Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323132313439.roa
File: 326131343a3763373a623030623a3a2f34382d3438203d3e20323132313439.roa (raw, json)
Hash identifier: o8dM8QB8S9bGVg3vGev0XqjyeUE6XqHNPq2DL+Jkkog=
Subject key identifier: A0:D2:95:FF:3A:E4:4A:B9:A2:97:DA:AB:D1:64:6B:33:31:36:8A:62
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 36E433DF2B52D65FF92B2D35DA4A8AB5DDA1BCC1
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323132313439.roa
Signing time: Wed 21 Feb 2024 15:38:16 +0000
ROA not before: Wed 21 Feb 2024 15:33:16 +0000
ROA not after: Wed 19 Feb 2025 15:38:16 +0000
asID: 212149
IP address blocks: 2a14:7c7:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e4:33:df:2b:52:d6:5f:f9:2b:2d:35:da:4a:8a:b5:dd:a1:bc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Feb 21 15:33:16 2024 GMT
Not After : Feb 19 15:38:16 2025 GMT
Subject: CN=A0D295FF3AE44AB9A297DAABD1646B3331368A62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:f8:dd:75:1c:69:c0:b4:a9:d3:25:be:75:
3c:5a:9f:ff:20:45:52:bc:66:0a:be:cf:be:d9:42:
47:58:df:5d:34:25:ef:3e:a7:c9:d1:cf:76:25:f3:
ea:43:ff:6a:02:4b:d8:3b:aa:16:1a:68:23:df:13:
cf:24:65:c5:ff:d5:85:b1:2c:ba:42:7c:a2:6e:42:
b2:fd:d7:fb:f7:7f:f2:fb:99:a4:f6:4e:10:0a:cb:
63:f3:37:d7:0a:04:f6:8f:73:18:a6:d8:a7:b8:81:
f1:b4:ac:d0:22:e6:02:15:ac:43:3c:9b:04:4b:8e:
52:ee:73:23:76:fc:db:08:e6:4d:35:b1:d3:09:46:
32:0d:94:81:2b:f0:f4:d0:56:c7:f1:c6:c1:a9:7d:
fb:e6:36:6a:31:ca:88:7e:1a:f9:b5:8a:f7:99:82:
4c:ac:a4:55:f5:17:6b:0e:ce:3d:fb:bf:3a:62:7f:
ac:63:ac:68:7f:a0:a9:81:cc:b6:55:dc:4a:2a:17:
e4:76:bd:04:d3:af:ae:8e:60:59:e5:a4:d7:fd:ee:
40:99:31:72:4f:f4:7f:a5:52:87:8e:b0:9e:fe:f8:
a2:ee:4c:87:2b:ce:2d:1d:f5:17:8f:22:b8:18:f5:
7b:0e:1b:a3:bb:3a:e3:ca:3d:88:38:d3:88:6e:9b:
27:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D2:95:FF:3A:E4:4A:B9:A2:97:DA:AB:D1:64:6B:33:31:36:8A:62
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323132313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c7:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
05:30:71:f2:2b:70:71:ea:8d:c2:ba:a8:19:ef:e7:16:3e:6a:
62:d4:01:fa:f5:90:1d:76:48:bd:74:1a:71:c4:4d:e1:be:2d:
ef:60:d3:eb:54:e5:de:61:d6:bd:80:99:86:5c:93:27:c6:50:
af:da:93:ab:88:e9:20:ca:e5:b2:23:4d:c4:8f:85:24:c0:66:
b4:54:32:e0:74:93:34:16:ee:2b:a5:cf:c6:60:cf:e2:ce:1d:
5b:3e:17:98:ed:98:fc:ca:b6:f9:41:bf:9b:11:74:62:66:fd:
40:9a:b4:c3:8b:2f:a7:ab:98:cc:c4:06:87:0b:52:6e:f4:44:
fa:0f:af:c1:9e:04:72:81:8f:f6:81:98:25:61:b6:04:0d:3d:
03:1a:7f:9f:8c:ad:69:b8:ad:32:91:d0:c2:a4:90:86:75:ea:
b7:19:ce:b7:a3:22:4d:7d:8e:02:89:01:b7:a6:78:9b:e5:81:
56:6f:bc:5c:46:92:17:72:95:7e:c8:84:19:0f:bd:04:5f:40:
fe:18:52:2e:5b:55:55:34:61:ce:1c:5e:36:de:67:62:a6:97:
43:23:8b:6e:c8:96:41:96:c9:41:00:b2:b9:6e:5d:85:d8:61:
99:98:1c:be:2e:a7:0d:1a:55:1a:17:58:e1:5b:0e:15:96:28:
40:4e:44:2e
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUNuQz3ytS1l/5Ky012kqKtd2hvMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDAyMjExNTMzMTZaFw0yNTAyMTkxNTM4MTZaMDMxMTAvBgNV
BAMTKEEwRDI5NUZGM0FFNDRBQjlBMjk3REFBQkQxNjQ2QjMzMzEzNjhBNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGufjddRxpwLSp0yW+dTxan/8g
RVK8Zgq+z77ZQkdY3100Je8+p8nRz3Yl8+pD/2oCS9g7qhYaaCPfE88kZcX/1YWx
LLpCfKJuQrL91/v3f/L7maT2ThAKy2PzN9cKBPaPcxim2Ke4gfG0rNAi5gIVrEM8
mwRLjlLucyN2/NsI5k01sdMJRjINlIEr8PTQVsfxxsGpffvmNmoxyoh+Gvm1iveZ
gkyspFX1F2sOzj37vzpif6xjrGh/oKmBzLZV3EoqF+R2vQTTr66OYFnlpNf97kCZ
MXJP9H+lUoeOsJ7++KLuTIcrzi0d9RePIrgY9XsOG6O7OuPKPYg404humycbAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUoNKV/zrkSrmil9qr0WRrMzE2imIwHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzNzNh
NjIzMDMwNjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzIzMTM0Mzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqFAfHsAswDQYJKoZIhvcNAQELBQADggEBAAUwcfIrcHHqjcK6qBnv
5xY+amLUAfr1kB12SL10GnHETeG+Le9g0+tU5d5h1r2AmYZckyfGUK/ak6uI6SDK
5bIjTcSPhSTAZrRUMuB0kzQW7iulz8Zgz+LOHVs+F5jtmPzKtvlBv5sRdGJm/UCa
tMOLL6ermMzEBocLUm70RPoPr8GeBHKBj/aBmCVhtgQNPQMaf5+MrWm4rTKR0MKk
kIZ16rcZzrejIk19jgKJAbemeJvlgVZvvFxGkhdylX7IhBkPvQRfQP4YUi5bVVU0
Yc4cXjbeZ2Kml0Mji27IlkGWyUEAsrluXYXYYZmYHL4upw0aVRoXWOFbDhWWKEBO
RC4=
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:04:05 2025 by rpki-client