35:1e:8c:64:ea:9e:31:90:86:
59:1c:83:77:83:4e:16:f0:f6:6a:60:d2:ca:5e:29:
d3:70:0d:bd:ca:db:1a:7d:b6:d6:81:c7:c0:28:42:
ce:ce:fc:10:0c:04:42:8b:fa:58:ae:4b:3f:22:a6:
88:41:80:ee:07:17:38:4a:00:20:03:59:df:a2:19:
9f:fd:b3:7a:9b:b1:05:bf:ae:11:88:f6:84:f8:90:
9a:03:ee:ad:1b:62:c1:d2:b4:8b:cf:c1:ca:21:bd:
6a:e1:f7:8e:68:27:ad:51:d4:ee:09:d9:5c:0c:07:
e4:c3:a1:81:52:2a:c0:f8:f0:1d:af:90:71:84:3e:
57:b0:f4:f3:0e:c8:b5:2b:cd:0e:26:a7:92:7e:d6:
d0:d5:d3:2a:9a:b9:a1:eb:82:94:3d:d4:aa:06:6b:
0a:10:3f:ea:00:66:a7:6a:f2:86:81:10:b2:40:4c:
75:46:e9:9f:b0:90:d7:85:07:3c:84:15:e0:e0:24:
fa:24:44:f8:40:50:42:b8:e5:73:85:87:9d:07:fc:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A5:A3:EE:88:25:FC:3B:B9:9C:13:D8:0B:B6:9E:C9:78:F6:00:D5
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a343830303a3a2f34302d3438203d3e20323135323932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:4800::/40
Signature Algorithm: sha256WithRSAEncryption
45:45:fa:87:40:1d:49:ea:b6:a3:16:d7:25:2c:0e:98:86:6b:
40:a3:31:82:23:5c:44:ba:83:25:e9:45:fc:42:f4:31:7d:00:
41:a0:f9:d3:a2:33:15:47:a7:3d:14:3b:6a:ef:95:1f:c3:b3:
3b:d0:ca:63:42:64:46:73:d3:93:4a:a6:44:98:4e:ea:97:85:
dd:b5:ee:21:84:ab:71:ac:c7:54:50:8b:0b:a6:79:ac:2a:ff:
50:f2:9f:2b:5a:da:4f:6e:a5:bc:fa:f3:8d:69:6d:0b:94:05:
1d:4f:00:3e:24:e3:a8:07:b5:c4:9b:d5:48:59:fa:a0:81:8b:
2a:c6:8b:36:76:08:d5:22:1f:c1:bb:16:62:65:75:d7:d6:90:
8c:22:46:f4:d9:82:5d:86:73:28:c5:19:b6:28:be:e8:6a:af:
0b:9e:22:dc:a8:39:04:ff:a9:ab:87:b4:11:f3:46:52:ea:55:
02:58:21:55:10:5b:24:dc:d4:50:26:bc:f9:03:82:76:e0:8a:
b0:f1:61:26:99:2b:02:3c:53:37:12:34:68:ce:eb:91:aa:d7:
38:6f:a3:d3:de:44:8b:47:ff:fb:19:df:51:a8:9c:d5:c7:08:
af:61:e6:be:ff:bb:a6:3e:51:76:42:34:d2:20:d1:98:cb:6c:
a2:0c:04:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:03 2025 by rpki-client