Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663030303a3a2f33362d3336203d3e20323135333138.roa
File: 326131343a316563373a663030303a3a2f33362d3336203d3e20323135333138.roa (raw, json)
Hash identifier: 4yp0ESWG8QtoSxC7ED2Iir0aFCTQYQTdLZObzElHUZc=
Subject key identifier: D0:EF:24:D2:8E:46:81:43:E0:5B:C1:58:DA:38:75:36:9B:F3:FF:4C
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 7ADB7842A063DC4ED23E0362873F0FD9C0D81EA6
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663030303a3a2f33362d3336203d3e20323135333138.roa
Signing time: Thu 03 Apr 2025 17:55:28 +0000
ROA not before: Thu 03 Apr 2025 17:50:28 +0000
ROA not after: Thu 02 Apr 2026 17:55:28 +0000
asID: 215318
IP address blocks: 2a14:1ec7:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:db:78:42:a0:63:dc:4e:d2:3e:03:62:87:3f:0f:d9:c0:d8:1e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Apr 3 17:50:28 2025 GMT
Not After : Apr 2 17:55:28 2026 GMT
Subject: CN=D0EF24D28E468143E05BC158DA3875369BF3FF4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:95:af:10:6f:4e:27:53:26:93:c8:0e:1c:cd:
ac:d8:69:39:ad:10:2d:5a:b8:ce:a9:35:1e:fa:63:
27:5b:57:3f:fe:8f:7a:ff:9d:1b:5c:64:6b:b8:25:
f4:21:f1:4e:16:e6:6e:6b:01:af:4d:b3:ec:00:c5:
5d:91:a7:aa:1b:93:72:38:d0:34:26:72:25:28:b6:
37:c9:77:21:d1:a2:7b:07:b0:c3:73:d7:ee:bc:2b:
84:69:db:b6:b8:e7:88:c7:de:5f:8a:35:73:62:9d:
8f:00:a5:c9:ca:02:73:f6:1a:83:9f:93:32:2e:66:
74:b3:d4:25:58:b0:15:64:7e:25:a4:51:05:44:9e:
7c:c2:1d:d4:6d:d4:13:06:55:e9:32:a0:ac:5c:ac:
f0:7b:48:bf:13:a5:75:6a:e6:e1:c8:9e:fc:9e:e2:
f6:3f:e9:8a:fa:f9:98:5a:d3:a4:e1:a1:0f:9b:e6:
92:a4:f7:8c:5d:fa:88:d0:3a:d6:3a:b1:37:32:bd:
65:3f:62:d0:46:bc:ea:3c:24:ec:3a:58:75:cc:4e:
88:af:19:81:05:a7:98:90:ce:a1:75:f7:9a:52:c6:
bb:08:ce:40:c6:f0:ba:d7:af:44:98:cf:ab:95:9e:
5b:b7:14:9b:cc:c0:d8:60:91:30:5b:fb:51:5d:41:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EF:24:D2:8E:46:81:43:E0:5B:C1:58:DA:38:75:36:9B:F3:FF:4C
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663030303a3a2f33362d3336203d3e20323135333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:f000::/36
Signature Algorithm: sha256WithRSAEncryption
19:d0:69:2a:5f:4a:7d:85:2a:da:4b:67:c8:70:c2:42:54:b7:
6c:65:ea:b6:66:2a:2f:4c:e0:60:1a:72:f2:0c:0a:2d:ba:e5:
1c:02:6b:5e:85:12:a5:46:fb:34:b0:1a:04:47:33:22:ca:db:
37:c7:e9:c2:f2:be:cc:58:01:9e:5d:81:d2:d6:6e:e3:be:46:
f8:16:c7:da:68:f5:6e:ba:3c:25:be:14:4d:a3:b6:38:64:a7:
12:c9:cd:3d:e9:b4:8f:de:70:7c:1b:47:c6:b5:7b:f0:9c:9b:
01:67:d3:32:59:9d:77:93:c5:cf:79:6b:37:17:d3:9a:a6:62:
cd:de:69:6e:b7:ff:c6:9b:ad:aa:cc:0e:5d:4a:0e:44:e0:a1:
a8:17:13:b5:66:76:da:30:de:28:1f:8e:36:a0:19:7d:c1:86:
a1:c2:5c:a9:eb:1c:e3:aa:ec:dd:c2:97:f1:7a:5e:12:ad:7b:
ac:4a:99:6e:f7:38:94:1c:f8:56:a9:49:70:1a:a0:ec:34:b3:
25:76:cb:9b:ac:91:aa:66:3e:82:af:2e:95:c4:ca:f2:04:94:
17:26:bc:c4:6e:c9:a6:57:3b:3c:fb:14:d3:45:b5:bf:83:2a:
6a:57:e9:b0:07:5d:7d:d0:f6:9e:dd:ce:31:99:b4:34:a4:a4:
d4:18:34:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net