Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337373a3a2f34382d3438203d3e20323134373537.roa
File: 326130613a363034343a616337373a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier: iiSFqmriZizeiT6Ci19+ARpxevuWwBcsPh/6XkvhKYw=
Subject key identifier: 3E:52:AF:23:DB:76:B4:D9:65:3B:A0:11:B9:CC:5D:A5:42:EA:72:2A
Certificate issuer: /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial: 28EBA3117C237620BF51D2AFDCC9D5B00EC6E429
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337373a3a2f34382d3438203d3e20323134373537.roa
Signing time: Sat 08 Jun 2024 19:01:17 +0000
ROA not before: Sat 08 Jun 2024 18:56:17 +0000
ROA not after: Sat 07 Jun 2025 19:01:17 +0000
asID: 214757
IP address blocks: 2a0a:6044:ac77::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:eb:a3:11:7c:23:76:20:bf:51:d2:af:dc:c9:d5:b0:0e:c6:e4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Validity
Not Before: Jun 8 18:56:17 2024 GMT
Not After : Jun 7 19:01:17 2025 GMT
Subject: CN=3E52AF23DB76B4D9653BA011B9CC5DA542EA722A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:27:0a:4d:fe:c9:56:ec:16:2e:4b:78:be:
97:45:47:57:48:96:ba:8d:25:98:4e:91:52:7b:33:
ec:62:bb:41:89:08:96:ca:3c:0c:59:12:d2:1d:e1:
95:32:de:d4:5f:8c:6e:a4:0c:4d:fe:77:e8:0a:ca:
b3:4e:07:26:2b:b9:1c:47:78:cd:7a:be:98:ed:7e:
2e:26:e2:b7:9b:0b:50:85:f5:de:3d:27:b1:01:de:
7d:24:86:9e:b0:ad:a4:45:93:2d:48:1e:06:ca:ed:
4f:9a:d9:67:22:8f:c3:26:dd:a4:34:56:6f:e1:70:
f4:d1:8f:54:31:8e:a1:3e:0a:b6:74:14:d7:8e:0f:
f1:d2:7b:dd:4c:27:91:85:3f:5e:08:4d:98:be:03:
26:17:c7:af:e1:22:89:9d:c0:1b:f5:89:56:2c:e6:
3a:9f:77:17:a2:88:33:9f:aa:d6:61:48:ab:f5:10:
e8:40:e7:22:04:30:44:e2:bb:0e:53:3d:ed:ea:85:
9f:41:5d:c8:33:fa:fc:94:f1:df:27:d9:a8:f1:33:
2c:22:19:bc:2d:75:7c:c7:bb:d0:57:c9:8d:5d:16:
30:48:54:79:fe:42:47:cf:98:ca:0a:6c:f9:7a:93:
fe:25:31:69:69:07:c0:62:8d:bd:54:06:1e:f2:c1:
b0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:52:AF:23:DB:76:B4:D9:65:3B:A0:11:B9:CC:5D:A5:42:EA:72:2A
X509v3 Authority Key Identifier:
keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337373a3a2f34382d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac77::/48
Signature Algorithm: sha256WithRSAEncryption
48:e0:aa:cb:12:89:58:54:6f:e9:62:f4:cb:7f:5f:58:7a:9a:
8d:75:86:05:17:6f:2b:2b:d3:d3:27:48:7c:5a:d1:17:9d:06:
db:50:17:73:8f:63:c4:e1:81:63:2f:ec:04:f8:4a:1e:b8:4f:
7f:bb:9b:56:7c:35:c7:c0:ad:e9:d9:1a:f9:c8:e6:c4:f8:cc:
ba:37:38:f4:1d:4a:53:97:c5:2d:b1:79:e1:d1:5e:4e:01:83:
18:d2:26:d8:98:72:ab:12:d3:45:66:98:ce:9a:f5:be:ba:54:
05:83:f5:66:30:9a:25:d4:a1:47:0c:84:6b:f2:20:91:22:b0:
e4:2a:45:fd:c1:01:66:e8:cf:7f:e1:b6:66:6c:9f:85:fe:95:
5f:ab:0c:84:14:2e:97:75:3a:f7:8b:e4:b8:4d:c8:1d:07:48:
28:02:4e:8c:51:71:7a:8c:ff:63:4d:c1:e1:cf:c9:d9:c8:21:
7c:eb:4d:2d:b3:2e:ca:2f:e0:fe:a2:10:4a:a2:f6:93:80:e8:
5e:57:2d:d6:94:e4:9f:cc:04:98:80:fc:b1:a3:8b:53:ef:72:
5e:be:20:fa:62:7d:ff:97:5b:74:98:07:c4:d3:51:f7:59:34:
a4:b1:82:8f:3b:d7:6d:63:2d:32:0c:80:01:f7:98:d7:3a:48:
2a:1d:6b:cd
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUKOujEXwjdiC/UdKv3MnVsA7G5CkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURCMEUzNjJBRkJDOTAwMkIyRDU1MjEwMkRBMTFEQTdB
MzQzNkMxQzAeFw0yNDA2MDgxODU2MTdaFw0yNTA2MDcxOTAxMTdaMDMxMTAvBgNV
BAMTKDNFNTJBRjIzREI3NkI0RDk2NTNCQTAxMUI5Q0M1REE1NDJFQTcyMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJycKTf7JVuwWLkt4vpdFR1dI
lrqNJZhOkVJ7M+xiu0GJCJbKPAxZEtId4ZUy3tRfjG6kDE3+d+gKyrNOByYruRxH
eM16vpjtfi4m4rebC1CF9d49J7EB3n0khp6wraRFky1IHgbK7U+a2Wcij8Mm3aQ0
Vm/hcPTRj1QxjqE+CrZ0FNeOD/HSe91MJ5GFP14ITZi+AyYXx6/hIomdwBv1iVYs
5jqfdxeiiDOfqtZhSKv1EOhA5yIEMETiuw5TPe3qhZ9BXcgz+vyU8d8n2ajxMywi
GbwtdXzHu9BXyY1dFjBIVHn+QkfPmMoKbPl6k/4lMWlpB8Bijb1UBh7ywbANAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUPlKvI9t2tNllO6ARucxdpULqciowHwYDVR0j
BBgwFoAUXbDjYq+8kAKy1VIQLaEdp6NDbBwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmQxNGVlZDYtNDhiZi00MTY3LTgxYmItZjY3NWQ2ZjE5
YTNhLzEvNURCMEUzNjJBRkJDOTAwMkIyRDU1MjEwMkRBMTFEQTdBMzQzNkMxQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81REIwRTM2MkFGQkM5MDAyQjJENTUyMTAy
REExMURBN0EzNDM2QzFDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9mZDE0ZWVkNi00OGJmLTQxNjctODFiYi1mNjc1ZDZmMTlhM2EvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYxNjMzNzM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM0MzczNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRKx3MA0GCSqGSIb3DQEBCwUAA4IBAQBI
4KrLEolYVG/pYvTLf19YepqNdYYFF28rK9PTJ0h8WtEXnQbbUBdzj2PE4YFjL+wE
+EoeuE9/u5tWfDXHwK3p2Rr5yObE+My6Nzj0HUpTl8UtsXnh0V5OAYMY0ibYmHKr
EtNFZpjOmvW+ulQFg/VmMJol1KFHDIRr8iCRIrDkKkX9wQFm6M9/4bZmbJ+F/pVf
qwyEFC6XdTr3i+S4TcgdB0goAk6MUXF6jP9jTcHhz8nZyCF8600tsy7KL+D+ohBK
ovaTgOheVy3WlOSfzASYgPyxo4tT73JeviD6Yn3/l1t0mAfE01H3WTSksYKPO9dt
Yy0yDIAB95jXOkgqHWvN
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:44 2025 by rpki-client