Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa
File: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (raw, json)
Hash identifier: xASXurrkB21YmULJQ68AjQqXl8iRC/GmjrwM45TRghc=
Subject key identifier: A1:F4:06:FA:E7:9E:B8:FD:4B:BB:2B:55:6B:E7:06:CF:99:09:C5:A4
Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Certificate serial: 5B40BDCBFC308390A87548BE5796380C2470537B
Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa
Signing time: Wed 22 Jan 2025 15:03:28 +0000
ROA not before: Wed 22 Jan 2025 14:58:28 +0000
ROA not after: Wed 21 Jan 2026 15:03:28 +0000
asID: 401386
IP address blocks: 2a14:7581:2200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:40:bd:cb:fc:30:83:90:a8:75:48:be:57:96:38:0c:24:70:53:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Validity
Not Before: Jan 22 14:58:28 2025 GMT
Not After : Jan 21 15:03:28 2026 GMT
Subject: CN=A1F406FAE79EB8FD4BBB2B556BE706CF9909C5A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:18:2b:ca:ab:d8:1b:ec:75:a0:cb:98:91:
70:ea:63:7a:84:4b:49:23:0b:85:e8:1a:94:1c:6b:
e5:b7:76:0f:d3:bf:69:30:e6:ee:8d:63:22:39:8b:
17:2a:a1:a2:9c:97:73:89:3a:da:78:5a:41:a9:ea:
39:b5:da:65:cb:e4:5d:aa:9f:f5:c6:ce:3d:32:a2:
14:99:70:d0:c0:dd:79:aa:8b:0e:35:1e:a6:2e:48:
48:6a:a9:95:de:6f:fa:12:7b:13:3b:91:83:1f:e4:
1a:4c:23:77:7b:3a:8a:71:bb:4d:21:1a:14:e0:76:
4b:90:2e:9b:49:5b:df:c5:11:74:c2:26:dc:d5:0e:
b2:34:9b:47:19:bc:1e:57:4f:a7:4b:6a:f6:c0:02:
eb:91:26:16:7b:73:28:ea:fa:69:2c:eb:1b:34:cd:
4c:e5:ba:ac:bc:22:16:b5:c6:ce:37:d8:2f:ee:13:
15:58:e4:67:fb:b0:dc:8e:5c:8f:ce:2a:25:67:42:
43:ee:dd:76:85:16:5f:e6:07:d8:45:96:70:96:64:
b9:da:5c:7a:30:b6:3c:82:dd:ce:ad:08:14:2b:ed:
bb:8a:b0:d9:7a:64:c0:c6:4b:72:4d:a2:cf:3f:34:
65:82:91:b1:df:d3:90:bb:82:73:13:3e:e1:05:28:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F4:06:FA:E7:9E:B8:FD:4B:BB:2B:55:6B:E7:06:CF:99:09:C5:A4
X509v3 Authority Key Identifier:
keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:2200::/40
Signature Algorithm: sha256WithRSAEncryption
17:82:81:57:a2:b5:75:10:d9:9f:13:56:82:3c:36:f5:85:64:
b5:d9:7d:1a:4f:3f:01:fc:b2:d2:1d:81:0a:ee:f2:ac:a2:12:
da:93:42:22:87:ff:6f:91:0e:8f:ae:3e:26:49:f4:14:d6:b8:
5e:69:1d:45:9b:32:52:a4:31:ab:5a:40:46:a0:fe:41:9d:c2:
f9:6d:cd:63:a6:9e:cb:4c:bf:03:b6:59:b5:12:ee:22:65:aa:
c2:69:d2:81:a0:db:1a:38:09:a6:2f:9e:f1:85:d7:19:42:1c:
62:d4:56:97:61:70:ff:47:21:5a:6a:ce:34:9f:25:42:81:32:
c9:f5:51:94:23:2e:29:b5:8f:f7:7d:6d:96:d6:6f:b6:3e:ac:
5a:f2:e7:88:e4:9c:2c:6f:8c:e5:5f:34:35:a0:cb:94:37:ea:
73:69:d0:74:80:e9:8d:1e:0f:e6:92:b1:b2:3b:6f:04:33:21:
4e:14:5c:52:a7:ef:d3:3b:55:df:fb:17:fa:28:36:20:8c:7c:
42:bf:ab:b2:19:f6:b6:5e:d5:31:62:7e:e9:49:a2:14:1d:2f:
1f:76:b9:3b:0f:e6:cc:77:84:ea:7e:93:1a:a5:43:ba:22:ea:
54:4b:2e:ef:32:df:91:6c:02:63:98:25:b9:b1:56:28:fc:5c:
b6:61:58:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:31 2025 by rpki-client