Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763333a623030623a3a2f34382d3438203d3e20323135333637.roa
File: 326131343a3763333a623030623a3a2f34382d3438203d3e20323135333637.roa (raw, json)
Hash identifier: V3ioP6uBh4AZ4uyiJCw0fPnHvzx2utr+M9G1++qk9Sw=
Subject key identifier: 4F:1B:42:CF:9B:C3:B6:82:8C:5B:F6:F0:E4:A0:38:A2:18:32:D9:B8
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 10BE757017B6931DECBB4415E2C6EDB685754852
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763333a623030623a3a2f34382d3438203d3e20323135333637.roa
Signing time: Fri 15 Mar 2024 20:09:15 +0000
ROA not before: Fri 15 Mar 2024 20:04:15 +0000
ROA not after: Fri 14 Mar 2025 20:09:15 +0000
asID: 215367
IP address blocks: 2a14:7c3:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:be:75:70:17:b6:93:1d:ec:bb:44:15:e2:c6:ed:b6:85:75:48:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 15 20:04:15 2024 GMT
Not After : Mar 14 20:09:15 2025 GMT
Subject: CN=4F1B42CF9BC3B6828C5BF6F0E4A038A21832D9B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:f2:d2:ad:23:72:23:9b:7e:13:0c:1b:48:
a3:b0:f9:60:3e:a3:9f:29:dc:fe:54:16:59:08:27:
f2:58:17:69:77:86:17:85:9e:11:ca:51:aa:29:b3:
52:e7:32:d4:d8:7f:54:83:5d:ec:2d:76:b5:cf:19:
29:d2:42:49:e5:61:f5:8e:f0:3c:94:06:11:62:2b:
36:45:66:c8:5c:13:6f:df:9d:05:0f:e8:1d:4e:05:
10:e9:9c:f0:eb:e4:86:a4:bd:62:68:89:15:8f:19:
0d:53:04:84:e6:7b:99:ce:14:92:d3:51:57:4e:e6:
66:ab:a6:93:9c:64:23:7a:d8:2a:8f:6b:db:d5:45:
86:9a:f8:d5:db:ad:30:00:89:f9:2f:cd:ca:e6:ed:
fc:05:ab:bd:e7:ad:db:f8:e3:c8:65:b9:65:ef:b3:
ec:68:49:ac:9a:cc:7d:07:e2:c5:57:a5:37:bb:cf:
f1:f5:85:76:71:a6:d5:b6:6c:67:ba:71:f9:6d:24:
c5:bd:0b:57:30:ec:9b:6e:af:e9:58:13:35:68:16:
7d:05:63:e3:6d:e9:d4:39:6a:8f:fe:73:18:2b:f2:
c4:70:2b:15:30:ee:3b:22:30:33:4f:34:b8:c3:22:
f4:bf:ba:78:34:ea:c2:43:c5:4b:58:91:96:b0:be:
50:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1B:42:CF:9B:C3:B6:82:8C:5B:F6:F0:E4:A0:38:A2:18:32:D9:B8
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763333a623030623a3a2f34382d3438203d3e20323135333637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c3:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
13:1e:c9:48:c4:04:bb:11:b2:80:46:35:3a:7e:c7:26:c4:c3:
30:0e:db:27:41:ba:c1:9b:72:13:31:36:c1:5f:c9:eb:a4:43:
aa:70:f7:3f:84:ed:28:d8:c8:8e:e8:04:04:6b:8d:c0:b8:54:
9c:33:ee:07:71:e0:c3:df:0c:5c:6a:cf:15:6e:10:3b:cf:76:
98:8e:ba:16:e3:75:71:ee:f1:a8:8a:30:ad:67:96:04:a9:b8:
08:77:78:f9:2c:cc:74:f1:7f:bc:38:87:76:4d:f9:09:6a:7a:
bf:6a:3d:c4:7b:ba:e7:b2:9d:83:48:ec:25:8a:0b:c7:66:63:
8f:87:04:23:56:9a:29:9a:61:1c:16:49:00:0f:d5:75:eb:c4:
fa:a7:91:98:66:cd:20:12:1f:b3:1a:3d:3e:f6:e1:0c:dd:84:
a2:9a:57:bf:62:19:8c:6d:cc:0e:da:22:43:02:f4:bf:d0:2e:
2d:d0:1c:d7:e8:09:c1:f8:ff:5c:e9:95:3b:6c:60:fc:eb:3b:
9d:9e:e2:22:da:c5:b2:9f:6f:81:42:94:e7:b5:df:87:9c:40:
e9:0f:7c:84:a5:99:80:83:42:19:d3:dc:36:64:b4:9d:a2:b9:
73:14:8e:6c:39:68:68:56:38:e2:9f:2c:7d:98:e1:d4:e8:1c:
40:ac:01:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org