Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763323a623030623a3a2f34382d3438203d3e20323135333637.roa
File: 326131343a3763323a623030623a3a2f34382d3438203d3e20323135333637.roa (raw, json)
Hash identifier: shpVkA7jwlhHiihI5AnondVsjCRVJ9ZIoVIwSqIv5LU=
Subject key identifier: C3:69:8D:B6:D4:27:25:92:4C:7D:01:4B:51:E6:4E:68:C4:14:91:6F
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 37F43CEE2A42E0F63489FFA744271EBD96EE0CD1
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763323a623030623a3a2f34382d3438203d3e20323135333637.roa
Signing time: Fri 15 Mar 2024 20:08:59 +0000
ROA not before: Fri 15 Mar 2024 20:03:59 +0000
ROA not after: Fri 14 Mar 2025 20:08:59 +0000
asID: 215367
IP address blocks: 2a14:7c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f4:3c:ee:2a:42:e0:f6:34:89:ff:a7:44:27:1e:bd:96:ee:0c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 15 20:03:59 2024 GMT
Not After : Mar 14 20:08:59 2025 GMT
Subject: CN=C3698DB6D42725924C7D014B51E64E68C414916F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1a:92:76:f7:be:33:22:90:b7:ac:04:7a:4b:
44:88:d1:29:0a:ef:66:5f:cb:dd:f5:64:f2:74:d0:
2e:14:c9:bb:54:08:fd:51:84:63:5f:58:2f:53:ba:
9d:75:20:1f:f9:ba:70:f3:a8:25:4d:63:3a:60:69:
40:6a:d3:2e:35:ef:b8:b8:8d:99:e0:f4:85:33:d4:
67:cf:6f:f4:83:8b:cf:ff:93:85:71:3a:12:0c:f6:
b6:70:86:a2:f8:42:ab:31:34:d3:f7:bd:e1:4f:e4:
c2:ed:04:c6:a5:b2:1d:13:8f:6a:d3:46:47:32:4b:
52:71:3f:39:4d:18:bc:9d:4e:1d:9f:3b:ea:5f:6f:
6a:92:8f:0f:25:87:8f:50:b9:04:5e:74:b4:33:6d:
39:13:84:b9:6e:44:12:2a:8d:77:af:9b:ef:cf:43:
11:48:85:18:9c:52:e1:c2:8e:8d:5a:d3:1f:84:a7:
fa:5b:98:67:8b:48:31:6d:7f:57:79:dc:38:4d:90:
63:3c:fb:98:67:a8:1f:00:e7:6b:5e:b1:25:1b:d1:
de:fb:fe:23:6f:89:48:87:b1:d3:0b:97:2f:ce:4c:
17:ec:80:c3:b8:73:4a:09:3e:ce:d7:cf:17:ad:d8:
d4:0e:21:83:22:5f:22:10:03:b6:28:ae:62:2e:e0:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:69:8D:B6:D4:27:25:92:4C:7D:01:4B:51:E6:4E:68:C4:14:91:6F
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763323a623030623a3a2f34382d3438203d3e20323135333637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
0e:bd:e7:ad:13:58:2d:5f:88:9b:eb:7b:b2:ab:f5:d8:0b:32:
30:85:6a:89:cf:a6:2c:48:61:f8:65:89:84:67:2e:09:c0:b8:
5f:0e:2a:44:db:2b:e4:17:3e:cc:16:90:6d:84:06:33:3c:75:
ff:c2:22:14:dc:f1:f5:d5:0b:10:4c:c2:ac:bd:dc:54:0a:7f:
b4:a7:92:c6:4d:96:a2:2b:09:9c:07:37:1a:dd:8e:c0:ed:20:
a6:a0:4b:7d:b8:fd:93:73:0a:10:54:31:59:3d:49:15:18:c4:
14:30:ca:3c:c6:b2:76:2d:89:e4:38:2d:76:29:c6:c5:cb:46:
71:f5:54:28:8a:bb:12:22:2a:1c:08:e5:12:09:cb:82:c9:d4:
ae:86:83:4f:d9:83:89:4e:91:18:70:5f:72:83:19:5d:38:40:
7b:23:57:a1:ce:ce:4a:91:a3:f8:f0:29:99:73:86:07:cd:d9:
fc:7c:1e:88:3b:1c:36:cc:31:03:0a:3e:ba:03:35:ac:47:dd:
40:44:b6:2f:ea:fb:e7:fd:91:1b:9f:2c:7c:72:73:2b:2a:12:
7d:99:ca:8d:1f:f8:3b:c9:ff:e4:a6:ec:d3:0e:57:6d:cb:54:
17:8d:76:c0:6e:4c:8f:bf:46:8e:ec:0c:76:bd:2a:e0:8c:17:
ce:4f:af:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:38 2025 by rpki-client