Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa
File: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (raw, json)
Hash identifier: T25tbrYVZpBemZDjqgpA9HPrUcZHUwwg3LOVGpsmSZ8=
Subject key identifier: 7E:D1:85:5D:BB:61:84:25:B5:3C:D2:D7:11:75:11:63:C6:61:0B:A1
Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Certificate serial: 083AE70F2447B728E6BE733FC2E48819921670DC
Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa
Signing time: Wed 22 Jan 2025 15:03:26 +0000
ROA not before: Wed 22 Jan 2025 14:58:26 +0000
ROA not after: Wed 21 Jan 2026 15:03:26 +0000
asID: 401386
IP address blocks: 2a14:7581:2100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:3a:e7:0f:24:47:b7:28:e6:be:73:3f:c2:e4:88:19:92:16:70:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Validity
Not Before: Jan 22 14:58:26 2025 GMT
Not After : Jan 21 15:03:26 2026 GMT
Subject: CN=7ED1855DBB618425B53CD2D711751163C6610BA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:86:18:e4:12:ba:80:b2:2b:3e:7e:31:93:
a1:97:80:a8:95:0a:4a:df:6d:77:7b:c8:d2:08:ec:
e7:35:1f:76:29:e9:f1:83:3f:e0:1d:0d:98:3b:3b:
59:4e:22:84:bb:46:80:a1:67:9b:5d:ec:1e:41:ed:
54:b3:88:51:85:e3:91:83:a1:95:45:88:76:71:85:
08:eb:1e:a3:ab:df:c5:ef:cf:4f:27:f6:b8:e7:da:
46:de:91:5d:f4:ba:5b:10:01:a3:00:b0:43:b0:fe:
aa:99:6b:9c:45:52:87:95:10:d5:d8:64:f7:f5:d6:
4d:1c:e2:15:88:20:ad:b0:38:2f:1b:33:f5:8f:54:
dd:cd:29:92:87:cd:1e:e0:e5:37:64:27:16:fb:2c:
c8:6b:19:3b:ec:6d:7b:a7:7a:af:e2:b8:d5:ce:20:
f5:c6:96:9f:30:c1:8f:4e:4d:0b:f9:bc:06:36:b1:
10:dd:0d:67:d2:62:22:c4:70:01:6f:36:37:da:30:
85:e6:36:f8:d4:24:f9:62:64:54:97:c0:31:2f:cd:
95:47:3b:39:76:30:27:99:5d:84:3a:f1:15:20:76:
0f:66:09:b0:05:a4:57:45:dd:87:c9:0e:39:3f:32:
8d:2c:5e:25:14:dd:83:c0:b6:b3:b0:ae:9b:39:36:
fa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D1:85:5D:BB:61:84:25:B5:3C:D2:D7:11:75:11:63:C6:61:0B:A1
X509v3 Authority Key Identifier:
keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:2100::/40
Signature Algorithm: sha256WithRSAEncryption
01:bb:11:2f:72:7d:49:ce:8d:4e:1f:eb:b8:40:d5:11:f1:56:
d5:0c:09:76:3a:b5:c2:6e:c8:cf:5f:54:e6:90:c0:1e:a0:ed:
03:9a:fc:5f:bb:e9:5c:48:28:92:08:f8:92:e1:9e:a8:5d:50:
f4:b6:0b:c5:3a:de:be:fe:36:ec:d1:86:a7:07:d3:f0:c9:bc:
35:73:71:66:7b:42:94:75:93:d2:ef:9d:01:32:04:45:94:13:
99:63:97:36:e5:08:3a:85:4b:00:48:86:d8:50:46:c9:1e:92:
3d:f5:42:0d:e9:78:3c:bd:3d:65:93:61:30:6a:97:6d:36:50:
9f:e9:f7:d8:a9:cc:29:ea:0f:a1:bb:81:0c:eb:ff:b2:c9:9c:
d8:8c:95:fb:89:f8:8b:d4:62:9f:d2:5e:96:99:e0:15:de:5f:
8f:56:50:c2:15:8a:84:b6:b7:64:12:32:c5:a1:c8:36:95:68:
1b:02:81:63:94:9e:5f:4e:fe:a6:63:a6:f1:67:5e:0e:2a:72:
e6:65:b9:fc:d1:33:13:e5:c5:ea:ad:96:29:3d:b0:83:81:65:
e4:a9:a4:ed:3d:fd:4a:30:f5:c8:ea:b9:f8:5d:79:ba:f9:ff:
68:41:89:98:39:b2:42:80:1c:79:07:a7:27:ce:c4:ec:1e:8d:
6a:fe:3d:6c
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUCDrnDyRHtyjmvnM/wuSIGZIWcNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG
RjNDMjg1MjAeFw0yNTAxMjIxNDU4MjZaFw0yNjAxMjExNTAzMjZaMDMxMTAvBgNV
BAMTKDdFRDE4NTVEQkI2MTg0MjVCNTNDRDJENzExNzUxMTYzQzY2MTBCQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk94YY5BK6gLIrPn4xk6GXgKiV
CkrfbXd7yNII7Oc1H3Yp6fGDP+AdDZg7O1lOIoS7RoChZ5td7B5B7VSziFGF45GD
oZVFiHZxhQjrHqOr38Xvz08n9rjn2kbekV30ulsQAaMAsEOw/qqZa5xFUoeVENXY
ZPf11k0c4hWIIK2wOC8bM/WPVN3NKZKHzR7g5TdkJxb7LMhrGTvsbXuneq/iuNXO
IPXGlp8wwY9OTQv5vAY2sRDdDWfSYiLEcAFvNjfaMIXmNvjUJPliZFSXwDEvzZVH
Ozl2MCeZXYQ68RUgdg9mCbAFpFdF3YfJDjk/Mo0sXiUU3YPAtrOwrps5NvqxAgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUftGFXbthhCW1PNLXEXURY8ZhC6EwHwYDVR0j
BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx
ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx
NkM2Qjc0N0ZGM0MyODUyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9mYWRlYmI5ZC0zM2NjLTQyOWItYWEzNS0xMDYzNGE4YjFkZDQvMC8zMjYxMzEz
NDNhMzczNTM4MzEzYTMyMzEzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzQz
MDMxMzMzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gSEwDQYJKoZIhvcNAQELBQADggEBAAG7
ES9yfUnOjU4f67hA1RHxVtUMCXY6tcJuyM9fVOaQwB6g7QOa/F+76VxIKJII+JLh
nqhdUPS2C8U63r7+NuzRhqcH0/DJvDVzcWZ7QpR1k9LvnQEyBEWUE5ljlzblCDqF
SwBIhthQRskekj31Qg3peDy9PWWTYTBql202UJ/p99ipzCnqD6G7gQzr/7LJnNiM
lfuJ+IvUYp/SXpaZ4BXeX49WUMIVioS2t2QSMsWhyDaVaBsCgWOUnl9O/qZjpvFn
Xg4qcuZlufzRMxPlxeqtlik9sIOBZeSppO09/Uow9cjqufhdebr5/2hBiZg5skKA
HHkHpyfOxOwejWr+PWw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:00 2025 by rpki-client