Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a3a2f33322d3438203d3e20313937343737.roa
File: 326131343a3763343a3a2f33322d3438203d3e20313937343737.roa (raw, json)
Hash identifier: Lbe/Mmt1Rw7fp+sORKdrG1ReKmrbEZQ4G+ghxYJE7NQ=
Subject key identifier: 33:B6:E7:DB:0F:BB:28:77:20:4F:14:27:C4:7C:CE:EB:21:1A:A1:D9
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 047ED6CC6B285FEBF54D00D3F72F36365C31695E
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a3a2f33322d3438203d3e20313937343737.roa
Signing time: Fri 17 May 2024 16:09:57 +0000
ROA not before: Fri 17 May 2024 16:04:57 +0000
ROA not after: Fri 16 May 2025 16:09:57 +0000
asID: 197477
IP address blocks: 2a14:7c4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:7e:d6:cc:6b:28:5f:eb:f5:4d:00:d3:f7:2f:36:36:5c:31:69:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: May 17 16:04:57 2024 GMT
Not After : May 16 16:09:57 2025 GMT
Subject: CN=33B6E7DB0FBB2877204F1427C47CCEEB211AA1D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:19:03:d2:c3:75:2f:18:ac:55:81:b9:43:
a8:1d:ec:3b:44:bf:7d:a7:de:3a:9d:ad:d3:5a:0c:
17:16:6a:23:4b:e2:ad:a8:be:dc:41:3e:c6:99:9a:
ca:64:64:80:31:48:34:c3:12:f5:49:46:76:c8:a3:
85:97:30:8c:54:97:00:a4:63:0e:80:59:f5:72:97:
d1:48:7c:32:d5:af:41:1c:f1:a1:e4:d3:ed:da:50:
36:05:fe:be:26:f8:db:dc:51:96:b0:63:40:98:42:
68:55:a5:ab:c7:be:62:70:6a:63:c0:3e:47:ca:f3:
dc:f5:de:31:af:b2:8e:26:87:08:b5:57:87:c4:57:
3a:48:15:f6:36:fe:39:38:26:5a:5f:15:84:bc:92:
d0:45:d0:a6:1d:68:db:cb:ca:51:ed:49:6c:fc:93:
7a:52:cd:8e:90:90:02:55:38:52:5a:8c:83:0e:0e:
71:61:70:6b:86:35:a5:d3:0f:bb:0c:31:1a:f3:60:
93:93:0a:62:4b:06:a2:81:16:5d:77:d7:a8:5a:6c:
90:d4:83:51:7b:57:6e:68:c5:c8:97:d9:36:09:80:
ec:ba:1e:d2:e7:5b:d3:79:df:d8:50:21:9d:52:75:
88:6e:e0:27:3b:50:41:81:98:dd:05:2b:7d:ec:c7:
2a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B6:E7:DB:0F:BB:28:77:20:4F:14:27:C4:7C:CE:EB:21:1A:A1:D9
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763343a3a2f33322d3438203d3e20313937343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c4::/32
Signature Algorithm: sha256WithRSAEncryption
5e:ae:db:3b:da:67:ed:48:1d:38:95:7a:b2:d5:3c:af:71:85:
86:f3:78:f7:2c:54:29:d3:2c:07:c6:a0:a8:09:ec:fd:67:d0:
26:5a:a7:7e:19:50:3c:75:9f:7e:14:24:af:b4:ae:2f:61:68:
4d:14:39:1f:b7:0f:97:ba:5c:a4:f1:ae:57:71:2f:c6:3d:4f:
57:1a:da:54:32:ba:5c:6a:4b:d0:9a:12:41:14:59:9f:d6:f5:
88:20:fb:7b:45:3a:a0:83:99:c9:7c:cf:eb:97:7b:f8:18:0f:
46:cd:f5:fc:e6:5f:c8:e7:5d:0a:af:8a:6b:fa:66:dc:87:39:
cc:63:f6:f2:94:d3:e1:da:13:e5:79:f9:b1:b8:e3:12:da:2a:
71:df:be:7a:ea:6d:88:54:63:0e:cc:60:4e:1a:08:92:7e:4e:
84:36:a2:4a:e6:d1:16:54:f1:73:10:92:fe:c8:a6:82:de:fd:
f7:dd:03:8c:a6:12:35:99:29:00:a4:b0:8d:e6:19:f7:40:3d:
b9:27:88:3e:12:94:57:27:74:0f:f2:5a:c3:e8:2c:11:c0:18:
2d:4e:eb:aa:88:34:9b:c4:fa:2d:75:5c:e0:88:31:ec:31:77:
8f:21:0a:ae:d5:8c:ac:d5:c8:cd:66:80:9a:2f:9f:2c:2f:a0:
72:9e:96:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:03:52 2025 by rpki-client