Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa
File: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier: pidPjaC/0SzUTjVt7jeHfSi0+syOL6p0IuoBQSBkar0=
Subject key identifier: EF:72:6E:63:A0:EB:62:A8:9F:26:A7:F3:26:BD:A8:7D:DD:D3:F7:0F
Certificate issuer: /CN=75d2e4bdf4befc82ac938ecc346f0b3216597523
Certificate serial: 0A75BBC1B0049F5DD30EC95BDB945C1D340CD310
Authority key identifier: 75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 11:39:54 +0000
ROA not before: Fri 07 Feb 2025 11:34:54 +0000
ROA not after: Fri 06 Feb 2026 11:39:54 +0000
asID: 47272
IP address blocks: 2001:67c:d90::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:75:bb:c1:b0:04:9f:5d:d3:0e:c9:5b:db:94:5c:1d:34:0c:d3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d2e4bdf4befc82ac938ecc346f0b3216597523
Validity
Not Before: Feb 7 11:34:54 2025 GMT
Not After : Feb 6 11:39:54 2026 GMT
Subject: CN=EF726E63A0EB62A89F26A7F326BDA87DDDD3F70F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:77:12:12:d9:61:bd:c1:da:ae:df:5a:1d:
4c:09:39:3b:1c:f5:d4:6f:f3:9f:67:70:1b:d8:6b:
80:85:12:77:16:7f:21:f0:a6:1c:50:49:5e:40:f9:
04:77:54:0c:0b:a2:ae:d3:cf:ed:e8:30:06:38:7b:
44:c9:8e:16:7e:fc:82:bc:d5:d9:6b:aa:e3:fc:13:
ac:65:3d:b4:1c:de:11:a5:d9:80:81:ac:eb:43:42:
f2:50:d9:1f:17:34:99:2a:c4:64:27:0b:0a:cf:a5:
41:b1:4a:3d:5e:1b:6f:4c:86:21:ee:a4:f3:10:1a:
f4:61:e9:11:20:01:8a:3d:87:d9:0b:8b:45:28:af:
6b:7e:c1:51:ee:40:21:5b:ce:7a:ca:68:6e:ba:a3:
be:5b:25:fc:71:94:f6:ae:1f:49:95:c1:19:9f:fd:
76:d0:e3:af:e3:d4:74:a9:ff:fd:33:f4:a9:2c:be:
6b:1d:9c:3d:a5:d5:ef:6e:a3:e5:79:b0:e2:64:d2:
24:3b:f8:71:67:ce:3f:0d:c7:06:54:c0:28:3c:4c:
df:6e:fb:22:44:6a:60:48:fd:0f:01:b6:0b:03:66:
03:1d:c1:55:c1:6b:26:1c:23:10:36:1c:7d:6d:4f:
12:3c:78:88:ff:39:6a:5d:16:56:b7:7b:7d:6b:37:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:72:6E:63:A0:EB:62:A8:9F:26:A7:F3:26:BD:A8:7D:DD:D3:F7:0F
X509v3 Authority Key Identifier:
keyid:75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d90::/48
Signature Algorithm: sha256WithRSAEncryption
86:fd:cd:7e:a2:1d:a2:51:dd:56:e0:c2:13:f2:01:25:e3:6e:
46:dd:cc:7a:25:26:98:71:a4:ed:1f:40:b4:20:08:fe:f3:63:
68:9c:02:f8:31:a7:f9:54:03:98:4c:82:30:ef:a4:d5:f6:f3:
79:ed:e0:f2:b7:c1:a8:2a:28:77:ef:81:16:c2:55:19:75:fe:
bd:e8:24:de:cc:75:e1:47:2a:34:99:7c:65:e8:ac:49:2b:93:
60:51:77:43:ed:5c:b7:05:96:ee:49:89:14:b5:62:b3:f8:14:
0d:a1:b0:27:72:25:bb:67:12:82:9f:a5:6f:18:2f:dd:ab:22:
79:8c:ec:c3:d3:19:1f:d2:4e:79:9a:3b:69:09:d4:dd:5a:70:
93:eb:c1:19:0e:a5:16:ba:26:62:47:b3:b4:65:65:bf:aa:da:
0d:fa:c2:40:49:bc:ea:77:a4:ab:74:39:97:a8:71:4b:16:f7:
42:2c:65:9c:5f:e7:0b:4e:1a:f4:98:c3:9c:41:2f:3a:24:51:
0f:b8:36:12:62:3e:a0:05:02:c4:ac:2f:4d:2e:a2:64:68:dc:
30:b4:cc:5e:f1:19:6a:f4:b4:9d:f9:b6:a7:20:e2:da:fa:ed:
3b:ef:d4:d0:84:91:c7:c4:d1:89:bc:f8:b6:de:e9:79:7e:d5:
07:25:51:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:12:36 2025 by rpki-client