Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a313030303a3a2f34382d3438203d3e20323030363336.roa
File: 326131343a3763373a313030303a3a2f34382d3438203d3e20323030363336.roa (raw, json)
Hash identifier: CrjJlxDL5gos0Nv9/BWEqiNW2kdIuKDdtA/i+YKiIRo=
Subject key identifier: AC:E7:14:26:0B:56:E2:BF:5B:41:5B:06:9A:D9:91:9F:2A:B5:D5:C8
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 2199D412DC77F465EC9196E1DD16BC36F23C2615
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a313030303a3a2f34382d3438203d3e20323030363336.roa
Signing time: Wed 06 Mar 2024 20:56:26 +0000
ROA not before: Wed 06 Mar 2024 20:51:26 +0000
ROA not after: Wed 05 Mar 2025 20:56:26 +0000
asID: 200636
IP address blocks: 2a14:7c7:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:99:d4:12:dc:77:f4:65:ec:91:96:e1:dd:16:bc:36:f2:3c:26:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 6 20:51:26 2024 GMT
Not After : Mar 5 20:56:26 2025 GMT
Subject: CN=ACE714260B56E2BF5B415B069AD9919F2AB5D5C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:d1:9c:b7:b7:30:f5:a5:37:a4:67:6c:56:
89:21:b6:44:96:e6:ff:44:e3:94:0f:2f:f1:e1:82:
75:ff:1f:05:63:f9:85:02:c3:9c:62:25:93:74:5c:
7f:c5:06:2c:db:1e:6c:16:f3:e7:28:a0:9a:03:5d:
1a:d4:bd:9a:bb:51:c2:46:df:10:56:90:67:8a:de:
e3:d6:6f:2e:19:8c:ef:3b:9b:70:23:43:f7:02:82:
0d:41:ab:a3:0b:e3:35:2c:64:ac:4b:b0:91:42:b4:
dd:01:7d:4f:33:52:07:eb:d7:47:0c:9e:5b:0b:09:
fa:0c:01:12:ec:cf:3d:d3:63:e9:c9:9a:65:36:de:
ae:a5:4b:0a:fa:f7:e8:84:d0:0e:dd:47:54:f7:d4:
46:23:44:87:05:b4:27:d2:2c:8a:3d:43:6a:21:32:
d9:20:7d:26:f8:b1:bf:f2:75:d6:e9:7d:f2:a0:a0:
4c:1a:ce:4d:3f:71:33:7e:81:49:e1:c4:f5:3f:4e:
ae:b6:08:b4:f5:8b:60:28:e0:61:e9:69:2d:61:0b:
27:33:87:7e:92:bd:6d:bc:bd:60:30:d6:cc:b8:a8:
bd:15:5d:94:a2:cb:d5:e1:ad:6f:ab:5f:1c:45:ae:
a3:72:99:4f:df:0b:60:d1:71:bf:7c:7a:c5:60:37:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E7:14:26:0B:56:E2:BF:5B:41:5B:06:9A:D9:91:9F:2A:B5:D5:C8
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a313030303a3a2f34382d3438203d3e20323030363336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c7:1000::/48
Signature Algorithm: sha256WithRSAEncryption
76:d7:c5:0a:be:fc:fd:7b:7c:4e:eb:6d:93:00:1c:00:fa:75:
d4:2d:9e:30:63:74:37:20:c0:18:58:01:33:69:b8:5d:11:ad:
bf:23:04:a8:0e:6c:5e:97:84:c9:bf:4c:44:6b:95:9f:80:9b:
17:44:99:4e:82:a3:47:f9:f3:33:85:11:8e:d8:a8:0e:3d:68:
d4:9c:fd:db:d6:de:ae:6d:d6:69:6b:fa:a8:15:09:6e:8d:3b:
b0:1c:6e:fc:a7:44:4b:62:b5:cd:eb:b7:d5:70:a4:e6:8c:44:
06:3c:03:57:46:59:67:5d:15:5d:e4:df:f1:ce:7d:48:a7:35:
0a:97:84:dd:e4:85:58:a9:b9:71:06:e1:e3:27:83:27:d8:8b:
79:83:d8:d5:88:71:bb:de:af:79:0c:e7:63:6b:e5:b4:95:a7:
81:4d:18:2d:bf:fc:42:30:64:57:93:9f:6f:c4:98:85:93:f4:
12:c6:55:04:c0:d1:28:76:3a:b5:51:c9:06:65:63:6f:5b:b5:
d7:37:cb:2d:9b:3f:33:ea:61:1a:81:c7:00:58:4a:cb:95:81:
13:ab:50:97:2d:d5:95:1a:9f:09:6c:fd:e9:3b:32:0d:54:a3:
88:e4:d1:b7:b1:a1:a5:2d:d8:b1:26:25:41:d4:89:08:d7:8c:
24:89:b4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:08:11 2025 by rpki-client