Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a6330303a3a2f33382d3338203d3e203439353831.roa
File: 326131343a3763303a6330303a3a2f33382d3338203d3e203439353831.roa (raw, json)
Hash identifier: jk5UdoFGOiBz1d4BmI1HW12BiVAklHBTb28Jnea2am0=
Subject key identifier: AE:6F:CB:DC:56:DD:DE:72:2C:A9:A8:49:0D:3E:04:39:1C:8A:D2:8F
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 115E35629298899BA1D7FCB8B341E04F69161670
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a6330303a3a2f33382d3338203d3e203439353831.roa
Signing time: Sun 25 Feb 2024 11:02:33 +0000
ROA not before: Sun 25 Feb 2024 10:57:33 +0000
ROA not after: Sun 23 Feb 2025 11:02:33 +0000
asID: 49581
IP address blocks: 2a14:7c0:c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:5e:35:62:92:98:89:9b:a1:d7:fc:b8:b3:41:e0:4f:69:16:16:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Feb 25 10:57:33 2024 GMT
Not After : Feb 23 11:02:33 2025 GMT
Subject: CN=AE6FCBDC56DDDE722CA9A8490D3E04391C8AD28F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:46:60:5d:b0:00:6f:e7:f4:80:36:40:58:
53:91:07:96:11:02:9a:e0:f7:48:d2:90:6f:47:d0:
87:72:74:32:be:82:16:13:83:06:6a:c6:b2:6d:8e:
1a:e2:c0:de:16:65:b0:ec:21:24:09:9f:a6:4a:23:
9c:0f:fe:70:53:f1:89:3f:29:d4:0f:ca:f0:f9:17:
0d:c6:b6:a4:1a:1b:e6:c9:c6:49:6b:ee:a6:38:52:
c4:48:ca:0b:2b:55:ce:7c:b7:32:31:3d:71:8c:c7:
3f:a7:fb:18:5e:d4:b0:3f:ae:a1:8c:f6:cf:f7:60:
3b:64:2d:c0:f4:8b:41:40:b8:88:da:4e:8a:25:d1:
b2:18:ae:cf:90:63:bc:3e:40:aa:6e:28:a0:53:76:
e9:c2:52:2f:69:31:9a:bb:87:25:ea:00:fe:0d:70:
e8:75:52:b7:29:04:b9:54:6e:f6:4e:28:86:e5:29:
be:77:21:28:14:58:bf:2b:f8:18:4c:eb:46:2e:27:
36:3a:b0:c4:01:01:c6:f4:d2:58:dd:91:1f:0f:88:
a0:fa:b7:2d:9d:74:03:28:fe:e5:41:78:cb:5e:86:
68:00:9c:57:e2:29:ea:5b:fb:2c:9d:d2:cd:f4:c8:
72:72:8e:cc:3d:ea:32:68:05:30:ab:d4:2f:95:da:
fe:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6F:CB:DC:56:DD:DE:72:2C:A9:A8:49:0D:3E:04:39:1C:8A:D2:8F
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a6330303a3a2f33382d3338203d3e203439353831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:c00::/38
Signature Algorithm: sha256WithRSAEncryption
99:ed:25:f4:01:21:16:e7:9f:11:60:6d:c3:d1:72:dd:b4:20:
8a:cd:8b:dc:98:eb:8e:9a:c4:9c:44:82:34:f5:34:70:e6:a5:
ac:61:16:39:4d:c5:34:34:ca:75:56:df:6d:ab:f2:3e:15:e1:
fb:62:26:f7:b4:b3:3e:10:34:82:29:49:5d:ae:79:43:3e:bb:
25:34:6a:18:79:16:93:1f:21:6c:6f:58:62:5d:50:0c:eb:c5:
c4:a4:fb:16:04:b0:d7:e5:4c:fa:64:b7:09:1f:1e:93:66:bc:
78:66:e8:95:5a:15:3b:73:43:3e:58:ec:9f:77:c4:ed:8c:e0:
88:b3:13:40:f2:6d:54:d6:c6:f5:ff:ea:ff:7a:82:90:45:10:
7b:d2:c0:88:b5:43:0a:a6:a8:fb:dc:b8:c0:2a:57:fb:78:f6:
ce:98:7d:6e:25:d9:6e:aa:6d:cd:0d:8d:d8:9f:7f:f8:3e:0c:
1f:1a:b3:56:c9:a3:93:08:4f:97:58:98:a4:44:81:a0:e5:6e:
97:46:ef:8f:05:71:b8:04:46:50:5a:f0:2c:c8:a2:8e:e4:b0:
cf:21:23:a5:37:1e:aa:b4:6d:a2:37:d3:bd:24:9b:cb:ff:74:
8f:b4:d3:2c:c7:d5:1a:e6:94:73:6a:a2:10:60:bc:98:d6:94:
89:c4:dc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:07 2024 by rpki-client on console-ams.rpki-client.org