Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763323a313030343a3a2f34382d3438203d3e20323135383635.roa
File: 326131343a3763323a313030343a3a2f34382d3438203d3e20323135383635.roa (raw, json)
Hash identifier: Uypys8hndKpk5XYJ4glvilXvNdWNPcRH2EN46xUnhC0=
Subject key identifier: 7B:D2:C5:F9:A6:EB:1A:21:6F:CA:FD:56:F8:8E:72:83:1B:51:30:B4
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 751A60428C273F59389FCD2B631AB9C8D86378D5
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763323a313030343a3a2f34382d3438203d3e20323135383635.roa
Signing time: Mon 15 Apr 2024 16:40:07 +0000
ROA not before: Mon 15 Apr 2024 16:35:07 +0000
ROA not after: Mon 14 Apr 2025 16:40:07 +0000
asID: 215865
IP address blocks: 2a14:7c2:1004::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:1a:60:42:8c:27:3f:59:38:9f:cd:2b:63:1a:b9:c8:d8:63:78:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Apr 15 16:35:07 2024 GMT
Not After : Apr 14 16:40:07 2025 GMT
Subject: CN=7BD2C5F9A6EB1A216FCAFD56F88E72831B5130B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:c0:ca:eb:73:0e:d7:39:27:62:16:be:9b:
7e:dd:c5:93:f4:7e:90:4d:19:a8:af:21:b7:20:31:
7b:cf:c5:eb:fe:b8:73:27:15:83:ae:74:6b:fe:04:
31:3a:55:4d:19:02:bf:57:15:e6:15:9c:7f:ca:c5:
df:d7:2e:8f:c2:26:f2:d3:d8:f9:e1:41:5a:23:92:
53:23:37:60:8d:53:71:f6:12:f3:35:86:34:e5:bc:
e5:25:3f:f2:29:c2:bc:e5:fe:f0:d8:21:c1:86:1a:
7f:38:4f:68:59:f3:27:2d:db:67:06:44:b9:dd:0b:
64:5e:c5:23:00:79:8d:6d:73:6f:85:50:5c:bf:3d:
d0:56:6d:1b:16:58:c7:ca:a1:5e:d3:e2:2c:73:e3:
06:eb:50:72:c2:fe:6f:ce:fc:f7:67:57:fc:79:f8:
31:c2:c7:07:bc:ce:72:7e:e7:7c:59:94:24:cd:ee:
d1:d3:af:d8:78:1b:93:fe:ec:1c:02:73:a1:a6:b0:
fb:8b:e7:27:50:3f:c5:d0:d7:64:3c:6b:17:3b:88:
a8:7a:17:24:4a:a5:52:ae:57:4b:17:3c:da:83:d6:
70:2a:6d:8c:09:b8:e5:07:87:e5:59:36:39:12:02:
55:1b:b1:0d:89:6a:35:ef:3b:9c:a1:31:d6:6f:92:
38:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D2:C5:F9:A6:EB:1A:21:6F:CA:FD:56:F8:8E:72:83:1B:51:30:B4
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763323a313030343a3a2f34382d3438203d3e20323135383635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c2:1004::/48
Signature Algorithm: sha256WithRSAEncryption
05:f6:b3:b5:9a:7a:3e:3a:6e:bb:18:04:63:03:a9:1d:65:4a:
00:00:e5:95:d0:a5:9d:d5:f3:52:d7:ef:25:ca:06:01:25:97:
a8:6a:ce:22:5d:8f:a2:9d:3f:32:23:76:4c:08:68:71:31:12:
3b:80:94:e1:d4:85:47:ea:56:39:12:80:ba:ed:7e:7c:60:8d:
90:f9:2e:5d:82:14:6a:aa:7e:12:80:dd:16:6e:6e:ed:e6:59:
b4:c4:18:ad:1d:f7:05:26:40:bd:e1:b0:86:94:97:95:d5:b1:
10:3c:0f:1d:5d:06:16:aa:a1:6a:3c:e3:1e:ad:a6:82:0b:66:
d5:18:4b:f4:ed:a3:d0:0b:1c:8a:86:c5:8a:ed:a5:41:0d:0b:
bd:8f:45:08:6e:14:72:d0:af:dc:53:6d:32:aa:5c:bd:48:f5:
52:e8:ff:a4:f5:a6:9b:6b:1b:77:c1:03:8f:18:a9:b3:36:e5:
78:bf:3a:5d:8d:d5:48:9a:1c:7e:9b:7c:ac:0a:f9:f1:87:36:
14:37:c1:c5:bc:8b:04:65:06:b1:12:00:81:7d:15:f1:e2:d7:
f3:69:97:be:fc:30:44:2d:ed:34:15:af:8a:d0:77:ce:72:ae:
48:1a:3d:09:56:95:0f:fc:42:3e:77:38:a9:90:bb:23:02:b4:
6a:a2:43:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:33 2025 by rpki-client