Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e203630323233.roa
File: 326131343a3763303a623030623a3a2f34382d3438203d3e203630323233.roa (raw, json)
Hash identifier: QZyflHlHQvHOXEGS09y++wxceoeUqGsRNPYSTuuJGRg=
Subject key identifier: 71:C8:7B:B7:1F:48:3A:AF:E2:D8:E7:59:D8:0A:6E:0B:7B:4E:9B:F7
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 6FDEE51C94D8A905E8BB36A2612F2F7ADFF66048
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e203630323233.roa
Signing time: Sun 17 Mar 2024 20:31:27 +0000
ROA not before: Sun 17 Mar 2024 20:26:27 +0000
ROA not after: Sun 16 Mar 2025 20:31:27 +0000
asID: 60223
IP address blocks: 2a14:7c0:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:de:e5:1c:94:d8:a9:05:e8:bb:36:a2:61:2f:2f:7a:df:f6:60:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 17 20:26:27 2024 GMT
Not After : Mar 16 20:31:27 2025 GMT
Subject: CN=71C87BB71F483AAFE2D8E759D80A6E0B7B4E9BF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:7d:d3:6d:ea:e8:c0:57:46:03:0a:8e:2d:
a4:3e:f3:cb:29:c7:26:d6:5e:26:6b:36:b6:a3:78:
11:69:bb:21:bd:35:5c:e7:82:a8:06:7f:8d:c9:08:
5e:05:88:3a:db:ea:b4:b9:7d:aa:16:b2:d0:0c:c1:
f8:9c:1a:64:40:f2:e9:f2:05:fe:6d:6b:65:2a:9a:
c7:3c:68:58:3c:68:ca:4e:7e:9a:d4:96:e4:ab:8a:
68:e3:4a:e2:cc:d2:a6:cf:72:05:c9:ab:35:b9:e0:
01:15:7d:62:f9:cc:17:a4:d2:3f:d6:46:50:57:b5:
72:ce:f7:ae:9e:13:81:d9:ca:dd:fb:1a:fa:95:d9:
d5:b5:e0:05:c9:05:e0:6e:37:1f:7c:ca:c8:24:2e:
b7:c9:58:c0:29:d5:df:a5:c1:65:bb:e0:08:85:05:
e5:c6:2a:de:34:1f:1b:7f:06:3b:50:e9:a4:c0:6d:
a8:34:4d:c1:4b:4c:3e:81:25:ee:5e:5b:1e:11:70:
84:51:a0:6a:55:dc:f8:b7:8b:ad:84:d9:71:c3:29:
c5:f0:8e:14:0f:8b:8d:f5:fd:fb:26:2c:e7:8d:d2:
9d:d5:6a:19:6e:d4:3e:4b:26:95:24:a8:92:73:f2:
af:0f:28:1e:cd:2c:60:4d:44:ba:54:c7:1e:19:45:
52:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C8:7B:B7:1F:48:3A:AF:E2:D8:E7:59:D8:0A:6E:0B:7B:4E:9B:F7
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030623a3a2f34382d3438203d3e203630323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
1a:f9:fd:8d:96:59:14:0b:a9:91:14:a8:47:0b:5f:ef:bb:cc:
f8:3f:4c:c4:e2:6a:f5:f6:30:51:74:2c:ce:88:10:5d:32:99:
88:f0:b2:b6:d8:8e:f5:b1:4c:cd:c1:c2:56:2d:d0:f6:f5:c7:
1c:4b:09:dc:d1:1a:3b:bd:38:0f:9b:5c:90:79:cd:7f:97:5c:
b9:76:d7:38:a7:e6:1d:82:fd:96:60:bb:77:34:69:6f:78:20:
30:47:49:d8:3b:64:ab:53:c2:a2:60:36:68:41:27:aa:64:8a:
4b:7f:cc:1f:56:61:9c:90:f4:b2:7d:fd:f9:78:3c:51:9b:25:
7f:4c:12:85:2a:ad:d4:cd:12:5c:6b:af:40:3a:e6:ec:50:50:
22:e9:ad:73:10:a6:ea:58:62:61:a9:db:c1:2c:5a:ec:e5:cb:
f6:bf:42:7d:f5:10:fc:0f:69:c0:81:c7:15:bc:18:41:4c:fc:
3a:f0:24:b4:fd:1b:6e:21:2d:ff:77:aa:20:f2:a9:8c:7d:0a:
79:30:51:1b:2c:f4:12:53:17:ee:78:02:59:4a:be:44:53:dd:
9a:c5:de:84:86:12:44:17:34:d5:59:ef:d2:9d:b1:be:ef:06:
4f:14:e8:04:87:10:a5:59:fb:7c:d7:60:5d:93:d1:58:7c:fb:
c5:64:89:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:07 2024 by rpki-client on console-ams.rpki-client.org