Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323135333637.roa
File: 326131343a3763313a623030623a3a2f34382d3438203d3e20323135333637.roa (raw, json)
Hash identifier: oUNtAVhijmg4v+P7AWwg4d4QV+rYYKHqocSjUZQyJ9A=
Subject key identifier: BB:BD:F8:86:4D:57:08:84:71:64:C0:4D:7D:F9:F3:CA:F2:BA:A9:2E
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 35D5C38000D338F4634E335E8E6770259E1615CA
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323135333637.roa
Signing time: Fri 15 Mar 2024 20:08:46 +0000
ROA not before: Fri 15 Mar 2024 20:03:46 +0000
ROA not after: Fri 14 Mar 2025 20:08:46 +0000
asID: 215367
IP address blocks: 2a14:7c1:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d5:c3:80:00:d3:38:f4:63:4e:33:5e:8e:67:70:25:9e:16:15:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 15 20:03:46 2024 GMT
Not After : Mar 14 20:08:46 2025 GMT
Subject: CN=BBBDF8864D5708847164C04D7DF9F3CAF2BAA92E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b5:7e:07:9a:42:c9:14:ec:14:ec:96:03:d2:
f6:fd:5e:b2:4e:d6:ff:e5:15:54:79:f4:13:ed:7b:
6d:7d:cf:df:83:af:f9:d5:89:fb:b9:da:ab:d9:cd:
42:79:00:b9:64:64:1e:a6:9e:07:50:08:63:9d:f6:
ea:fe:ec:93:0b:c9:76:47:2d:5f:28:57:64:c1:61:
52:81:3c:55:aa:25:c7:25:f4:7b:bf:18:7d:9a:5e:
bc:7f:d3:fd:3b:5e:c5:12:e9:d6:3f:58:c1:ea:bb:
ce:71:06:a4:c4:42:c4:db:91:46:6a:15:6e:c3:cb:
75:cf:3d:49:bf:a8:92:14:d5:85:44:b9:70:a4:72:
f4:8d:53:a4:ff:b0:4a:6b:f3:19:a5:8b:14:87:d1:
8d:7a:cc:96:f5:27:d3:7a:06:2f:90:fb:0c:c4:14:
58:1b:e1:6a:3e:34:ff:42:f1:3f:3d:d8:69:4f:fb:
25:65:40:cf:5e:97:a6:1f:d5:fc:4f:65:c2:be:b0:
d8:72:41:75:b4:ea:4b:a7:75:86:e9:27:d1:92:72:
94:ce:32:c3:c4:fa:00:9c:d4:04:0d:1e:cb:43:81:
a5:64:75:7e:3b:92:7d:ee:18:3d:60:be:cc:2f:ff:
f7:a8:9f:e9:40:09:2f:85:4f:3d:3c:a4:05:1f:6f:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BD:F8:86:4D:57:08:84:71:64:C0:4D:7D:F9:F3:CA:F2:BA:A9:2E
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323135333637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c1:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
ab:95:8c:3d:31:b7:ea:9c:90:8d:65:5e:04:87:9d:1f:38:7a:
a7:dd:28:48:1e:19:3d:24:d5:75:ea:57:c2:15:77:15:14:ea:
9d:ba:ac:fc:43:be:57:15:6b:82:93:45:a7:e0:89:e8:83:42:
d5:f6:8a:ed:7a:38:dc:25:94:c4:98:ef:7c:c5:a2:7a:7e:bc:
a3:6a:62:b8:29:55:be:98:b5:a6:8a:85:7a:af:9e:55:47:cc:
f1:cd:68:59:22:d8:15:1f:6a:30:c8:12:6e:06:d2:80:3b:0f:
a8:55:e0:e0:a6:56:92:f3:e6:ec:54:2b:7f:d0:1d:89:92:21:
0b:70:99:a4:49:c6:78:a7:01:9c:75:6e:20:1b:ff:7a:ae:45:
06:ba:d9:2a:5d:b5:52:ed:7b:cf:8b:29:0f:ad:53:fd:e3:b7:
b3:fb:6b:5c:04:52:0b:67:ed:07:53:52:13:af:20:5b:54:61:
ae:72:f6:3e:33:6b:cd:17:35:6a:fc:8f:ad:d9:04:60:07:37:
7b:9a:fc:a8:75:e1:f7:30:39:54:58:71:52:98:56:34:b7:27:
92:d3:b0:b4:92:5b:c5:ff:2b:50:ad:77:41:7d:99:c3:fd:31:
ca:3d:b1:b5:b2:94:60:13:11:cb:43:26:ee:2a:8b:c1:f2:9b:
dd:05:f9:88
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUNdXDgADTOPRjTjNejmdwJZ4WFcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDAzMTUyMDAzNDZaFw0yNTAzMTQyMDA4NDZaMDMxMTAvBgNV
BAMTKEJCQkRGODg2NEQ1NzA4ODQ3MTY0QzA0RDdERjlGM0NBRjJCQUE5MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDctX4HmkLJFOwU7JYD0vb9XrJO
1v/lFVR59BPte219z9+Dr/nVifu52qvZzUJ5ALlkZB6mngdQCGOd9ur+7JMLyXZH
LV8oV2TBYVKBPFWqJccl9Hu/GH2aXrx/0/07XsUS6dY/WMHqu85xBqTEQsTbkUZq
FW7Dy3XPPUm/qJIU1YVEuXCkcvSNU6T/sEpr8xmlixSH0Y16zJb1J9N6Bi+Q+wzE
FFgb4Wo+NP9C8T892GlP+yVlQM9el6Yf1fxPZcK+sNhyQXW06kundYbpJ9GScpTO
MsPE+gCc1AQNHstDgaVkdX47kn3uGD1gvswv//eon+lACS+FTz08pAUfb9CVAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUu734hk1XCIRxZMBNffnzyvK6qS4wHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzMTNh
NjIzMDMwNjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzMzM2Mzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqFAfBsAswDQYJKoZIhvcNAQELBQADggEBAKuVjD0xt+qckI1lXgSH
nR84eqfdKEgeGT0k1XXqV8IVdxUU6p26rPxDvlcVa4KTRafgieiDQtX2iu16ONwl
lMSY73zFonp+vKNqYrgpVb6YtaaKhXqvnlVHzPHNaFki2BUfajDIEm4G0oA7D6hV
4OCmVpLz5uxUK3/QHYmSIQtwmaRJxninAZx1biAb/3quRQa62SpdtVLte8+LKQ+t
U/3jt7P7a1wEUgtn7QdTUhOvIFtUYa5y9j4za80XNWr8j63ZBGAHN3ua/Kh14fcw
OVRYcVKYVjS3J5LTsLSSW8X/K1Ctd0F9mcP9Mco9sbWylGATEctDJu4qi8Hym90F
+Yg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:07 2024 by rpki-client on console-ams.rpki-client.org