Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a376666663a3a2f34382d3438203d3e20323136333630.roa
File: 326131333a646638343a376666663a3a2f34382d3438203d3e20323136333630.roa (raw, json)
Hash identifier: lYRMajN7nVjMexZxHXqdroiN0WBtOBDa2R2uwSATXRw=
Subject key identifier: 44:11:D1:22:D2:1D:6F:D3:03:72:28:0D:E6:05:6E:8B:14:1F:6E:11
Certificate issuer: /CN=C733D4ED636DF1253237FE26C90A8F298B550237
Certificate serial: 4101564A0BF10EDCB89B8888FCF429756A78B7B9
Authority key identifier: C7:33:D4:ED:63:6D:F1:25:32:37:FE:26:C9:0A:8F:29:8B:55:02:37
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/C733D4ED636DF1253237FE26C90A8F298B550237.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a376666663a3a2f34382d3438203d3e20323136333630.roa
Signing time: Sun 22 Oct 2023 01:54:06 +0000
ROA not before: Sun 22 Oct 2023 01:49:06 +0000
ROA not after: Sun 20 Oct 2024 01:54:06 +0000
asID: 216360
IP address blocks: 2a13:df84:7fff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:01:56:4a:0b:f1:0e:dc:b8:9b:88:88:fc:f4:29:75:6a:78:b7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C733D4ED636DF1253237FE26C90A8F298B550237
Validity
Not Before: Oct 22 01:49:06 2023 GMT
Not After : Oct 20 01:54:06 2024 GMT
Subject: CN=4411D122D21D6FD30372280DE6056E8B141F6E11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:ad:b7:2e:93:2e:3a:0d:a7:6c:31:7b:d6:
a5:af:8b:21:8f:f9:96:22:49:a9:68:a3:50:a4:8f:
20:14:7b:d1:d6:3b:87:c5:2f:46:02:4a:c4:6b:51:
1f:83:27:0c:cb:d3:7c:29:74:27:8f:c6:6c:aa:ec:
fb:38:54:5a:c2:a9:9e:b3:2e:c6:84:60:76:ad:2d:
6e:07:c3:c9:35:ac:59:70:06:e9:fa:91:24:00:ca:
ec:87:8c:03:dc:15:9e:5c:49:ec:26:9b:34:36:a4:
99:a7:3f:68:b0:3a:28:51:87:2c:dc:9f:2d:c3:56:
2c:e1:68:5d:9d:8d:7a:d1:48:0e:c3:ce:3a:f7:5c:
c2:71:29:54:9a:60:b0:1f:e7:db:2f:d0:7d:80:6a:
16:31:6c:11:b2:aa:4c:41:90:26:9d:54:e1:71:be:
2d:2a:83:a4:5a:63:c8:2c:a4:0f:33:7e:a4:5e:da:
38:03:e6:5c:52:2f:e0:03:56:53:f4:e9:50:d2:34:
de:f0:f8:6b:06:80:49:05:07:9a:dc:16:4d:7a:b6:
db:c2:dd:d4:f0:e6:d4:08:55:44:1e:c9:dd:30:55:
b1:cf:3d:e7:ad:4a:b6:3c:f9:69:dc:79:f6:83:20:
66:dc:83:66:50:3d:66:4d:d9:7a:df:e9:51:5c:65:
cf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:11:D1:22:D2:1D:6F:D3:03:72:28:0D:E6:05:6E:8B:14:1F:6E:11
X509v3 Authority Key Identifier:
keyid:C7:33:D4:ED:63:6D:F1:25:32:37:FE:26:C9:0A:8F:29:8B:55:02:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/C733D4ED636DF1253237FE26C90A8F298B550237.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/C733D4ED636DF1253237FE26C90A8F298B550237.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a376666663a3a2f34382d3438203d3e20323136333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df84:7fff::/48
Signature Algorithm: sha256WithRSAEncryption
55:46:07:92:2c:49:16:94:23:27:88:36:4f:36:1e:ac:be:27:
b7:96:52:8c:6e:20:0b:c9:3e:ea:c0:61:25:7f:fc:73:d3:b0:
90:cf:bb:0d:47:5d:62:2f:dc:42:58:ce:b7:73:3a:3d:5e:ae:
e9:fa:09:13:cf:14:4d:4d:5c:fe:2f:61:d8:0f:d1:3f:d9:28:
77:ad:15:a4:7c:e6:5c:55:31:fa:19:11:26:12:6f:6d:cf:8b:
39:ba:d6:d5:ed:17:31:f8:0c:2a:c7:21:69:de:4f:9c:a0:92:
44:02:15:32:d1:8e:b7:c4:b5:db:1e:e4:21:ec:b6:55:09:d3:
86:81:45:73:2f:e2:f4:4e:13:04:c2:9d:20:ab:d3:1b:b5:b0:
f7:32:63:2e:60:1a:fe:75:ff:90:15:78:65:9a:6d:4c:ea:b1:
ab:f6:9f:0b:aa:71:14:a3:c1:b5:43:92:1c:ff:3e:71:23:57:
53:a0:8d:fb:ef:f0:aa:ae:f5:8a:cf:0a:a0:aa:06:5f:7d:9b:
e4:37:6a:fc:82:c9:37:2f:4e:10:f7:cc:75:4c:17:0c:a9:09:
0d:14:b8:37:a2:bb:76:41:25:82:af:93:ea:c1:db:bd:e2:60:
ab:5a:cd:e5:80:6f:c4:fb:d8:66:0e:c4:f4:71:bf:45:ce:ee:
44:a0:88:03
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUQQFWSgvxDty4m4iI/PQpdWp4t7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzczM0Q0RUQ2MzZERjEyNTMyMzdGRTI2QzkwQThGMjk4
QjU1MDIzNzAeFw0yMzEwMjIwMTQ5MDZaFw0yNDEwMjAwMTU0MDZaMDMxMTAvBgNV
BAMTKDQ0MTFEMTIyRDIxRDZGRDMwMzcyMjgwREU2MDU2RThCMTQxRjZFMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUbq23LpMuOg2nbDF71qWviyGP
+ZYiSaloo1CkjyAUe9HWO4fFL0YCSsRrUR+DJwzL03wpdCePxmyq7Ps4VFrCqZ6z
LsaEYHatLW4Hw8k1rFlwBun6kSQAyuyHjAPcFZ5cSewmmzQ2pJmnP2iwOihRhyzc
ny3DVizhaF2djXrRSA7Dzjr3XMJxKVSaYLAf59sv0H2AahYxbBGyqkxBkCadVOFx
vi0qg6RaY8gspA8zfqRe2jgD5lxSL+ADVlP06VDSNN7w+GsGgEkFB5rcFk16ttvC
3dTw5tQIVUQeyd0wVbHPPeetSrY8+WncefaDIGbcg2ZQPWZN2Xrf6VFcZc97AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQURBHRItIdb9MDcigN5gVuixQfbhEwHwYDVR0j
BBgwFoAUxzPU7WNt8SUyN/4myQqPKYtVAjcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjdiNTdkYTktY2UyZC00MTBjLTg4OTgtYjA5NmY3ZTkw
ZjUwLzAvQzczM0Q0RUQ2MzZERjEyNTMyMzdGRTI2QzkwQThGMjk4QjU1MDIzNy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNDAzMmM4Zi0xZDU3LTRj
M2ItOTA0My1hMGU3ZmViZjE2N2QvMC9DNzMzRDRFRDYzNkRGMTI1MzIzN0ZFMjZD
OTBBOEYyOThCNTUwMjM3LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9mN2I1N2RhOS1jZTJkLTQxMGMtODg5OC1iMDk2ZjdlOTBmNTAvMC8zMjYxMzEz
MzNhNjQ2NjM4MzQzYTM3NjY2NjY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM2MzMzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhPfhH//MA0GCSqGSIb3DQEBCwUAA4IBAQBV
RgeSLEkWlCMniDZPNh6svie3llKMbiALyT7qwGElf/xz07CQz7sNR11iL9xCWM63
czo9Xq7p+gkTzxRNTVz+L2HYD9E/2Sh3rRWkfOZcVTH6GREmEm9tz4s5utbV7Rcx
+AwqxyFp3k+coJJEAhUy0Y63xLXbHuQh7LZVCdOGgUVzL+L0ThMEwp0gq9MbtbD3
MmMuYBr+df+QFXhlmm1M6rGr9p8LqnEUo8G1Q5Ic/z5xI1dToI377/CqrvWKzwqg
qgZffZvkN2r8gsk3L04Q98x1TBcMqQkNFLg3ort2QSWCr5Pqwdu94mCrWs3lgG/E
+9hmDsT0cb9Fzu5EoIgD
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:44 2025 by rpki-client