Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323135343733.roa
File: 326131343a3763313a623030623a3a2f34382d3438203d3e20323135343733.roa (raw, json)
Hash identifier: 8pFOUWnWLXLL/lqU2OuIphffK4NTP8OrJZ8J4R3JMeg=
Subject key identifier: D5:EF:3E:F5:76:97:8E:1A:B7:3A:60:84:5D:CB:AA:59:13:A7:7F:61
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 35A20F0166A670D550A78CE03479601879E67FBE
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323135343733.roa
Signing time: Fri 15 Mar 2024 20:50:02 +0000
ROA not before: Fri 15 Mar 2024 20:45:02 +0000
ROA not after: Fri 14 Mar 2025 20:50:02 +0000
asID: 215473
IP address blocks: 2a14:7c1:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a2:0f:01:66:a6:70:d5:50:a7:8c:e0:34:79:60:18:79:e6:7f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 15 20:45:02 2024 GMT
Not After : Mar 14 20:50:02 2025 GMT
Subject: CN=D5EF3EF576978E1AB73A60845DCBAA5913A77F61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:ea:10:20:06:bc:89:53:be:64:de:c8:a8:
5b:5d:48:24:97:03:18:cb:72:4f:af:3a:76:f6:d2:
f9:c6:51:b4:f7:01:b5:37:d5:9d:f7:e0:09:13:b5:
b2:de:60:4c:eb:4b:09:be:8c:25:11:ae:34:8c:96:
58:89:c4:aa:18:74:fc:8a:62:d3:d5:24:23:2b:a5:
9c:ec:52:1b:8b:2f:2c:58:0e:f1:8c:c8:37:3f:eb:
4e:48:53:b9:1a:4d:e9:ac:86:ff:e9:ec:b2:73:de:
ad:59:d2:73:9a:93:6d:95:b4:e2:e2:59:21:29:34:
e3:85:14:b7:3a:72:fd:01:d9:15:53:3a:e8:f8:2b:
28:05:c8:8b:a7:d7:f9:dc:e6:78:fe:72:7e:64:a6:
36:ea:b3:21:29:c9:22:79:c3:a3:54:69:3b:e7:5f:
bf:5a:ce:d2:3c:20:b6:bc:de:86:69:e3:fc:fc:19:
32:da:16:27:08:17:42:15:30:8b:2d:55:c5:6d:67:
73:e2:77:ac:6e:d8:f1:a7:a5:39:80:ed:7e:8e:12:
43:a1:37:d2:df:dc:36:91:9e:b5:e5:1b:f3:75:21:
03:41:aa:03:c5:74:b6:b4:a1:24:74:e7:66:5d:38:
47:b4:46:91:14:5b:bc:a3:fa:f7:57:4e:76:c7:65:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EF:3E:F5:76:97:8E:1A:B7:3A:60:84:5D:CB:AA:59:13:A7:7F:61
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e20323135343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c1:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
43:0b:c5:e3:d6:98:b1:9f:bf:99:fb:47:75:80:f9:6c:b6:e4:
a4:c7:c6:7c:76:02:5c:e9:2e:6e:81:4b:e3:68:53:40:3c:a5:
52:f7:df:87:6c:5e:3a:d1:4d:f7:a5:e6:f5:ec:16:11:43:1a:
4a:53:12:d5:66:b9:ff:b8:53:a6:08:ec:be:10:ff:8c:c0:8e:
34:fb:23:07:bd:fb:7f:72:c6:0f:81:ea:71:ae:c8:b1:d4:1e:
12:63:c4:20:59:e9:55:3c:0b:24:48:bd:a4:d1:08:55:4e:ba:
fb:07:42:e1:c2:2b:0e:28:67:49:5e:46:19:ea:26:f1:f8:b8:
78:99:d8:26:3d:ff:89:88:29:08:40:36:25:38:4d:08:ca:ec:
bb:13:99:02:bd:51:eb:8c:16:0d:a6:f3:e0:0a:7b:e7:1f:60:
63:e6:8c:77:c7:f4:39:69:b9:dd:70:7c:3e:c5:98:c3:3a:10:
70:77:45:11:6c:27:c2:c3:b6:49:79:45:67:d7:d4:21:23:89:
2c:59:d1:72:ee:38:63:4a:f4:14:20:24:63:db:0c:46:f2:42:
21:90:f7:b9:80:2d:eb:fb:02:12:fa:4a:63:b8:cc:ff:6d:3e:
1f:ee:16:ad:71:12:70:8e:6d:4e:e6:e2:63:78:89:aa:58:5b:
fd:82:6c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:07 2024 by rpki-client on console-ams.rpki-client.org