Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e203231373338.roa
File: 326131343a3763373a623030623a3a2f34382d3438203d3e203231373338.roa (raw, json)
Hash identifier: bil6YKIcBOdPEb9zqaNbsTZVPGQj57Htndu0QVF5I8w=
Subject key identifier: 4E:A3:9F:89:C3:13:0D:B5:54:6F:A5:82:E4:BF:FD:E1:E3:75:D8:87
Certificate issuer: /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial: 2B4DBC5CEEB4B7B4C476983740AFBB2406718746
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e203231373338.roa
Signing time: Sun 17 Mar 2024 20:46:19 +0000
ROA not before: Sun 17 Mar 2024 20:41:19 +0000
ROA not after: Sun 16 Mar 2025 20:46:19 +0000
asID: 21738
IP address blocks: 2a14:7c7:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:4d:bc:5c:ee:b4:b7:b4:c4:76:98:37:40:af:bb:24:06:71:87:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Validity
Not Before: Mar 17 20:41:19 2024 GMT
Not After : Mar 16 20:46:19 2025 GMT
Subject: CN=4EA39F89C3130DB5546FA582E4BFFDE1E375D887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f6:fe:12:48:db:55:9e:d5:1b:13:3e:70:ac:
29:e2:4a:20:72:51:9a:91:d4:0f:fa:ae:e2:4c:3a:
48:69:b2:3d:e9:09:86:53:74:84:9f:a2:68:4d:47:
97:1a:b6:eb:a9:b4:fb:ad:63:f4:62:aa:84:a5:13:
63:7c:67:c2:07:9c:29:12:09:0b:22:da:5d:ba:72:
3c:b1:03:40:c4:18:c6:32:9e:19:c7:0d:9c:cc:c8:
99:10:65:e2:1d:4f:1e:19:83:38:64:5a:f1:b8:27:
3e:40:01:60:4b:12:d8:b0:df:49:3f:94:f4:61:e7:
eb:a4:f8:b2:90:42:61:91:f4:f9:8a:ca:8f:3c:b1:
97:6a:01:c2:31:46:02:cd:ac:23:61:53:08:d7:35:
76:5c:74:db:3e:32:f6:2b:2e:f1:5d:49:dc:7f:a3:
c8:fe:07:9e:0c:a7:54:06:a8:8f:b3:cc:97:6c:1c:
df:99:f8:95:88:a2:91:58:77:cc:6a:2c:ee:58:56:
56:dc:e6:6e:e3:47:69:87:b9:4d:af:a4:55:6a:a4:
68:7a:92:d1:84:9e:4c:bf:af:d4:1c:c2:80:ba:1b:
5d:83:98:f5:27:5c:4d:78:b7:45:dd:66:0e:f8:b1:
72:f1:e7:82:57:b8:15:60:06:2f:59:f8:02:7d:14:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A3:9F:89:C3:13:0D:B5:54:6F:A5:82:E4:BF:FD:E1:E3:75:D8:87
X509v3 Authority Key Identifier:
keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e203231373338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c7:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
8e:bd:9c:78:d3:7e:be:aa:72:25:b4:a4:0e:27:36:4e:1b:6f:
65:64:df:be:2c:9f:99:7a:b2:5a:06:e2:d1:d1:bc:c5:f0:35:
cf:d1:98:49:eb:35:38:56:d2:e9:6a:8a:ae:73:ac:8c:d2:ac:
4e:ec:60:ea:a4:1a:37:ec:1d:87:63:cf:d1:59:05:da:2f:35:
93:8f:df:65:aa:bf:19:42:23:c3:29:6e:4a:75:0c:b2:39:54:
b3:8c:80:0a:5c:b0:82:2c:da:32:e4:b8:3f:3d:6d:7b:5f:d7:
ed:a8:dd:79:d6:0f:0f:2b:58:58:01:7e:b6:f3:1e:28:c9:85:
ef:90:7c:87:23:04:92:90:a5:cb:32:95:37:49:c3:36:92:82:
cd:3a:2f:2c:5b:30:3b:25:5c:cf:4a:c4:93:4b:df:fd:3c:fc:
59:e1:4e:d5:bf:c2:e8:95:c0:5c:65:e4:d7:e8:1a:3d:20:23:
17:b9:b5:54:a9:7b:4e:24:28:7d:1f:bb:8d:d8:52:c9:60:c7:
51:9e:0f:b2:35:d3:95:b4:a0:64:c1:0f:a2:b1:f5:66:8f:8b:
b7:e6:8c:b0:82:89:28:1e:3e:14:c7:73:94:53:ba:47:89:37:
c5:c9:b0:f8:26:8d:55:cd:1d:59:db:03:31:35:1b:4f:0b:0e:
5b:71:a1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org