Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/326131323a646434373a333330303a3a2f34302d3438203d3e20323131313531.roa
File: 326131323a646434373a333330303a3a2f34302d3438203d3e20323131313531.roa (raw, json)
Hash identifier: E6OfMt4uwCRJarrlNBdqCxOBUZBIv0RNsTUYum5wGys=
Subject key identifier: 56:14:B1:D5:7A:3A:1B:44:03:54:A5:97:72:8F:13:85:FE:AA:FD:FC
Certificate issuer: /CN=AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF
Certificate serial: 1EE151AD811E96C10349D39A1138DB4C069F40F9
Authority key identifier: AE:12:47:2D:A1:E0:AF:D2:B0:E9:D5:DC:6F:4E:DE:16:C4:D1:11:CF
Authority info access: rsync://rpki.co/repo/AS945/1/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/326131323a646434373a333330303a3a2f34302d3438203d3e20323131313531.roa
Signing time: Tue 16 May 2023 10:42:36 +0000
ROA not before: Tue 16 May 2023 10:37:36 +0000
ROA not after: Tue 14 May 2024 10:42:36 +0000
asID: 211151
IP address blocks: 2a12:dd47:3300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:e1:51:ad:81:1e:96:c1:03:49:d3:9a:11:38:db:4c:06:9f:40:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF
Validity
Not Before: May 16 10:37:36 2023 GMT
Not After : May 14 10:42:36 2024 GMT
Subject: CN=5614B1D57A3A1B440354A597728F1385FEAAFDFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:a1:30:a3:36:b0:d0:0f:73:d3:40:82:a3:
cf:c3:1d:e4:0a:77:2d:f5:8f:d0:fc:e6:8c:fa:aa:
8b:c6:0e:60:6f:d9:f7:cd:f0:7d:cb:2a:ce:0e:f4:
91:dd:93:14:74:c0:b5:9c:0b:b5:58:df:75:de:81:
21:eb:9d:4a:09:ef:f7:aa:1f:82:1c:27:88:93:f1:
ea:b3:7e:22:1f:10:79:9b:bd:d0:3b:8c:f1:35:1f:
32:5f:7b:73:4a:e6:55:e7:35:27:08:b7:f2:71:a2:
4e:2c:be:0d:28:ba:3d:40:d2:23:57:60:ec:e5:e0:
73:bd:89:e0:65:bf:27:cd:51:74:d0:c0:9b:c6:67:
5d:89:bf:fc:2a:ae:1e:65:d9:62:2e:7a:80:71:ca:
82:ec:11:b6:d2:9c:9e:d9:c1:0d:fa:f4:2a:7c:04:
4e:8f:d8:cd:be:b2:4c:b6:a6:b1:a1:dd:17:82:65:
b0:7d:d1:a1:2a:0a:d2:9d:e0:ab:d3:98:01:4b:3e:
09:85:16:f0:9b:59:58:67:11:e1:eb:f2:d9:0c:92:
16:30:bd:a3:69:78:3a:ba:76:6f:c1:c5:be:e7:c5:
55:9a:d1:d0:11:60:77:53:90:e2:6e:3a:d2:87:6e:
ea:0d:7e:b7:19:08:38:4c:23:cb:75:e6:48:92:29:
a3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:14:B1:D5:7A:3A:1B:44:03:54:A5:97:72:8F:13:85:FE:AA:FD:FC
X509v3 Authority Key Identifier:
keyid:AE:12:47:2D:A1:E0:AF:D2:B0:E9:D5:DC:6F:4E:DE:16:C4:D1:11:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/326131323a646434373a333330303a3a2f34302d3438203d3e20323131313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3300::/40
Signature Algorithm: sha256WithRSAEncryption
5b:50:2e:1f:62:d9:a9:d9:33:3c:97:01:b3:5b:49:dd:1c:e4:
43:04:09:9e:31:f3:59:96:db:ed:b0:9e:58:76:1e:e2:4b:48:
fe:a3:64:5c:ea:69:f4:16:29:b2:a6:c9:f2:b8:c1:50:41:05:
39:96:2c:fa:22:92:11:68:47:42:40:1d:4b:49:58:bd:d0:67:
0f:47:0b:51:9f:b1:e2:3a:c7:31:2a:58:20:01:e6:1e:77:5e:
11:b3:00:e7:f3:36:d8:f4:69:78:b8:52:22:70:26:ec:43:39:
80:90:0b:25:dd:f4:4d:76:cd:69:aa:c0:d5:0b:ed:82:38:7f:
03:5c:19:7b:92:9c:ee:d1:b5:68:ea:8c:60:80:24:57:54:4e:
a7:fa:e4:26:aa:65:e1:8c:ce:5f:34:46:93:ad:56:6f:d9:da:
5e:35:6a:8c:e0:ef:c2:f2:e9:57:d0:6e:d7:81:93:07:d1:59:
1a:87:ab:d7:e5:bc:85:7c:57:b0:ab:0e:a0:c2:14:b3:18:9b:
d3:80:20:f8:40:3f:df:cd:46:18:22:6e:74:4c:a1:a3:75:34:
fc:ab:79:b0:e0:f5:32:05:2d:14:d2:d1:3f:f8:0c:dc:19:f6:
a7:be:6c:d0:a5:5f:18:94:36:53:f3:89:0d:6b:d9:be:d8:f5:
6f:09:c7:1d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUHuFRrYEelsEDSdOaETjbTAafQPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUxMjQ3MkRBMUUwQUZEMkIwRTlENURDNkY0RURFMTZD
NEQxMTFDRjAeFw0yMzA1MTYxMDM3MzZaFw0yNDA1MTQxMDQyMzZaMDMxMTAvBgNV
BAMTKDU2MTRCMUQ1N0EzQTFCNDQwMzU0QTU5NzcyOEYxMzg1RkVBQUZERkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCge6Ewozaw0A9z00CCo8/DHeQK
dy31j9D85oz6qovGDmBv2ffN8H3LKs4O9JHdkxR0wLWcC7VY33XegSHrnUoJ7/eq
H4IcJ4iT8eqzfiIfEHmbvdA7jPE1HzJfe3NK5lXnNScIt/Jxok4svg0ouj1A0iNX
YOzl4HO9ieBlvyfNUXTQwJvGZ12Jv/wqrh5l2WIueoBxyoLsEbbSnJ7ZwQ369Cp8
BE6P2M2+sky2prGh3ReCZbB90aEqCtKd4KvTmAFLPgmFFvCbWVhnEeHr8tkMkhYw
vaNpeDq6dm/Bxb7nxVWa0dARYHdTkOJuOtKHbuoNfrcZCDhMI8t15kiSKaOrAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUVhSx1Xo6G0QDVKWXco8Thf6q/fwwHwYDVR0j
BBgwFoAUrhJHLaHgr9Kw6dXcb07eFsTREc8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm
ODVjLzIvQUUxMjQ3MkRBMUUwQUZEMkIwRTlENURDNkY0RURFMTZDNEQxMTFDRi5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kuY28v
cmVwby9BUzk0NS8xL0FFMTI0NzJEQTFFMEFGRDJCMEU5RDVEQzZGNEVERTE2QzRE
MTExQ0YuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2MxMjgyNzFl
LWMyNjktNDk1NC04N2RiLWQxODRkZjE3Zjg1Yy8yLzMyNjEzMTMyM2E2NDY0MzQz
NzNhMzMzMzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMxMzEzMTM1MzEu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MA4EAgACMAgDBgAqEt1HMzANBgkqhkiG9w0BAQsFAAOCAQEAW1AuH2LZqdkzPJcB
s1tJ3RzkQwQJnjHzWZbb7bCeWHYe4ktI/qNkXOpp9BYpsqbJ8rjBUEEFOZYs+iKS
EWhHQkAdS0lYvdBnD0cLUZ+x4jrHMSpYIAHmHndeEbMA5/M22PRpeLhSInAm7EM5
gJALJd30TXbNaarA1Qvtgjh/A1wZe5Kc7tG1aOqMYIAkV1ROp/rkJqpl4YzOXzRG
k61Wb9naXjVqjODvwvLpV9Bu14GTB9FZGoer1+W8hXxXsKsOoMIUsxib04Ag+EA/
381GGCJudEyho3U0/Kt5sOD1MgUtFNLRP/gM3Bn2p75s0KVfGJQ2U/OJDWvZvtj1
bwnHHQ==
-----END CERTIFICATE-----
Generated at Tue May 27 18:01:26 2025 by rpki-client