Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3a2f32392d3239203d3e20323135343630.roa
File: 326131343a3763303a3a2f32392d3239203d3e20323135343630.roa (raw, json)
Hash identifier: eg/lzex4KUERM6X+ZvRBL+R4lpPQ2642XxIB7xg4OGg=
Subject key identifier: 10:57:49:C3:F0:D1:6B:C1:9D:6F:5A:6B:C2:EA:50:65:29:54:F0:98
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 015E01EF0CBA6BC09F5DE5B4D296209C520FF17D
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3a2f32392d3239203d3e20323135343630.roa
Signing time: Thu 22 Feb 2024 17:18:55 +0000
ROA not before: Thu 22 Feb 2024 17:13:55 +0000
ROA not after: Thu 20 Feb 2025 17:18:55 +0000
asID: 215460
IP address blocks: 2a14:7c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:5e:01:ef:0c:ba:6b:c0:9f:5d:e5:b4:d2:96:20:9c:52:0f:f1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Feb 22 17:13:55 2024 GMT
Not After : Feb 20 17:18:55 2025 GMT
Subject: CN=105749C3F0D16BC19D6F5A6BC2EA50652954F098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:07:05:4b:70:47:4b:0d:ea:ab:a8:10:41:
50:a1:77:63:dc:30:23:3e:bd:6a:14:c2:f2:12:5a:
30:d1:69:c7:f5:33:a4:06:2a:cc:51:de:eb:ae:f3:
23:2b:4e:c9:c4:d9:22:26:d3:c3:73:f4:4e:a9:88:
9f:0a:bb:cb:eb:ba:f6:55:e9:5a:3c:d0:93:01:2a:
69:01:bd:e4:eb:98:2b:f6:e2:ba:06:c8:95:79:30:
bc:cc:02:76:2a:90:5c:db:12:6a:5d:9b:e4:66:c0:
7d:07:25:42:2d:ba:a6:f6:48:f2:7d:af:6d:39:ac:
a9:62:dd:5c:0b:cf:0a:d1:b3:00:21:2c:ea:44:31:
f2:78:67:ff:dd:46:73:ca:ae:bc:fb:c3:61:1b:5d:
a5:9d:5e:1f:93:10:f9:b7:be:c3:3c:ca:73:66:0f:
68:50:a8:bd:02:bf:76:e7:32:fe:98:90:9b:67:10:
10:6e:08:b2:76:de:39:9a:9f:35:69:fc:ee:15:ea:
f8:4b:8d:ef:fb:d5:68:1d:f0:5a:b0:8b:7d:3f:36:
a1:7b:fd:c1:9f:c7:11:da:7c:06:66:fd:11:aa:9a:
69:78:a8:83:11:c2:6d:a3:17:6e:d9:40:5d:a8:42:
14:c6:10:2c:20:78:b8:87:96:9e:03:9a:50:e7:35:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:57:49:C3:F0:D1:6B:C1:9D:6F:5A:6B:C2:EA:50:65:29:54:F0:98
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a3a2f32392d3239203d3e20323135343630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0::/29
Signature Algorithm: sha256WithRSAEncryption
61:36:91:ae:40:0c:6e:c9:b2:68:b4:72:07:56:a4:0c:b0:e8:
18:9f:be:3d:1d:b0:5d:a8:5c:9c:ea:75:a9:e8:8d:be:f0:aa:
78:f6:4d:74:56:01:d6:71:9d:60:46:0c:24:4c:6f:ec:33:07:
7b:63:5c:ef:42:ec:7b:d6:29:2e:9d:f0:4c:ee:f8:65:55:87:
6c:95:b9:7e:3e:6f:62:29:10:cf:bc:69:d6:f0:3d:6f:38:07:
66:06:c1:89:c3:3c:a8:4e:90:2f:d0:f5:24:9f:73:7f:16:5c:
dc:0e:35:cb:63:8f:31:7f:9f:51:be:7f:c9:d4:d3:91:e4:54:
2e:c7:cc:ef:af:5c:05:41:73:a3:ee:4f:b5:aa:72:e4:19:53:
91:50:a8:e0:05:e2:39:19:0a:da:eb:bd:d8:f5:38:26:cc:ce:
31:e9:a7:c6:15:12:a4:67:32:c6:20:a4:4f:09:8c:dd:c6:d6:
f9:cd:cf:a3:c3:3c:b4:85:22:5f:85:e4:20:d5:6d:60:49:54:
2f:f5:13:30:c8:5a:2a:2a:7c:ae:55:82:e0:b4:85:b2:50:64:
67:26:2b:72:74:6a:91:06:20:3f:13:a5:cc:25:63:21:d9:25:
c8:50:b2:9d:a3:0e:55:c8:0a:84:4f:58:b3:03:00:e0:57:23:
9d:cd:72:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org