Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030303a3a2f33362d3438203d3e20323135343336.roa
File: 326131343a3763303a623030303a3a2f33362d3438203d3e20323135343336.roa (raw, json)
Hash identifier: XN6nMScQKP3yHIgTDPmKP6hyDY/B1zRqzRS7LC+Sr2E=
Subject key identifier: 4B:BB:4A:E2:3B:2A:70:76:43:01:B8:29:F0:96:58:5E:64:AF:F1:9B
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 4ABE61701C6994287AC1C916002447AA06ED966E
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030303a3a2f33362d3438203d3e20323135343336.roa
Signing time: Fri 15 Mar 2024 19:43:03 +0000
ROA not before: Fri 15 Mar 2024 19:38:03 +0000
ROA not after: Fri 14 Mar 2025 19:43:03 +0000
asID: 215436
IP address blocks: 2a14:7c0:b000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:be:61:70:1c:69:94:28:7a:c1:c9:16:00:24:47:aa:06:ed:96:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 15 19:38:03 2024 GMT
Not After : Mar 14 19:43:03 2025 GMT
Subject: CN=4BBB4AE23B2A70764301B829F096585E64AFF19B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7a:38:2b:7f:d5:a0:70:c2:b4:e5:86:ce:73:
49:22:56:bb:53:b7:49:c2:cc:ef:9e:03:c1:3c:6c:
4d:d5:bf:0e:f7:23:7c:74:cf:33:53:d3:8e:36:bd:
4a:ef:a3:c4:54:cf:2b:cd:75:6b:cc:a1:0f:f2:7a:
3e:2a:33:75:43:79:55:c7:67:ec:9c:8d:be:fe:2a:
ff:cd:4d:5a:ac:e6:4e:dc:20:f0:f1:0f:5d:a6:ac:
18:7e:c7:47:63:58:a7:ff:7b:9d:93:0e:50:bc:cc:
b5:54:69:cf:af:fb:d1:1e:b9:c4:f3:22:1c:92:d7:
28:34:c6:a9:d0:12:b3:80:e4:f9:50:0e:7b:3b:33:
82:23:75:9e:9b:a4:55:cb:f4:d1:6b:44:10:d7:c4:
ad:02:db:ea:45:db:a8:4c:7c:06:05:a9:3d:74:d9:
fe:48:11:1f:5a:87:bb:2f:fb:3d:6b:d8:0e:e1:24:
96:1a:82:7a:a7:ff:48:d7:a4:e0:92:7e:2d:84:19:
34:fc:2d:88:2d:b1:a7:ad:e1:11:d2:ff:74:e5:96:
0f:f4:22:a9:be:61:fb:e1:e4:c7:46:8f:54:44:70:
d7:30:b0:3d:e9:f1:e0:ef:09:94:9d:55:a9:00:83:
6b:c2:cf:10:bd:96:b4:ea:a1:41:a9:19:bd:73:65:
91:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BB:4A:E2:3B:2A:70:76:43:01:B8:29:F0:96:58:5E:64:AF:F1:9B
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030303a3a2f33362d3438203d3e20323135343336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:b000::/36
Signature Algorithm: sha256WithRSAEncryption
76:0c:6b:b8:06:ff:aa:8a:96:17:21:87:0b:91:a7:cd:69:f1:
28:de:1b:38:e3:c8:2c:2d:53:b1:ab:bd:02:9b:38:9b:5c:ea:
79:0d:5d:5e:2e:cd:63:cd:5b:ac:64:d9:58:02:35:46:a5:a7:
f3:b9:90:2c:6f:74:9a:ff:0f:38:e2:fc:6a:e1:47:42:3a:3e:
8f:09:23:d6:9c:5c:8a:51:f2:65:76:cb:cd:fd:a0:15:b6:0f:
47:38:b3:7f:fe:d1:4b:3e:ab:41:b2:dc:dd:53:23:d6:fa:bd:
9e:55:4f:27:bb:9d:cb:d5:2c:71:3b:26:6b:3c:a2:16:31:ad:
dd:f4:3f:2b:e5:27:b8:df:59:29:42:cb:6f:df:f1:51:41:26:
ad:a5:b1:09:6e:55:8d:50:20:69:3d:94:d8:af:2b:d0:b3:06:
b1:8e:5a:bd:46:30:4b:cf:0a:89:38:51:6a:3a:07:d1:f8:84:
c5:ec:1c:d4:1d:05:e2:50:b6:67:7b:9f:d6:1f:cd:e7:9c:ea:
db:03:b4:d7:5a:8f:8e:59:2b:80:52:fb:51:d0:9b:52:88:9d:
07:fd:82:fd:56:a3:18:76:9b:f1:93:35:54:9e:af:ae:61:7d:
bf:31:cc:4c:bf:cf:e8:34:4a:0d:34:86:79:17:01:e1:c4:c1:
07:6e:d6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org