Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3830303a3a2f33382d3338203d3e20323135353331.roa
File: 326131343a3763303a3830303a3a2f33382d3338203d3e20323135353331.roa (raw, json)
Hash identifier: kd0jX29+lBw/jF1dgNUQLGiTG7rKzR6Xbx1x9okoNyw=
Subject key identifier: 40:BA:B0:09:29:D6:51:30:09:EE:0C:E4:56:6D:4C:12:F0:03:1D:92
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 0E4A7B9C9F9317A4D40EB8008E1815148EE35D7E
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3830303a3a2f33382d3338203d3e20323135353331.roa
Signing time: Sun 25 Feb 2024 11:03:47 +0000
ROA not before: Sun 25 Feb 2024 10:58:47 +0000
ROA not after: Sun 23 Feb 2025 11:03:47 +0000
asID: 215531
IP address blocks: 2a14:7c0:800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:4a:7b:9c:9f:93:17:a4:d4:0e:b8:00:8e:18:15:14:8e:e3:5d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Feb 25 10:58:47 2024 GMT
Not After : Feb 23 11:03:47 2025 GMT
Subject: CN=40BAB00929D6513009EE0CE4566D4C12F0031D92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:70:c4:3d:e7:09:28:45:f7:a7:da:cf:f2:
24:0d:cc:f2:db:bd:af:04:a5:91:b5:22:25:08:aa:
24:3b:da:14:40:e7:55:74:2a:d3:52:71:60:1e:66:
fe:2f:1f:77:dc:6e:6b:38:7d:7f:7b:15:d7:e3:55:
6f:27:e0:55:cc:12:c7:f8:ff:7d:b5:6a:d0:15:5c:
ea:52:cb:ec:d2:5b:20:2e:f3:52:69:f5:f5:36:4b:
08:4a:9e:c2:bc:41:20:21:86:cd:78:73:ea:c5:fa:
50:32:04:34:c2:9c:74:75:82:f0:42:23:bf:50:ef:
85:98:38:38:d5:fa:a7:e7:dd:8b:ef:02:8c:ca:39:
28:06:3c:21:40:8a:01:a9:79:12:15:12:bb:4c:ea:
be:11:16:98:73:10:ec:e9:6e:68:80:27:4f:40:5f:
60:58:b6:05:ac:3e:5b:fd:5d:75:a8:47:be:65:92:
67:e0:2d:5b:5e:db:eb:a4:38:34:cc:2c:b0:c1:ba:
39:15:c7:55:71:07:ae:fe:08:50:53:93:dc:e3:3a:
13:c8:38:fe:3a:f0:f4:bd:8c:34:31:d6:ff:77:a1:
60:32:29:a8:14:43:09:ff:60:97:27:4d:2a:4f:40:
9c:a3:27:1b:b7:01:c7:7e:5b:9a:07:59:ff:cd:a5:
5a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BA:B0:09:29:D6:51:30:09:EE:0C:E4:56:6D:4C:12:F0:03:1D:92
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3830303a3a2f33382d3338203d3e20323135353331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:800::/38
Signature Algorithm: sha256WithRSAEncryption
7a:8d:48:a8:28:b5:95:f4:83:ed:21:f4:82:cc:32:e0:ee:3e:
66:fe:fe:1d:30:e3:6d:12:92:37:42:4c:32:7d:c7:b4:9d:77:
72:b7:7a:74:a6:3a:e4:80:a7:3a:81:35:37:57:24:1f:51:74:
b5:a6:b9:6b:33:40:c7:ad:d7:a5:8d:2f:c5:dc:0a:cd:27:cc:
17:0a:0c:6d:b0:ad:27:03:78:89:51:9f:22:fb:eb:f2:c2:f2:
01:01:5b:dc:b1:3b:c3:6c:f4:8f:ab:d8:4b:a2:99:d7:73:ed:
1d:90:55:66:79:a2:f1:da:4e:78:97:84:76:fc:51:c0:26:a3:
97:ad:d8:9f:3f:98:83:f8:5a:4f:34:06:13:54:a1:88:e9:8d:
6b:28:a4:ca:83:13:93:a8:ef:21:8b:e7:b1:82:42:22:0d:d3:
d6:a4:38:8d:a5:b3:9c:1d:67:ef:b9:00:54:41:33:1b:87:70:
78:a4:0d:d6:43:be:08:bc:90:88:60:6d:5d:e6:40:52:85:2f:
57:db:ce:aa:31:57:4e:75:af:ad:b0:b6:c8:39:34:10:b3:e5:
2e:51:9f:bf:a3:7c:a5:b0:0c:ad:6b:a3:9d:2a:a7:ae:02:0a:
1e:ed:25:8e:8c:5e:f0:06:f4:08:3e:e7:99:40:fd:b5:f8:38:
c6:e6:98:d1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:07 2024 by rpki-client on console-ams.rpki-client.org