Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/7/326131343a346238303a3a2f32392d3438203d3e203539393933.roa
File: 326131343a346238303a3a2f32392d3438203d3e203539393933.roa (raw, json)
Hash identifier: pqhKOI7dEI1NyWzxypFMinuyD4TC98yI2oT5iaYsY1I=
Subject key identifier: 19:4C:A4:97:79:66:15:C6:5F:32:89:A8:29:B2:15:FB:AD:39:3F:02
Certificate issuer: /CN=764743587826154478cca22375d0f58a357db1f0
Certificate serial: 1D54383298D7005BA90C250E64582585BF9D18CF
Authority key identifier: 76:47:43:58:78:26:15:44:78:CC:A2:23:75:D0:F5:8A:35:7D:B1:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkdDWHgmFUR4zKIjddD1ijV9sfA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/7/326131343a346238303a3a2f32392d3438203d3e203539393933.roa
Signing time: Thu 25 Jan 2024 17:32:00 +0000
ROA not before: Thu 25 Jan 2024 17:27:00 +0000
ROA not after: Thu 23 Jan 2025 17:32:00 +0000
asID: 59993
IP address blocks: 2a14:4b80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:54:38:32:98:d7:00:5b:a9:0c:25:0e:64:58:25:85:bf:9d:18:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764743587826154478cca22375d0f58a357db1f0
Validity
Not Before: Jan 25 17:27:00 2024 GMT
Not After : Jan 23 17:32:00 2025 GMT
Subject: CN=194CA497796615C65F3289A829B215FBAD393F02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:cd:76:34:59:62:84:d0:2e:0a:38:0b:ef:
7f:a0:ba:78:00:0d:e5:42:d1:e6:20:64:e8:2e:46:
99:25:14:2a:a0:3e:f8:21:d6:81:96:b6:eb:03:8d:
30:4e:ba:7b:60:59:2a:6f:46:1e:3c:84:ac:54:c9:
0a:e6:0a:c2:97:b5:23:cf:57:e1:da:50:54:0b:a6:
a6:eb:04:1e:d1:0a:a0:52:a9:5b:75:ee:bb:8f:21:
c6:dc:f9:8a:c2:8a:fc:14:bc:05:4c:20:a9:1e:9f:
a5:4d:02:5b:10:f6:cd:f9:cd:b0:dc:a3:a6:75:fd:
4c:58:87:21:f0:7a:1d:9a:28:49:dd:89:14:0e:4d:
c7:81:60:e8:4b:e9:2c:18:d1:b3:82:22:4f:53:d7:
9e:2f:72:2d:e3:4d:7c:06:2f:58:42:7c:62:12:2e:
e8:2a:9b:43:e7:2b:f4:ec:28:98:ae:9c:ab:b0:07:
aa:6e:a3:3a:c3:24:06:fa:eb:91:a3:63:c0:3e:84:
4f:03:d4:ae:93:d7:59:02:2d:28:8c:bb:b2:dd:7e:
b3:77:bb:d3:34:6f:28:8d:3e:92:aa:80:6b:0a:d7:
5f:b2:e4:42:41:f2:d9:c2:66:b4:aa:e3:2c:31:9b:
54:23:fe:96:45:62:3b:26:b8:6f:4e:d3:32:16:eb:
b8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4C:A4:97:79:66:15:C6:5F:32:89:A8:29:B2:15:FB:AD:39:3F:02
X509v3 Authority Key Identifier:
keyid:76:47:43:58:78:26:15:44:78:CC:A2:23:75:D0:F5:8A:35:7D:B1:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/7/764743587826154478CCA22375D0F58A357DB1F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkdDWHgmFUR4zKIjddD1ijV9sfA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/7/326131343a346238303a3a2f32392d3438203d3e203539393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
44:5a:4e:7f:30:60:db:71:c4:fd:18:ff:5d:90:2d:d3:3f:98:
13:3b:96:f1:a8:53:c7:eb:c5:a8:cf:87:db:35:07:93:26:2b:
c3:e9:f3:f8:de:d5:63:e0:24:d9:1a:f4:ec:8b:4c:2f:2a:4e:
fd:69:87:11:e0:37:e6:5e:73:f7:e6:53:4f:61:c0:5c:5a:4b:
38:2c:38:9e:21:b3:89:56:5e:cc:4c:54:63:37:56:16:94:fb:
bb:c2:bd:fe:f7:58:f7:78:4f:4d:ac:8c:df:75:ea:53:11:9d:
1a:28:7e:55:6e:8e:f5:a1:ba:22:d4:3f:05:c9:ee:15:7a:05:
61:81:d4:60:87:99:0a:55:fa:59:b6:cc:36:1c:ed:00:f9:3b:
46:7c:f9:e8:0d:d2:63:8a:23:ad:ee:33:b3:87:13:e5:a5:59:
8f:05:51:5c:8c:d0:4c:34:7c:a1:1d:17:d4:33:2f:fa:00:3a:
ea:c7:ca:1b:06:43:69:f7:7a:ca:ed:cf:37:bd:bf:74:ed:22:
98:2b:38:2b:40:05:8f:d2:5d:ff:28:e2:7f:0c:a1:4d:4b:23:
3f:5d:cb:18:ec:20:f2:21:13:b9:95:b2:b0:c4:2f:db:cf:6f:
e8:ee:23:69:eb:7e:97:0c:68:18:2f:8b:cb:67:c1:8e:50:cc:
5d:2e:66:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:01:45 2025 by rpki-client