Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e203630323233.roa
File: 326131343a3763313a623030623a3a2f34382d3438203d3e203630323233.roa (raw, json)
Hash identifier: SU259FtwEhDxLjvm9JjtXRn6IbuCXHYdQmkyO6PLPb8=
Subject key identifier: CB:CF:FF:79:0C:1E:C5:22:0D:39:15:C9:70:38:61:9A:09:5E:43:6F
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 7A87872A1D81A4EEDF20FF8C9B319A29BC69E822
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e203630323233.roa
Signing time: Sun 17 Mar 2024 20:31:40 +0000
ROA not before: Sun 17 Mar 2024 20:26:40 +0000
ROA not after: Sun 16 Mar 2025 20:31:40 +0000
asID: 60223
IP address blocks: 2a14:7c1:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:87:87:2a:1d:81:a4:ee:df:20:ff:8c:9b:31:9a:29:bc:69:e8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 17 20:26:40 2024 GMT
Not After : Mar 16 20:31:40 2025 GMT
Subject: CN=CBCFFF790C1EC5220D3915C97038619A095E436F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:e9:cc:cc:5f:0e:72:ff:81:7f:a9:56:53:
c6:ec:79:87:1d:55:c8:ee:0f:a9:70:2a:d8:cf:47:
af:29:21:5d:de:02:31:ec:e9:3b:f9:87:8c:5d:ec:
42:9f:71:43:80:9e:59:1f:32:59:68:13:8e:c2:99:
e3:e1:85:a6:0f:c4:23:7f:25:82:13:b9:91:65:fb:
e5:cb:53:b6:be:60:b0:4a:63:a9:2a:0d:3a:4a:a5:
4c:1b:98:d8:6c:01:d7:a0:a6:e5:49:5a:d9:37:f2:
85:af:7c:5a:30:ac:47:fb:f2:6b:6a:78:89:50:ae:
6b:d0:8f:14:ad:85:39:7c:f8:10:ee:16:49:41:5d:
1e:66:b3:44:f9:e1:a5:74:42:e3:b2:30:3c:00:f9:
7b:46:54:ed:10:d5:90:f7:c6:6e:3c:48:8e:38:98:
4f:9a:65:df:c6:53:72:07:3d:1d:44:a2:78:90:c8:
ae:54:97:92:ec:9b:21:6e:8d:b2:33:6a:a2:8b:3a:
94:72:ea:94:2d:5c:ef:09:aa:56:8b:b7:aa:17:30:
7f:9c:51:6b:5a:39:c6:17:72:17:6a:e3:10:5b:af:
88:c4:e2:3d:4b:b3:c4:bd:17:36:f2:0f:dc:99:25:
d3:66:cd:17:b7:97:3d:f3:8e:e8:63:e5:e4:12:dd:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CF:FF:79:0C:1E:C5:22:0D:39:15:C9:70:38:61:9A:09:5E:43:6F
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763313a623030623a3a2f34382d3438203d3e203630323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c1:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
44:4d:5c:dd:b1:df:6c:bb:77:21:08:df:80:eb:72:53:40:80:
de:c6:11:c4:a1:cc:78:64:ad:20:cb:5d:ab:ef:17:30:55:42:
0c:ae:f3:5c:b5:0b:28:d1:46:a2:71:23:cc:f9:a4:12:f1:17:
bc:c2:c8:66:1f:b7:11:ba:7a:1b:0a:ad:1c:41:e9:c4:4a:f6:
34:56:e0:fb:e4:3d:58:e6:f4:f4:0a:66:96:25:0a:ef:ee:1a:
ae:a7:cb:b0:22:a6:b7:35:c4:69:cd:7c:f8:51:7c:5a:df:ab:
01:3b:05:f2:93:0c:34:95:5a:60:d6:47:bb:9d:ff:8e:64:79:
8a:ef:86:e7:a9:cb:0e:4f:68:6f:83:39:97:6f:c6:2c:de:28:
40:30:5c:4e:a3:f9:ee:9d:ed:c3:4c:ff:16:1a:9b:bd:b8:c5:
2d:ca:78:f3:f6:63:ef:a4:33:9f:aa:5b:11:3e:67:c3:07:61:
39:f6:73:eb:e5:3d:a5:3d:a1:b6:02:5c:f3:33:de:a4:d7:8c:
5b:85:51:2c:85:17:c3:50:f1:7f:89:a8:4b:d5:4f:f3:d8:d5:
72:a9:f0:f7:ca:8b:97:67:35:56:83:7b:ec:72:0c:66:d2:14:
0a:5a:6c:a8:8b:fe:7d:28:47:8a:6a:cb:9b:d0:13:d1:a5:f0:
8d:43:72:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org