Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa
File: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (raw, json)
Hash identifier: PQEJzzZkaWaRihPz0qFSxn/fBL9FvQBY7Es5NvynDQM=
Subject key identifier: 68:5F:9F:3E:67:05:B2:50:9D:C1:0A:BE:92:7A:B0:30:BE:C2:BD:58
Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Certificate serial: 3F71DED96C04A8A766B7B79467DB9F5BC8CB2188
Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa
Signing time: Wed 22 Jan 2025 15:03:27 +0000
ROA not before: Wed 22 Jan 2025 14:58:27 +0000
ROA not after: Wed 21 Jan 2026 15:03:27 +0000
asID: 401386
IP address blocks: 2a14:7581:2f00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:71:de:d9:6c:04:a8:a7:66:b7:b7:94:67:db:9f:5b:c8:cb:21:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Validity
Not Before: Jan 22 14:58:27 2025 GMT
Not After : Jan 21 15:03:27 2026 GMT
Subject: CN=685F9F3E6705B2509DC10ABE927AB030BEC2BD58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:71:61:55:fc:e8:cf:67:85:15:81:79:80:
ad:e0:2a:50:87:be:e6:61:7a:f8:c5:03:69:45:d9:
cf:6c:ba:4c:1a:88:1c:0f:8c:50:61:49:95:0b:ac:
01:ad:66:03:22:db:f1:83:0c:67:b7:be:08:98:1e:
b6:08:dc:33:a4:ac:e0:6d:b4:34:2d:07:84:3c:49:
29:80:b3:81:ef:72:fc:71:e8:a9:36:89:97:13:97:
df:01:ce:c7:0b:4a:52:b9:9b:f3:90:1b:e3:1f:c3:
e9:3b:c6:bb:29:51:89:23:74:be:56:fa:47:6f:3b:
55:91:f1:9f:a1:fe:af:02:97:20:9a:80:25:41:a1:
84:5a:9a:bf:32:a6:ff:2d:a2:fa:46:39:00:72:bd:
45:75:66:41:34:1c:00:9d:4e:5e:2e:ab:8b:16:73:
42:cc:fa:4e:af:e2:74:85:a2:b6:d5:e1:89:16:b4:
f8:97:6a:7a:ff:e4:ac:36:b8:e5:71:78:0c:6e:7c:
fb:fd:a5:6d:6b:d9:a0:be:5c:8f:16:2d:c0:f4:2b:
dc:e5:f7:3f:5c:02:94:11:bf:72:e6:df:81:00:69:
3c:b5:e3:8f:78:9e:39:dc:e6:f3:8a:42:8a:77:14:
f3:74:06:ee:d2:57:03:9b:23:e5:94:a5:a4:d3:f7:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5F:9F:3E:67:05:B2:50:9D:C1:0A:BE:92:7A:B0:30:BE:C2:BD:58
X509v3 Authority Key Identifier:
keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:2f00::/48
Signature Algorithm: sha256WithRSAEncryption
44:ad:00:ca:03:23:ac:20:75:5f:74:7f:ff:c2:1d:29:5b:99:
ea:bc:96:65:7a:70:53:79:92:9b:f2:ff:65:20:cd:ea:89:47:
45:fa:4e:03:b8:1e:e5:ad:f9:56:8b:07:04:2e:fe:5d:c3:2c:
ba:49:b4:8c:65:30:83:fe:f0:8d:b8:13:a6:1f:6e:05:d1:6a:
55:53:11:85:b1:83:15:7a:b6:4c:8d:81:4d:51:15:1d:f9:91:
2f:21:04:20:7c:52:ba:20:66:38:6b:f8:ad:31:b1:75:c4:36:
9f:be:3f:d6:32:5e:62:04:82:19:ee:1d:b3:2c:03:27:f3:0a:
e8:db:81:36:c3:55:f1:40:75:12:93:ba:8d:b4:f7:28:45:86:
22:0e:09:bc:ec:ca:11:cb:81:62:0e:f8:1b:6a:90:00:74:2d:
e0:09:09:1d:a1:23:6e:cc:e9:1a:c9:29:3b:e9:1e:da:55:14:
32:00:49:a2:a3:22:4a:49:7d:c9:a6:3b:aa:f6:81:a9:46:00:
d0:43:0e:bb:24:75:80:da:24:df:56:af:0f:fa:a9:87:81:8f:
cc:7f:7e:d9:4c:2c:a1:78:c6:15:a7:6f:99:bf:56:6e:60:d0:
1e:83:89:3e:2d:26:7f:27:3c:73:96:01:15:2d:fa:26:27:2c:
cb:24:4a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:04 2025 by rpki-client