Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20323132313439.roa
File: 326131343a3763303a623030623a3a2f34382d3438203d3e20323132313439.roa (raw, json)
Hash identifier: 2x5rQ9T4pUOs8Ya6PukCSGGZKXkButbHsrs/l78TIVA=
Subject key identifier: 23:E9:5C:38:5F:07:FC:2C:69:89:5C:BC:F0:0D:BB:57:0E:7E:E5:15
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 20F3117A40E165A2F33986407242FCDB158C1D25
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20323132313439.roa
Signing time: Wed 21 Feb 2024 15:37:12 +0000
ROA not before: Wed 21 Feb 2024 15:32:12 +0000
ROA not after: Wed 19 Feb 2025 15:37:12 +0000
asID: 212149
IP address blocks: 2a14:7c0:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f3:11:7a:40:e1:65:a2:f3:39:86:40:72:42:fc:db:15:8c:1d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Feb 21 15:32:12 2024 GMT
Not After : Feb 19 15:37:12 2025 GMT
Subject: CN=23E95C385F07FC2C69895CBCF00DBB570E7EE515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:0a:e9:2c:03:e3:3c:90:e8:07:8a:50:ba:
03:40:df:bf:c1:f0:24:eb:0d:7d:d7:06:01:3d:09:
cf:84:6e:d4:d0:41:d2:62:59:64:a9:09:8d:4a:d2:
b0:f3:6b:6e:28:d4:7d:2d:b1:9e:5c:b9:c7:f9:4d:
c3:17:a2:ad:62:82:54:ec:b0:f3:42:53:46:c4:d2:
14:90:43:7e:ba:3f:86:b1:02:ec:e9:b1:bd:82:d6:
ef:ee:d5:10:e0:72:b5:29:51:3c:0f:6e:db:a5:62:
35:ca:f9:9a:ce:2a:2c:c7:38:09:03:e9:90:91:9a:
7a:d0:37:8b:c6:2e:aa:60:f6:02:4f:ef:33:a2:5e:
d2:b5:3c:f7:60:d9:b6:fe:ba:ba:0e:ce:b2:f5:20:
b4:68:7f:a9:6e:43:b0:8b:4d:7a:48:e7:a6:e9:0c:
88:c6:3b:06:0f:0c:12:2d:c2:8b:cb:ad:a2:89:35:
1a:dc:7b:81:bd:2a:21:6b:87:31:0c:43:40:b5:8f:
52:31:70:e0:6f:b9:eb:5e:ff:5f:b7:ef:6e:40:29:
2e:3f:01:bf:ac:d0:b4:9c:3f:d1:1c:12:84:c1:0a:
d5:a9:19:47:e8:6a:71:3a:25:4a:ec:e2:34:84:87:
27:05:24:c5:6c:50:e4:47:b5:73:f7:fa:00:ce:29:
a6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E9:5C:38:5F:07:FC:2C:69:89:5C:BC:F0:0D:BB:57:0E:7E:E5:15
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20323132313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
29:3d:8c:cd:3d:42:21:26:c2:7d:5e:3a:ab:a0:29:b6:97:77:
87:69:b2:cb:fb:48:d1:d6:f4:34:df:73:5c:52:5e:20:76:31:
55:da:3e:7c:5d:36:4c:34:1e:19:54:f9:3d:43:f9:b4:3b:a7:
0d:9d:f8:c3:df:f8:58:55:f6:58:81:f1:c2:7c:f6:fa:be:a7:
b3:06:d2:99:e0:81:cb:17:d0:a8:58:54:a9:de:6d:21:89:54:
05:6e:18:c7:c0:1d:09:43:30:61:2d:eb:35:1d:ac:a2:30:29:
32:15:91:9f:57:de:de:86:60:16:d8:f9:29:44:ae:a5:c3:d4:
e2:45:ea:53:62:10:5c:62:aa:81:fb:f2:18:9d:ca:38:5a:0a:
61:90:6e:5e:23:6c:4b:bb:8f:85:ca:5f:2c:e1:6a:22:95:b0:
9d:e0:77:61:09:8e:de:94:d4:8c:ed:09:24:cd:64:22:76:18:
da:76:1f:3b:6c:d2:e1:5c:17:20:46:95:08:7d:19:a5:60:33:
d1:e1:9f:bb:a4:4d:2a:87:bf:90:5b:2b:4d:6b:1b:3c:be:a6:
c4:55:40:d9:2a:e7:c9:d9:21:82:b7:c7:db:3e:0f:0c:68:31:
cd:61:45:49:35:5c:09:cb:81:06:9b:76:2d:59:d6:dc:a2:b6:
07:25:1c:8c
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUIPMRekDhZaLzOYZAckL82xWMHSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDAyMjExNTMyMTJaFw0yNTAyMTkxNTM3MTJaMDMxMTAvBgNV
BAMTKDIzRTk1QzM4NUYwN0ZDMkM2OTg5NUNCQ0YwMERCQjU3MEU3RUU1MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTzArpLAPjPJDoB4pQugNA37/B
8CTrDX3XBgE9Cc+EbtTQQdJiWWSpCY1K0rDza24o1H0tsZ5cucf5TcMXoq1iglTs
sPNCU0bE0hSQQ366P4axAuzpsb2C1u/u1RDgcrUpUTwPbtulYjXK+ZrOKizHOAkD
6ZCRmnrQN4vGLqpg9gJP7zOiXtK1PPdg2bb+uroOzrL1ILRof6luQ7CLTXpI56bp
DIjGOwYPDBItwovLraKJNRrce4G9KiFrhzEMQ0C1j1IxcOBvuete/1+3725AKS4/
Ab+s0LScP9EcEoTBCtWpGUfoanE6JUrs4jSEhycFJMVsUORHtXP3+gDOKabdAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUI+lcOF8H/CxpiVy88A27Vw5+5RUwHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzMDNh
NjIzMDMwNjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzIzMTM0Mzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqFAfAsAswDQYJKoZIhvcNAQELBQADggEBACk9jM09QiEmwn1eOqug
KbaXd4dpssv7SNHW9DTfc1xSXiB2MVXaPnxdNkw0HhlU+T1D+bQ7pw2d+MPf+FhV
9liB8cJ89vq+p7MG0pnggcsX0KhYVKnebSGJVAVuGMfAHQlDMGEt6zUdrKIwKTIV
kZ9X3t6GYBbY+SlErqXD1OJF6lNiEFxiqoH78hidyjhaCmGQbl4jbEu7j4XKXyzh
aiKVsJ3gd2EJjt6U1IztCSTNZCJ2GNp2Hzts0uFcFyBGlQh9GaVgM9Hhn7ukTSqH
v5BbK01rGzy+psRVQNkq58nZIYK3x9s+DwxoMc1hRUk1XAnLgQabdi1Z1tyitgcl
HIw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org