Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20323135333637.roa
File: 326131343a3763303a623030623a3a2f34382d3438203d3e20323135333637.roa (raw, json)
Hash identifier: Da/VCQYVzvuBNHDm4prPIcxv1K8Pyzo6KUWgZEXnlTY=
Subject key identifier: 21:3F:CE:88:4C:6E:5A:5B:D6:45:0B:78:5D:C6:92:B5:72:3C:59:EE
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 01112C793120CC9DA34B9801948B4686347D183A
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20323135333637.roa
Signing time: Fri 15 Mar 2024 20:08:35 +0000
ROA not before: Fri 15 Mar 2024 20:03:35 +0000
ROA not after: Fri 14 Mar 2025 20:08:35 +0000
asID: 215367
IP address blocks: 2a14:7c0:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:11:2c:79:31:20:cc:9d:a3:4b:98:01:94:8b:46:86:34:7d:18:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 15 20:03:35 2024 GMT
Not After : Mar 14 20:08:35 2025 GMT
Subject: CN=213FCE884C6E5A5BD6450B785DC692B5723C59EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:80:42:8d:e3:b1:98:ec:92:aa:21:e9:bf:
f3:21:1b:5e:8b:42:fd:7c:90:0f:dc:5b:d6:58:10:
f4:4f:db:e3:d0:dc:c3:77:77:0e:b2:71:2d:8f:42:
98:c3:18:0a:32:80:d6:14:85:f8:c0:9b:54:8c:5d:
df:d7:88:20:7b:41:b1:05:60:77:1d:33:eb:4d:a7:
03:71:0f:e9:fa:69:45:13:64:61:09:42:c4:c1:62:
ed:f9:93:74:5c:71:e3:e4:f0:65:e5:7b:b4:9f:12:
bf:49:b2:cf:3c:d6:94:d2:67:de:01:11:67:4d:87:
48:72:57:bc:8e:1a:b9:56:0c:93:f6:b9:72:df:28:
3a:c1:34:70:c3:aa:2d:aa:02:95:a7:ec:43:81:f0:
d1:2c:e8:17:a7:14:c8:4c:db:91:5c:50:7c:95:ba:
2e:2d:66:b4:37:eb:1d:1c:9f:b0:50:2f:6e:d9:33:
01:d2:34:18:c7:8f:aa:fb:8a:5d:8a:f4:34:04:f9:
c2:99:35:13:ca:30:5a:7e:a2:94:1a:8d:b0:8d:2b:
9e:57:2b:3d:e0:7b:b0:ea:f5:e1:d2:85:ff:8b:73:
3b:de:92:80:29:28:4d:83:34:08:e1:47:7e:4e:73:
31:d8:01:af:ea:1e:3d:2a:a8:82:d4:58:f1:ef:4f:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3F:CE:88:4C:6E:5A:5B:D6:45:0B:78:5D:C6:92:B5:72:3C:59:EE
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e20323135333637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
33:76:35:eb:90:74:7b:c6:cf:e5:38:35:70:ff:4f:5a:10:84:
82:e2:11:9c:99:b9:7c:66:80:38:a4:c5:e2:5a:85:c4:62:e9:
f8:ca:7e:2b:9c:ab:0a:51:00:ac:38:59:45:a9:9d:be:e6:42:
a5:42:40:9f:e1:fb:cb:ec:72:f7:2d:a8:80:68:ef:a1:c8:9b:
9d:8a:5f:fe:e6:ee:fc:a1:bf:d5:74:14:8a:9f:ef:4c:8c:16:
42:25:b0:88:dc:96:a5:53:cb:c7:30:74:f9:cf:dc:b4:e9:4d:
5f:8c:d8:1a:3f:7a:ce:ca:2c:37:a6:04:f0:92:2a:3f:c7:a2:
1e:27:c1:16:71:b5:bf:b6:e2:43:d7:c4:3d:3d:ac:06:56:b3:
2c:30:bb:c0:06:9e:b6:37:3e:54:8e:53:80:3a:91:17:63:6d:
8b:2e:c0:0c:fa:8c:e3:c7:73:c9:13:e1:57:7f:e0:e3:e7:90:
ee:9a:6a:b1:30:b4:88:64:f6:11:76:8b:f4:5b:d3:95:51:2b:
33:7b:27:6c:6c:d6:22:06:d9:e0:8c:8b:35:cb:44:cd:b2:9a:
5e:6c:1d:b1:f9:ca:92:ad:35:23:28:06:8d:f6:34:80:a9:53:
9b:fa:99:5e:88:ee:b0:d2:82:bc:90:b8:d0:97:51:fe:e8:2c:
bd:27:f0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org