Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a6164333a3a2f34382d3438203d3e20323136333131.roa
File: 326130623a346530373a6164333a3a2f34382d3438203d3e20323136333131.roa (raw, json)
Hash identifier: pDxAOCa00XUxi0CPysaIBKKN55EZc5LvYrA7FrzMjsg=
Subject key identifier: E3:42:12:26:12:AF:0D:6E:36:F5:55:0D:15:8B:BD:B8:07:A2:7D:73
Certificate issuer: /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial: 125F7A89F28897D4C1ECB110FA2BD8B0DF1399ED
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a6164333a3a2f34382d3438203d3e20323136333131.roa
Signing time: Thu 25 Jul 2024 11:35:12 +0000
ROA not before: Thu 25 Jul 2024 11:30:12 +0000
ROA not after: Thu 24 Jul 2025 11:35:12 +0000
asID: 216311
IP address blocks: 2a0b:4e07:ad3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:5f:7a:89:f2:88:97:d4:c1:ec:b1:10:fa:2b:d8:b0:df:13:99:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Validity
Not Before: Jul 25 11:30:12 2024 GMT
Not After : Jul 24 11:35:12 2025 GMT
Subject: CN=E342122612AF0D6E36F5550D158BBDB807A27D73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:37:4c:4f:1b:42:cb:24:c5:35:3f:c0:68:
d2:0c:ec:f9:20:88:01:31:a9:28:d2:85:bd:35:dc:
59:55:56:64:dd:4c:95:a6:46:47:fe:9d:5c:66:67:
cf:77:7c:61:13:17:b0:5f:94:d5:3d:e8:08:9b:54:
e8:99:b2:dc:38:38:9a:75:70:f1:b2:1c:b1:71:87:
7a:f4:67:89:14:dc:cd:8d:85:57:7b:9a:b0:fc:c3:
e8:a0:dd:f2:f5:50:a5:0e:d1:83:87:b7:2b:95:3b:
bf:96:ee:9a:b6:86:a3:b0:84:be:53:0f:64:d0:f6:
a7:eb:64:13:ff:4f:8c:8b:3d:43:f1:d9:80:86:e6:
ef:f4:b0:9b:fa:a8:85:8f:98:03:4e:6c:72:b2:09:
53:20:4c:3a:f9:04:3d:c2:14:f7:ba:dc:6f:d8:94:
de:50:50:10:a3:29:f2:cd:c1:eb:07:e5:28:59:e6:
9f:47:78:6f:55:b6:dc:03:3d:fd:48:46:d7:da:82:
27:ba:6b:5e:78:e3:22:fd:1d:dc:6f:3d:05:cd:25:
ad:c8:5c:cb:37:26:4a:a5:5c:35:71:dd:6d:a6:81:
a1:e8:fc:65:fd:1c:5c:db:4c:56:c2:5e:cd:d4:96:
7a:cc:a0:c8:85:79:86:79:f7:e2:06:d6:92:e4:6f:
82:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:42:12:26:12:AF:0D:6E:36:F5:55:0D:15:8B:BD:B8:07:A2:7D:73
X509v3 Authority Key Identifier:
keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a6164333a3a2f34382d3438203d3e20323136333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:ad3::/48
Signature Algorithm: sha256WithRSAEncryption
60:f8:78:f9:8d:c3:f7:5b:c6:e1:88:5c:3b:ec:41:ae:99:cf:
6b:c1:47:31:9c:ff:31:c7:50:6f:81:33:b1:c7:14:68:83:78:
d1:4e:f9:6b:10:b9:64:47:83:89:d9:7f:d5:9f:9f:09:99:ef:
e5:16:dc:12:02:1f:99:d3:dc:fb:d5:74:df:7f:eb:27:bb:95:
dc:3e:04:8c:df:5f:30:a8:32:dc:a4:e5:a3:d9:12:61:bf:63:
67:b6:08:24:f7:6c:ba:21:68:a1:2d:6b:a8:e3:98:03:24:fb:
45:09:3e:9a:f9:91:2c:a4:f4:7d:f9:d3:fb:ee:47:3e:d1:75:
ef:27:46:48:46:4f:9d:61:f9:d3:d3:56:e9:de:28:7d:d8:d3:
1c:46:d3:cf:45:a5:21:ac:aa:f3:6f:6c:cc:49:90:63:d1:e6:
39:c2:2c:b6:29:b3:e8:aa:23:38:53:c0:6a:a0:32:cd:24:da:
00:0f:1d:d4:c3:6b:f9:5c:7d:c9:40:43:51:71:d9:60:f0:1a:
d7:b7:0b:40:f6:19:86:b5:c3:02:8a:a4:f9:cb:64:12:a1:60:
f4:76:b8:cd:04:db:2e:3b:dd:df:bd:4e:7f:ab:cc:c2:e0:d1:
d7:7c:2c:93:ea:62:ca:b6:1a:47:fa:bf:20:48:4a:e8:6b:6e:
20:77:eb:ea
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUEl96ifKIl9TB7LEQ+ivYsN8Tme0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDE4MjA3NDY2QUIwQTdEN0QxRUYzQzdDRDAyRTgwQkVE
NTgzNDBCQzAeFw0yNDA3MjUxMTMwMTJaFw0yNTA3MjQxMTM1MTJaMDMxMTAvBgNV
BAMTKEUzNDIxMjI2MTJBRjBENkUzNkY1NTUwRDE1OEJCREI4MDdBMjdENzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNMTdMTxtCyyTFNT/AaNIM7Pkg
iAExqSjShb013FlVVmTdTJWmRkf+nVxmZ893fGETF7BflNU96AibVOiZstw4OJp1
cPGyHLFxh3r0Z4kU3M2NhVd7mrD8w+ig3fL1UKUO0YOHtyuVO7+W7pq2hqOwhL5T
D2TQ9qfrZBP/T4yLPUPx2YCG5u/0sJv6qIWPmANObHKyCVMgTDr5BD3CFPe63G/Y
lN5QUBCjKfLNwesH5ShZ5p9HeG9VttwDPf1IRtfagie6a1544yL9HdxvPQXNJa3I
XMs3JkqlXDVx3W2mgaHo/GX9HFzbTFbCXs3UlnrMoMiFeYZ59+IG1pLkb4IbAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQU40ISJhKvDW429VUNFYu9uAeifXMwHwYDVR0j
BBgwFoAU0YIHRmqwp9fR7zx80C6AvtWDQLwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGM3MDQwMWMtN2Y0MS00YTZiLTk0MzQtY2M4MGRjYTA5
M2U2LzIvRDE4MjA3NDY2QUIwQTdEN0QxRUYzQzdDRDAyRTgwQkVENTgzNDBCQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04YmE1LTQ3
OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC9EMTgyMDc0NjZBQjBBN0Q3RDFFRjNDN0NE
MDJFODBCRUQ1ODM0MEJDLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8wYzcwNDAxYy03ZjQxLTRhNmItOTQzNC1jYzgwZGNhMDkzZTYvMi8zMjYxMzA2
MjNhMzQ2NTMwMzczYTYxNjQzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz
NjMzMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACoLTgcK0zANBgkqhkiG9w0BAQsFAAOCAQEAYPh4
+Y3D91vG4YhcO+xBrpnPa8FHMZz/McdQb4EzsccUaIN40U75axC5ZEeDidl/1Z+f
CZnv5RbcEgIfmdPc+9V033/rJ7uV3D4EjN9fMKgy3KTlo9kSYb9jZ7YIJPdsuiFo
oS1rqOOYAyT7RQk+mvmRLKT0ffnT++5HPtF17ydGSEZPnWH509NW6d4ofdjTHEbT
z0WlIayq829szEmQY9HmOcIstimz6KojOFPAaqAyzSTaAA8d1MNr+Vx9yUBDUXHZ
YPAa17cLQPYZhrXDAoqk+ctkEqFg9Ha4zQTbLjvd371Of6vMwuDR13wsk+piyrYa
R/q/IEhK6GtuIHfr6g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:20:50 2025 by rpki-client