Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3a2f32392d3239203d3e20323135343336.roa
File: 326131343a3763303a3a2f32392d3239203d3e20323135343336.roa (raw, json)
Hash identifier: +d6UZ+WLHA2t6VL2reA9qlrlSP1x53q2ZiR+BXVXECk=
Subject key identifier: FB:80:BF:05:2E:82:3B:D5:75:BB:8E:BE:C2:16:CA:32:71:F2:28:9A
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 45597DD438FF41A92DA7A75B6E2710EB48AAB248
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3a2f32392d3239203d3e20323135343336.roa
Signing time: Mon 11 Mar 2024 20:14:20 +0000
ROA not before: Mon 11 Mar 2024 20:09:20 +0000
ROA not after: Mon 10 Mar 2025 20:14:20 +0000
asID: 215436
IP address blocks: 2a14:7c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:59:7d:d4:38:ff:41:a9:2d:a7:a7:5b:6e:27:10:eb:48:aa:b2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 11 20:09:20 2024 GMT
Not After : Mar 10 20:14:20 2025 GMT
Subject: CN=FB80BF052E823BD575BB8EBEC216CA3271F2289A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a5:22:eb:ef:fa:2e:97:94:a9:5d:6b:ef:e4:
48:3a:fc:a5:f4:30:cc:49:1b:67:e2:d0:a7:93:e0:
8a:23:6a:ae:11:84:e1:76:61:c3:ed:6f:b6:40:59:
f0:ab:9c:f0:ed:85:92:10:18:7c:31:43:fb:0a:b6:
ce:22:5d:64:5c:7e:67:d7:14:c3:72:f7:9f:e0:65:
8f:98:cb:5c:9c:10:6f:d2:f4:77:94:70:60:73:ce:
7b:62:ae:92:48:5a:c7:fe:f6:1e:11:7a:34:5b:0c:
7b:15:be:99:8a:51:29:5c:dc:a0:da:8b:44:48:57:
31:db:13:cf:45:f5:a0:0d:1b:a3:8e:b7:96:3a:91:
98:58:d8:df:f4:eb:ff:ce:5c:a4:a1:c3:58:9f:95:
16:9d:07:e6:3d:7d:7a:81:09:06:db:e8:74:85:f7:
e3:b1:ef:de:79:92:e2:45:c8:d0:7b:11:79:9d:35:
4d:f4:6b:61:c0:61:14:63:91:b8:a7:2f:cf:d0:f5:
1a:20:55:11:7b:b2:f7:8c:5d:20:56:73:77:84:14:
35:c4:18:a5:79:8c:1c:d0:96:6a:66:9b:8d:08:ad:
76:4d:71:40:7b:ee:08:2e:4f:7b:34:4f:e2:7b:2a:
6b:8c:3d:3d:7f:2b:8c:dd:78:d4:e6:7d:96:e3:c8:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:80:BF:05:2E:82:3B:D5:75:BB:8E:BE:C2:16:CA:32:71:F2:28:9A
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3a2f32392d3239203d3e20323135343336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0::/29
Signature Algorithm: sha256WithRSAEncryption
79:18:68:38:a7:9a:1d:8c:2d:11:57:c0:bd:b9:c7:28:1e:24:
75:11:c2:76:df:a1:00:19:ab:29:56:37:f8:79:17:61:32:4a:
c5:b4:40:61:01:6f:dd:2a:c4:1f:5e:44:f5:7e:13:c7:3e:d4:
8f:fe:8c:8f:80:17:f5:1d:e1:66:ac:42:f2:ca:7a:af:d2:9d:
fc:5e:6b:19:f0:96:2a:6d:05:75:33:71:11:1a:2f:09:5e:28:
70:53:b4:e7:b2:96:95:26:ec:23:e4:49:91:5f:56:70:89:fe:
a4:ee:bd:d2:69:f3:68:e4:04:67:7e:1f:10:1b:ce:bd:25:f8:
ec:59:07:84:6c:38:8d:e2:91:62:37:0e:0b:3d:41:44:6f:7f:
26:fe:9b:07:67:2e:29:6e:46:58:92:8c:00:55:b9:c0:3d:2b:
75:89:c7:e3:95:36:cd:a0:fa:a0:63:30:d8:27:45:3f:73:1e:
f5:0d:89:e8:61:e7:12:cc:b6:ff:81:60:17:a9:fa:eb:bb:2b:
24:65:51:8d:db:d0:10:d0:e8:32:f2:02:ab:91:b7:83:8b:36:
93:e5:59:54:72:11:54:14:e9:a4:bb:8b:ce:74:95:e6:f6:62:
62:3c:23:7f:0c:cd:ff:2e:8f:fb:99:3f:9f:21:2d:5e:a0:67:
97:f2:49:92
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURVl91Dj/Qaktp6dbbicQ60iqskgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDAzMTEyMDA5MjBaFw0yNTAzMTAyMDE0MjBaMDMxMTAvBgNV
BAMTKEZCODBCRjA1MkU4MjNCRDU3NUJCOEVCRUMyMTZDQTMyNzFGMjI4OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDspSLr7/oul5SpXWvv5Eg6/KX0
MMxJG2fi0KeT4Iojaq4RhOF2YcPtb7ZAWfCrnPDthZIQGHwxQ/sKts4iXWRcfmfX
FMNy95/gZY+Yy1ycEG/S9HeUcGBzzntirpJIWsf+9h4RejRbDHsVvpmKUSlc3KDa
i0RIVzHbE89F9aANG6OOt5Y6kZhY2N/06//OXKShw1iflRadB+Y9fXqBCQbb6HSF
9+Ox7955kuJFyNB7EXmdNU30a2HAYRRjkbinL8/Q9RogVRF7sveMXSBWc3eEFDXE
GKV5jBzQlmpmm40IrXZNcUB77gguT3s0T+J7KmuMPT1/K4zdeNTmfZbjyNJBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+4C/BS6CO9V1u46+whbKMnHyKJowHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzMDNh
M2EyZjMyMzkyZDMyMzkyMDNkM2UyMDMyMzEzNTM0MzMzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoU
B8AwDQYJKoZIhvcNAQELBQADggEBAHkYaDinmh2MLRFXwL25xygeJHURwnbfoQAZ
qylWN/h5F2EySsW0QGEBb90qxB9eRPV+E8c+1I/+jI+AF/Ud4WasQvLKeq/Snfxe
axnwliptBXUzcREaLwleKHBTtOeylpUm7CPkSZFfVnCJ/qTuvdJp82jkBGd+HxAb
zr0l+OxZB4RsOI3ikWI3Dgs9QURvfyb+mwdnLiluRliSjABVucA9K3WJx+OVNs2g
+qBjMNgnRT9zHvUNiehh5xLMtv+BYBep+uu7KyRlUY3b0BDQ6DLyAquRt4OLNpPl
WVRyEVQU6aS7i850leb2YmI8I38Mzf8uj/uZP58hLV6gZ5fySZI=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:10 2025 by rpki-client