Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383030303a3a2f33362d3430203d3e203530333835.roa
File: 326131343a373538313a383030303a3a2f33362d3430203d3e203530333835.roa (raw, json)
Hash identifier: GKSbqc2EIQrCM19Www5xxN1J1RBWqC44Xxl9SbC3jf4=
Subject key identifier: 64:80:6A:88:D4:BA:EE:52:6D:F3:B0:02:00:3C:3E:2F:CC:43:DE:D6
Certificate issuer: /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
Certificate serial: 355A26FBC310700CFADF315F72DFD8D9A83DCE66
Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383030303a3a2f33362d3430203d3e203530333835.roa
Signing time: Fri 07 Feb 2025 08:38:17 +0000
ROA not before: Fri 07 Feb 2025 08:33:17 +0000
ROA not after: Fri 06 Feb 2026 08:38:17 +0000
asID: 50385
IP address blocks: 2a14:7581:8000::/36 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:5a:26:fb:c3:10:70:0c:fa:df:31:5f:72:df:d8:d9:a8:3d:ce:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
Validity
Not Before: Feb 7 08:33:17 2025 GMT
Not After : Feb 6 08:38:17 2026 GMT
Subject: CN=64806A88D4BAEE526DF3B002003C3E2FCC43DED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b5:81:47:a8:0a:d0:f6:4e:dd:be:e5:e9:d6:
c1:19:03:2a:3f:bf:1f:91:b4:42:9b:80:64:d2:0c:
51:57:2c:17:39:0c:7b:49:18:f0:de:61:14:db:61:
26:7c:ae:d9:0a:e7:45:07:8b:5e:98:70:3b:7e:03:
a6:75:2d:e6:90:95:78:83:23:d3:54:95:46:f3:e3:
50:55:04:2c:3a:fe:5d:dc:02:c6:8b:73:2f:a0:df:
4f:67:ca:c7:50:78:0f:b6:f8:1a:bb:16:d2:b6:72:
60:d0:ea:9b:0c:d2:fb:ba:d5:0e:33:b1:7f:af:b0:
4f:be:a4:53:17:f9:81:f7:7c:82:5e:c2:9a:c6:e1:
8e:2e:bd:f4:f8:c3:75:d2:a5:cd:8c:73:fd:60:12:
df:82:48:1b:79:d4:20:50:64:1d:46:32:69:4e:56:
4f:c4:f3:02:76:76:b8:de:1e:15:d9:b9:ef:89:d6:
28:d1:b6:60:06:76:5f:18:42:27:bb:a3:9b:5d:61:
e6:7e:67:5d:c5:02:f6:3b:74:4f:e0:49:4d:7a:fe:
de:f0:f6:8d:cf:77:9b:f1:6c:cd:0f:f0:c5:00:d3:
16:ea:55:52:60:75:ec:5e:60:30:92:78:7a:62:15:
c3:5d:b6:f9:4a:5a:53:56:15:c7:25:cb:42:da:2c:
b8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:80:6A:88:D4:BA:EE:52:6D:F3:B0:02:00:3C:3E:2F:CC:43:DE:D6
X509v3 Authority Key Identifier:
keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383030303a3a2f33362d3430203d3e203530333835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:8000::/36
Signature Algorithm: sha256WithRSAEncryption
06:54:35:10:f4:de:ca:72:fc:60:61:a7:82:c9:89:fc:3f:13:
20:b0:69:f1:52:1c:bb:93:5c:0b:dc:a8:42:ac:f8:50:e7:ac:
a3:05:d7:76:2b:6d:53:53:66:f0:3b:cf:84:6f:85:71:db:b2:
a6:d3:87:a9:8f:be:29:ff:d1:7e:a3:d1:ff:50:90:f5:32:aa:
3c:00:80:82:29:56:32:ba:92:f9:a3:de:69:5d:a2:a2:8e:65:
e0:23:ec:26:75:11:b6:65:c1:70:56:4d:7c:c5:5e:1a:b2:00:
4d:62:7b:03:da:3b:47:59:53:43:ef:20:4a:79:57:5a:7b:1b:
34:f1:b3:02:07:81:f8:eb:47:45:2f:87:69:66:4c:cb:c3:3e:
b7:57:c5:6f:f0:9b:6a:38:9a:5c:00:98:b6:bf:a5:48:51:a2:
22:d9:af:ec:b9:12:16:68:a4:5e:8d:32:fa:95:8b:c7:42:51:
32:d5:54:d4:12:0f:8f:ab:d9:13:6b:6d:9b:78:fe:a5:58:82:
98:cf:26:54:80:c2:80:5b:cc:89:7e:68:1a:77:5c:c6:0d:c4:
0f:53:ea:36:b9:dc:1f:0a:22:7d:c0:02:9d:ff:33:af:2f:43:
3b:0a:09:e0:43:20:cb:84:79:7b:57:35:e4:ba:ae:cb:0a:0e:
16:54:1e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:36:00 2025 by rpki-client