Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3a2f32392d3239203d3e2030.roa
File: 326131343a3763303a3a2f32392d3239203d3e2030.roa (raw, json)
Hash identifier: B4jciF3RdVOpWoWt8MMbVVQq4tRY8L68O2ofke9DUPo=
Subject key identifier: FB:7A:2D:B1:37:A1:8F:82:4A:3E:99:DD:7F:83:C4:AA:EC:B5:FF:88
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 5D2ABB0B87D1FBEDC59172F103421A1E3DD227F0
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3a2f32392d3239203d3e2030.roa
Signing time: Sat 09 Mar 2024 23:17:08 +0000
ROA not before: Sat 09 Mar 2024 23:12:08 +0000
ROA not after: Sat 08 Mar 2025 23:17:08 +0000
asID: 0
IP address blocks: 2a14:7c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:2a:bb:0b:87:d1:fb:ed:c5:91:72:f1:03:42:1a:1e:3d:d2:27:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 9 23:12:08 2024 GMT
Not After : Mar 8 23:17:08 2025 GMT
Subject: CN=FB7A2DB137A18F824A3E99DD7F83C4AAECB5FF88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:fe:29:94:82:2a:99:51:58:f7:16:1e:62:
d8:ec:f9:5f:dc:2c:33:f0:7c:f8:2d:0c:8f:70:e2:
b5:15:39:07:29:1d:23:71:73:41:ec:a6:3e:93:4e:
4e:6a:5c:78:8b:b4:06:1d:ea:8e:4f:86:b5:37:b7:
bc:37:00:60:f2:8f:2d:e1:e5:1d:7a:9e:37:ea:b1:
92:8d:64:94:c0:a8:a2:7c:8e:37:69:da:80:f9:aa:
6f:b4:c9:67:47:c3:e5:f1:84:c9:45:65:59:61:00:
56:9f:78:73:d6:43:8f:9d:9c:a3:2f:3e:87:0e:ab:
f7:68:5d:06:f8:f5:2e:cc:df:df:3e:97:4d:15:36:
5e:a4:85:81:fd:86:57:89:a6:6b:48:8e:75:d7:69:
ad:69:a1:63:df:5a:c3:4b:9d:e7:f4:02:1e:49:85:
b3:11:00:b4:49:0c:be:ae:31:06:fe:ca:4c:64:5f:
a3:c4:5e:94:e5:9f:95:72:5c:56:7f:42:f1:54:10:
df:6c:19:d8:8d:eb:79:69:a0:ea:48:b9:ca:11:46:
ed:36:58:cc:4a:7a:56:76:45:ef:46:f3:59:1e:22:
b8:de:28:94:7b:b4:be:c9:f1:53:85:b3:4d:fe:3b:
ee:1e:06:b1:04:b4:e5:bf:fa:aa:2b:13:8f:1a:85:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7A:2D:B1:37:A1:8F:82:4A:3E:99:DD:7F:83:C4:AA:EC:B5:FF:88
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3a2f32392d3239203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0::/29
Signature Algorithm: sha256WithRSAEncryption
37:8b:25:67:7f:74:3b:46:2d:6d:2a:8d:45:cd:28:2e:f0:e5:
0b:f9:1e:3a:5a:50:ff:e7:11:b6:cd:d7:8e:29:6d:4a:c3:49:
db:a2:8e:74:73:c5:44:48:93:bc:7e:99:d1:f7:6d:6d:0d:ca:
45:a3:44:13:1a:c5:31:17:31:4b:5c:a6:5a:8d:1f:ec:fc:43:
74:10:09:8a:96:47:82:bf:e2:24:43:dd:fe:b9:26:8f:87:af:
58:4a:5d:e3:0b:ac:4c:e5:36:66:11:25:ad:90:d2:dd:38:56:
28:5b:00:95:c6:38:a5:1b:ec:16:b1:92:e2:bd:3d:ce:c9:09:
0f:63:02:19:cc:6f:cc:74:a8:82:cf:77:da:d6:1d:48:81:fd:
4b:dc:25:51:df:a3:43:58:0f:e3:25:e5:fe:46:0b:81:5a:c9:
5f:59:ec:b6:33:85:67:89:e0:dd:6b:a3:8f:59:02:07:68:6a:
b7:47:03:f5:7e:57:9e:38:dc:a6:85:60:f9:f7:15:ad:83:50:
6d:3d:36:65:f5:33:fd:1c:96:88:d8:93:7f:f9:7c:e7:b7:37:
4e:a1:16:35:30:81:59:d9:b4:3f:3b:8d:87:84:a7:0d:0a:f1:
33:f8:9f:8a:b7:76:fa:12:5f:e1:f6:62:dd:59:cd:6a:46:67:
9f:ee:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:00:09 2025 by rpki-client