Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/326131333a656634373a3a2f33322d3332203d3e20323136313536.roa
File: 326131333a656634373a3a2f33322d3332203d3e20323136313536.roa (raw, json)
Hash identifier: S78+OpGj4uaP8BNrYS7ZGeTkCuNPT0jP5ccqJ498cqA=
Subject key identifier: 25:3C:07:CF:8A:1A:69:D7:DD:BC:A1:C7:40:0C:D5:16:C8:F4:2C:71
Certificate issuer: /CN=de87352238d030dc2ab690bc1b25fe640745db3c
Certificate serial: 2372957AC982017148D6573B6EFDC7F19671BECE
Authority key identifier: DE:87:35:22:38:D0:30:DC:2A:B6:90:BC:1B:25:FE:64:07:45:DB:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oc1IjjQMNwqtpC8GyX-ZAdF2zw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/326131333a656634373a3a2f33322d3332203d3e20323136313536.roa
Signing time: Tue 26 Dec 2023 14:44:17 +0000
ROA not before: Tue 26 Dec 2023 14:39:17 +0000
ROA not after: Tue 24 Dec 2024 14:44:17 +0000
asID: 216156
IP address blocks: 2a13:ef47::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:72:95:7a:c9:82:01:71:48:d6:57:3b:6e:fd:c7:f1:96:71:be:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de87352238d030dc2ab690bc1b25fe640745db3c
Validity
Not Before: Dec 26 14:39:17 2023 GMT
Not After : Dec 24 14:44:17 2024 GMT
Subject: CN=253C07CF8A1A69D7DDBCA1C7400CD516C8F42C71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:ee:64:45:e7:fe:28:6c:9a:46:a5:d0:c3:
5d:ff:12:60:c9:ba:96:8d:66:f8:05:44:c5:e8:bf:
99:bc:87:f8:5f:c8:57:87:fb:b6:3c:9a:ab:6d:ae:
41:78:da:e5:99:7b:c9:5a:cb:5e:c2:62:09:5a:e9:
7a:14:ef:55:23:fd:c5:6e:5b:26:79:12:c0:82:77:
72:ad:6a:3e:c6:1f:9f:65:4f:ec:c6:50:83:6a:be:
7d:a6:9a:8e:94:22:b9:55:20:fe:51:58:46:c1:98:
64:9a:20:45:94:4a:1e:bf:fd:5e:8f:f1:9f:c6:5c:
24:a7:43:cc:d5:b1:61:d8:0f:d7:d0:4b:3c:9b:ee:
05:a8:0e:af:28:b5:26:27:12:be:ed:33:3c:de:d0:
68:da:6b:84:8a:f5:d9:4d:4a:27:e6:1d:70:3f:b9:
27:8d:48:9b:a9:f7:60:03:cc:45:17:85:bc:26:0a:
43:7f:bb:b2:25:b7:9f:6d:4b:48:58:8e:fd:23:8b:
a6:9e:5c:39:37:91:7b:0e:02:57:ae:ac:79:01:00:
58:0f:cb:82:ce:fd:bf:0a:c3:29:9c:9e:77:de:c0:
2f:11:0b:76:35:3d:64:fd:28:73:1d:e6:f9:67:b1:
01:73:ba:89:40:1b:8c:a1:69:60:2d:85:b9:24:36:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3C:07:CF:8A:1A:69:D7:DD:BC:A1:C7:40:0C:D5:16:C8:F4:2C:71
X509v3 Authority Key Identifier:
keyid:DE:87:35:22:38:D0:30:DC:2A:B6:90:BC:1B:25:FE:64:07:45:DB:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/DE87352238D030DC2AB690BC1B25FE640745DB3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oc1IjjQMNwqtpC8GyX-ZAdF2zw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/326131333a656634373a3a2f33322d3332203d3e20323136313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef47::/32
Signature Algorithm: sha256WithRSAEncryption
dc:3f:a5:6f:58:14:d4:23:c3:28:26:c9:c4:13:7a:cb:97:90:
51:51:dd:33:3b:fa:34:59:20:7f:2a:c3:e8:39:17:87:70:8c:
9d:a6:e1:bb:ff:70:bc:c9:17:95:71:3a:6a:48:fc:6d:ee:db:
c2:e3:d2:a9:f1:76:a2:07:2a:d3:5f:55:04:a3:a5:18:22:cc:
28:0f:27:5d:31:c9:d1:52:1a:5c:e2:6a:da:1e:13:e2:87:21:
27:0f:8d:3d:d4:25:d8:5d:71:dc:3b:00:32:04:77:38:c4:a8:
56:22:35:67:c0:aa:58:6a:7a:40:ea:d5:81:fd:2b:05:5a:b5:
ea:0a:ff:cd:a9:04:17:3c:60:af:51:75:ee:1a:ad:11:32:69:
9c:f3:aa:fb:09:39:d0:8c:8f:00:a7:4c:51:b3:ef:55:9d:96:
98:c1:ee:d3:f3:cb:00:37:b0:d9:4a:49:a1:82:81:16:ee:b5:
fa:02:d9:63:91:75:33:1d:8a:71:e4:5d:24:e2:8a:36:75:ee:
0c:c0:60:89:af:46:fd:39:8d:13:6c:14:b8:42:5e:dc:c3:33:
82:fe:f4:1d:50:d0:5d:a8:24:e3:43:91:bb:18:4b:9c:2f:36:
49:ee:6f:d4:4d:ee:f0:70:1e:bd:56:39:95:ae:ff:7d:58:e6:
d0:4e:de:cc
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUI3KVesmCAXFI1lc7bv3H8ZZxvs4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGU4NzM1MjIzOGQwMzBkYzJhYjY5MGJjMWIyNWZlNjQw
NzQ1ZGIzYzAeFw0yMzEyMjYxNDM5MTdaFw0yNDEyMjQxNDQ0MTdaMDMxMTAvBgNV
BAMTKDI1M0MwN0NGOEExQTY5RDdEREJDQTFDNzQwMENENTE2QzhGNDJDNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvke5kRef+KGyaRqXQw13/EmDJ
upaNZvgFRMXov5m8h/hfyFeH+7Y8mqttrkF42uWZe8lay17CYgla6XoU71Uj/cVu
WyZ5EsCCd3Ktaj7GH59lT+zGUINqvn2mmo6UIrlVIP5RWEbBmGSaIEWUSh6//V6P
8Z/GXCSnQ8zVsWHYD9fQSzyb7gWoDq8otSYnEr7tMzze0Gjaa4SK9dlNSifmHXA/
uSeNSJup92ADzEUXhbwmCkN/u7Ilt59tS0hYjv0ji6aeXDk3kXsOAleurHkBAFgP
y4LO/b8KwymcnnfewC8RC3Y1PWT9KHMd5vlnsQFzuolAG4yhaWAthbkkNturAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUJTwHz4oaadfdvKHHQAzVFsj0LHEwHwYDVR0j
BBgwFoAU3oc1IjjQMNwqtpC8GyX+ZAdF2zwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjM3OTIwMmMtZTk3MC00M2Q3LTg1YzItMGRhYzgwYjE5
OWMzLzAvREU4NzM1MjIzOEQwMzBEQzJBQjY5MEJDMUIyNUZFNjQwNzQ1REIzQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNvYzFJampRTU53cXRwQzhHeVgtWkFk
RjJ6dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjM3OTIwMmMt
ZTk3MC00M2Q3LTg1YzItMGRhYzgwYjE5OWMzLzAvMzI2MTMxMzMzYTY1NjYzNDM3
M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzMTM2MzEzNTM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA
KhPvRzANBgkqhkiG9w0BAQsFAAOCAQEA3D+lb1gU1CPDKCbJxBN6y5eQUVHdMzv6
NFkgfyrD6DkXh3CMnabhu/9wvMkXlXE6akj8be7bwuPSqfF2ogcq019VBKOlGCLM
KA8nXTHJ0VIaXOJq2h4T4ochJw+NPdQl2F1x3DsAMgR3OMSoViI1Z8CqWGp6QOrV
gf0rBVq16gr/zakEFzxgr1F17hqtETJpnPOq+wk50IyPAKdMUbPvVZ2WmMHu0/PL
ADew2UpJoYKBFu61+gLZY5F1Mx2KceRdJOKKNnXuDMBgia9G/TmNE2wUuEJe3MMz
gv70HVDQXagk40ORuxhLnC82Se5v1E3u8HAevVY5la7/fVjm0E7ezA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:33 2025 by rpki-client