Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323135343733.roa
File: 326131343a3763373a623030623a3a2f34382d3438203d3e20323135343733.roa (raw, json)
Hash identifier: M9LtLpdW8whehCzgqhHMMNgAPDDlakqjT9KqJ4JNqS0=
Subject key identifier: FC:59:2E:C5:2A:53:89:28:38:35:B0:35:99:5F:E7:3D:5A:80:FA:0A
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 6B3342C33331CC8A736E1E061827FF3E4B9D4E6C
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323135343733.roa
Signing time: Fri 15 Mar 2024 20:49:40 +0000
ROA not before: Fri 15 Mar 2024 20:44:40 +0000
ROA not after: Fri 14 Mar 2025 20:49:40 +0000
asID: 215473
IP address blocks: 2a14:7c7:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:33:42:c3:33:31:cc:8a:73:6e:1e:06:18:27:ff:3e:4b:9d:4e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 15 20:44:40 2024 GMT
Not After : Mar 14 20:49:40 2025 GMT
Subject: CN=FC592EC52A5389283835B035995FE73D5A80FA0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:42:83:cf:be:63:90:30:00:b3:a1:df:c0:
9c:e3:e7:a1:ae:49:52:3f:c9:e3:e8:24:37:91:96:
3f:cf:66:db:ac:a0:12:12:df:95:0b:d0:a2:a8:e5:
dd:fe:4a:68:d6:1d:4a:dc:9c:fd:d1:14:20:61:94:
7a:6b:3c:fc:24:aa:41:07:3f:7e:eb:3f:32:d6:5a:
e3:a0:09:ba:cf:e1:4b:b8:5c:57:9b:e5:02:35:22:
70:8e:13:1e:7e:73:f3:54:32:ad:d6:c7:6d:32:7d:
90:51:0f:24:c2:1a:b0:68:36:0b:14:e8:a6:be:74:
b1:7d:7f:6c:27:58:82:28:57:f6:ef:6b:41:8a:1d:
67:4d:46:c5:e9:59:cd:4d:c8:0d:f7:bb:c2:35:10:
95:16:6b:a6:ab:5e:19:fc:8e:d8:10:01:92:a6:ed:
14:eb:f2:0a:bd:6a:97:06:21:3d:6a:2c:06:58:ae:
cf:d1:80:93:62:7c:c6:ed:58:99:af:f0:53:92:c6:
ce:92:7c:9f:3c:56:19:5b:6e:99:14:55:91:9f:99:
f7:a6:ed:b9:af:2d:a8:ca:ea:10:82:32:79:a7:34:
0f:cf:3b:4f:d4:74:41:0e:93:b7:1d:16:b2:c5:b4:
34:db:3d:06:6d:3c:a9:28:47:98:ae:b0:96:b2:6e:
dd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:59:2E:C5:2A:53:89:28:38:35:B0:35:99:5F:E7:3D:5A:80:FA:0A
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323135343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c7:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
92:db:ad:0c:03:eb:89:a8:12:84:7a:5f:4e:cc:b7:7c:4b:5e:
7c:45:b9:86:4a:fa:fa:8b:15:42:55:a7:03:7d:26:cb:5f:37:
eb:66:9a:eb:9d:19:bf:d0:50:07:26:90:ac:2f:6a:8f:c5:65:
6a:20:2a:9a:55:f0:93:c4:71:3d:32:62:07:a3:73:85:84:96:
77:90:63:b7:eb:60:7c:38:08:cb:9e:87:09:06:87:ef:b0:29:
a2:d9:91:cd:eb:41:e2:85:51:cd:a1:2d:a9:52:bd:c3:bc:5c:
b9:82:da:f8:0d:42:bd:ce:f4:01:3f:99:ab:e8:da:73:7e:9b:
32:ee:8d:6e:88:79:d7:36:6d:aa:14:2c:9d:a7:e9:c2:26:ea:
bc:67:cd:96:e4:ef:a1:cc:2b:64:2c:88:85:a7:4e:d5:35:d6:
9d:d8:51:7f:98:e3:38:d2:24:27:45:6c:f9:74:3b:39:64:64:
a7:7c:c2:c1:0e:c0:40:28:e8:fc:60:51:60:79:9b:4e:98:b8:
5e:3c:b4:92:73:21:89:2b:9f:19:af:d8:d6:92:0a:9f:11:18:
cb:40:82:e3:14:9b:3f:df:44:39:8d:57:17:97:cb:75:98:d0:
60:34:dd:e6:42:3c:ae:4a:bc:83:55:53:87:e5:cc:28:dd:3f:
79:93:a9:a5
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUazNCwzMxzIpzbh4GGCf/PkudTmwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDAzMTUyMDQ0NDBaFw0yNTAzMTQyMDQ5NDBaMDMxMTAvBgNV
BAMTKEZDNTkyRUM1MkE1Mzg5MjgzODM1QjAzNTk5NUZFNzNENUE4MEZBMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDArkKDz75jkDAAs6HfwJzj56Gu
SVI/yePoJDeRlj/PZtusoBIS35UL0KKo5d3+SmjWHUrcnP3RFCBhlHprPPwkqkEH
P37rPzLWWuOgCbrP4Uu4XFeb5QI1InCOEx5+c/NUMq3Wx20yfZBRDyTCGrBoNgsU
6Ka+dLF9f2wnWIIoV/bva0GKHWdNRsXpWc1NyA33u8I1EJUWa6arXhn8jtgQAZKm
7RTr8gq9apcGIT1qLAZYrs/RgJNifMbtWJmv8FOSxs6SfJ88VhlbbpkUVZGfmfem
7bmvLajK6hCCMnmnNA/PO0/UdEEOk7cdFrLFtDTbPQZtPKkoR5iusJaybt2PAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQU/FkuxSpTiSg4NbA1mV/nPVqA+gowHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzNzNh
NjIzMDMwNjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzNDM3MzMucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqFAfHsAswDQYJKoZIhvcNAQELBQADggEBAJLbrQwD64moEoR6X07M
t3xLXnxFuYZK+vqLFUJVpwN9JstfN+tmmuudGb/QUAcmkKwvao/FZWogKppV8JPE
cT0yYgejc4WElneQY7frYHw4CMuehwkGh++wKaLZkc3rQeKFUc2hLalSvcO8XLmC
2vgNQr3O9AE/mavo2nN+mzLujW6Iedc2baoULJ2n6cIm6rxnzZbk76HMK2QsiIWn
TtU11p3YUX+Y4zjSJCdFbPl0OzlkZKd8wsEOwEAo6PxgUWB5m06YuF48tJJzIYkr
nxmv2NaSCp8RGMtAguMUmz/fRDmNVxeXy3WY0GA03eZCPK5KvINVU4flzCjdP3mT
qaU=
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:03:50 2025 by rpki-client