Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/1/326130623a396534303a3a2f32392d3239203d3e20323135343336.roa
File: 326130623a396534303a3a2f32392d3239203d3e20323135343336.roa (raw, json)
Hash identifier: p6x3voG/JLiPZ4tqlGr+BFhB4AvaXzc3wuZQnukJCDc=
Subject key identifier: 4C:EC:0C:BB:5A:B9:AD:1F:8A:D6:AE:21:AB:1F:93:4F:93:14:E9:DE
Certificate issuer: /CN=514199BA2112D71D72E20DCA3EC2EE2C31F2979C
Certificate serial: 2152DAE5A230F712DCD899DA79BEF67900FE5F2F
Authority key identifier: 51:41:99:BA:21:12:D7:1D:72:E2:0D:CA:3E:C2:EE:2C:31:F2:97:9C
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/514199BA2112D71D72E20DCA3EC2EE2C31F2979C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/1/326130623a396534303a3a2f32392d3239203d3e20323135343336.roa
Signing time: Sat 25 May 2024 10:28:16 +0000
ROA not before: Sat 25 May 2024 10:23:16 +0000
ROA not after: Sat 24 May 2025 10:28:16 +0000
asID: 215436
IP address blocks: 2a0b:9e40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:52:da:e5:a2:30:f7:12:dc:d8:99:da:79:be:f6:79:00:fe:5f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=514199BA2112D71D72E20DCA3EC2EE2C31F2979C
Validity
Not Before: May 25 10:23:16 2024 GMT
Not After : May 24 10:28:16 2025 GMT
Subject: CN=4CEC0CBB5AB9AD1F8AD6AE21AB1F934F9314E9DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b6:1b:84:00:0b:73:26:52:89:7a:9e:cb:7c:
e0:75:c8:29:33:5d:c7:48:fa:d9:10:fa:13:be:6d:
fb:51:7c:a1:ba:f1:1e:0a:3e:09:0e:47:4d:78:c2:
b8:6a:a8:01:14:24:a6:a8:9a:e5:6e:e1:1c:04:2f:
44:ea:1e:70:bd:bf:4b:88:07:a2:21:70:fb:de:c0:
9d:4d:0a:4b:ae:a2:54:7f:f3:d9:39:ec:e7:32:4b:
83:1c:92:e6:03:38:52:ff:d9:dd:4b:04:95:e0:47:
41:4b:fe:da:93:2a:09:b4:33:95:22:2f:93:9b:8d:
07:ce:4a:35:ec:34:09:27:b3:cc:2e:9a:f8:87:eb:
09:4d:a3:cb:66:1f:da:14:36:ff:c7:a6:58:ce:e6:
b0:ca:6b:95:6c:fe:17:ca:58:5d:cf:19:40:25:ca:
c4:bc:13:ba:c1:d3:2d:1c:d7:e7:11:d1:b4:a0:6f:
22:08:10:b5:b0:ff:5e:da:54:9c:78:b9:2e:c7:d0:
b6:cb:ae:b2:4b:32:b5:36:a8:30:19:34:74:b4:b9:
00:d7:a0:80:e0:17:4d:23:f1:ce:03:c5:6e:30:8d:
76:eb:4d:ca:54:b0:e1:2e:48:9e:95:51:e5:a7:d9:
0d:1d:a7:98:86:11:1f:d7:6b:ae:d1:33:d2:21:2e:
06:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EC:0C:BB:5A:B9:AD:1F:8A:D6:AE:21:AB:1F:93:4F:93:14:E9:DE
X509v3 Authority Key Identifier:
keyid:51:41:99:BA:21:12:D7:1D:72:E2:0D:CA:3E:C2:EE:2C:31:F2:97:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/1/514199BA2112D71D72E20DCA3EC2EE2C31F2979C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/514199BA2112D71D72E20DCA3EC2EE2C31F2979C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/1/326130623a396534303a3a2f32392d3239203d3e20323135343336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:9e40::/29
Signature Algorithm: sha256WithRSAEncryption
79:43:0e:82:df:0e:b0:9d:eb:05:16:29:5c:70:08:5b:df:9b:
c7:b2:61:3b:67:3e:24:e4:25:31:5c:0e:88:f0:52:df:1b:ca:
29:93:42:08:b2:27:92:33:14:fc:04:4a:9e:3a:26:07:b0:64:
9d:c3:0c:4e:a7:74:aa:2e:36:ea:1f:51:3e:5b:43:89:80:af:
7d:55:8c:3f:83:0b:fe:d9:e7:9e:22:d6:f1:8a:9c:4c:62:3a:
45:b4:d6:2b:0e:3f:cf:b4:e5:13:4b:26:e5:1d:ec:c1:8c:e0:
4c:2d:2e:3a:3a:89:5f:d5:03:4a:35:f0:18:81:e0:1b:a3:8a:
30:89:1c:b4:57:75:0d:b9:fc:8a:0e:01:df:04:c1:75:a4:44:
eb:25:80:0b:ea:c4:93:df:7d:70:0c:25:8d:3c:8f:fe:01:31:
0a:87:9b:d7:89:ee:73:6e:9c:0d:0a:c6:52:3b:69:ed:b2:da:
ca:4e:b0:cc:09:c9:54:03:f1:e3:3c:3f:3d:63:fc:3e:17:c9:
10:a0:dc:49:c1:95:86:b8:c1:ca:5a:88:fb:84:5f:0f:9d:59:
e2:7e:ee:70:dc:89:aa:79:56:28:ef:f1:61:4f:f8:18:96:bc:
1f:3d:97:5e:9c:d3:c7:50:60:8f:0d:33:56:3b:93:f5:44:aa:
86:4a:f6:28
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgIUIVLa5aIw9xLc2Jnaeb72eQD+Xy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE0MTk5QkEyMTEyRDcxRDcyRTIwRENBM0VDMkVFMkMz
MUYyOTc5QzAeFw0yNDA1MjUxMDIzMTZaFw0yNTA1MjQxMDI4MTZaMDMxMTAvBgNV
BAMTKDRDRUMwQ0JCNUFCOUFEMUY4QUQ2QUUyMUFCMUY5MzRGOTMxNEU5REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkthuEAAtzJlKJep7LfOB1yCkz
XcdI+tkQ+hO+bftRfKG68R4KPgkOR014wrhqqAEUJKaomuVu4RwEL0TqHnC9v0uI
B6IhcPvewJ1NCkuuolR/89k57OcyS4MckuYDOFL/2d1LBJXgR0FL/tqTKgm0M5Ui
L5ObjQfOSjXsNAkns8wumviH6wlNo8tmH9oUNv/HpljO5rDKa5Vs/hfKWF3PGUAl
ysS8E7rB0y0c1+cR0bSgbyIIELWw/17aVJx4uS7H0LbLrrJLMrU2qDAZNHS0uQDX
oIDgF00j8c4DxW4wjXbrTcpUsOEuSJ6VUeWn2Q0dp5iGER/Xa67RM9IhLgaXAgMB
AAGjggJuMIICajAdBgNVHQ4EFgQUTOwMu1q5rR+K1q4hqx+TT5MU6d4wHwYDVR0j
BBgwFoAUUUGZuiES1x1y4g3KPsLuLDHyl5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzEvNTE0MTk5QkEyMTEyRDcxRDcyRTIwRENBM0VDMkVFMkMzMUYyOTc5Qy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTE0MTk5QkEyMTEyRDcxRDcyRTIwRENBM0VDMkVFMkMzMUYy
OTc5Qy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzEvMzI2MTMwNjIzYTM5NjUzNDMw
M2EzYTJmMzIzOTJkMzIzOTIwM2QzZTIwMzIzMTM1MzQzMzM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUD
KgueQDANBgkqhkiG9w0BAQsFAAOCAQEAeUMOgt8OsJ3rBRYpXHAIW9+bx7JhO2c+
JOQlMVwOiPBS3xvKKZNCCLInkjMU/ARKnjomB7BkncMMTqd0qi426h9RPltDiYCv
fVWMP4ML/tnnniLW8YqcTGI6RbTWKw4/z7TlE0sm5R3swYzgTC0uOjqJX9UDSjXw
GIHgG6OKMIkctFd1Dbn8ig4B3wTBdaRE6yWAC+rEk999cAwljTyP/gExCoeb14nu
c26cDQrGUjtp7bLayk6wzAnJVAPx4zw/PWP8PhfJEKDcScGVhrjBylqI+4RfD51Z
4n7ucNyJqnlWKO/xYU/4GJa8Hz2XXpzTx1Bgjw0zVjuT9USqhkr2KA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:31 2025 by rpki-client