Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323135363635.roa
File: 326131343a3763373a623030623a3a2f34382d3438203d3e20323135363635.roa (raw, json)
Hash identifier: EOXpQ/cqXgjp6IyUyGjFg3Ge97Uj0QL9/D4zQ/Ua95c=
Subject key identifier: EA:50:2F:5C:11:51:3D:4C:4B:5A:DD:B7:47:F9:9A:A1:2B:E9:74:72
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 4CB5FBCBB965DB4716F1194A47D699973C46F8EA
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323135363635.roa
Signing time: Sun 17 Mar 2024 20:41:21 +0000
ROA not before: Sun 17 Mar 2024 20:36:21 +0000
ROA not after: Sun 16 Mar 2025 20:41:21 +0000
asID: 215665
IP address blocks: 2a14:7c7:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b5:fb:cb:b9:65:db:47:16:f1:19:4a:47:d6:99:97:3c:46:f8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 17 20:36:21 2024 GMT
Not After : Mar 16 20:41:21 2025 GMT
Subject: CN=EA502F5C11513D4C4B5ADDB747F99AA12BE97472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c2:47:d2:72:ec:6e:84:1d:1f:2b:ed:7c:92:
0d:1c:3e:cc:18:0d:2a:13:5e:52:be:97:d9:cf:c2:
3b:1f:fe:a7:d0:91:18:38:89:64:c1:6f:e4:d3:af:
b0:d1:e6:3c:3f:a6:22:91:6e:54:da:72:24:94:c8:
1f:4b:d3:eb:07:5f:70:ce:fd:94:05:56:cd:5d:9a:
0b:36:f5:31:0a:fd:b3:3b:00:43:b5:5a:77:61:47:
6f:ae:f1:d6:31:6f:57:04:e9:32:d3:cf:6e:1e:f5:
c5:ad:37:ff:73:44:31:6c:11:36:55:42:33:cd:0a:
32:c0:be:3d:f4:0b:d9:34:8f:a4:8c:c4:03:0c:36:
73:40:49:66:0f:c9:48:3c:f9:83:30:ed:f1:72:ac:
cb:9f:ab:45:62:6a:06:42:6f:21:5e:4a:9f:e2:fd:
af:fc:08:65:aa:19:ac:b8:26:98:c6:68:80:68:d8:
df:40:b6:a8:4f:f7:21:73:25:1e:22:1d:cf:a4:f0:
ac:41:bf:23:83:04:67:77:75:eb:3c:9c:32:07:3f:
35:f8:3d:7c:71:cd:f3:45:22:07:a6:5e:8f:53:d9:
3b:fd:58:c1:d1:a8:ce:25:d3:f0:99:fd:5c:61:e0:
72:e5:13:19:99:26:7d:81:0f:57:8f:c0:d8:dd:69:
dc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:50:2F:5C:11:51:3D:4C:4B:5A:DD:B7:47:F9:9A:A1:2B:E9:74:72
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323135363635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c7:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
a1:7b:12:cc:bd:02:69:2a:83:46:b3:a0:57:ab:4c:7c:fb:38:
a3:0b:e9:1e:69:5d:ba:9b:5a:0b:0b:2a:0c:79:a1:66:88:3b:
8b:e2:ef:83:10:8c:fe:31:73:e7:33:67:73:b2:38:f9:69:3f:
88:63:94:2b:47:30:c2:ae:84:6a:3c:1f:e8:bf:bc:80:a1:3e:
3f:7e:05:f2:23:9b:6e:92:2d:3f:b4:0e:7e:65:3d:4c:6a:39:
19:b5:13:c4:fe:9b:32:dc:2f:43:c9:84:1f:32:b1:11:e6:28:
26:5a:84:8c:86:72:09:4d:4e:db:2c:e6:86:27:29:52:a8:5b:
8e:3a:41:77:6a:32:4d:44:a2:b7:7e:59:7f:6b:04:0f:b1:bc:
0d:8d:75:ea:09:c5:2c:3d:88:fb:cd:1b:b2:73:13:c6:61:e4:
6e:03:4a:3c:af:8d:ae:cd:00:19:e1:85:45:78:da:bc:e2:06:
7c:0f:1e:f5:36:a1:46:e1:a7:b8:ec:44:40:11:fc:5c:4a:1b:
d6:0e:1a:9f:8e:08:f1:91:a2:73:04:2e:7c:d0:cb:63:eb:2c:
de:bf:7d:9a:a0:80:a5:ba:bd:ed:08:99:c6:4f:c5:41:be:19:
07:67:12:72:3d:fe:c8:37:e4:8f:05:dd:3c:34:93:38:28:12:
bc:9e:eb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:08:14 2025 by rpki-client