Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a623230303a3a2f34302d3438203d3e20323136323637.roa
File: 326130363a313238333a623230303a3a2f34302d3438203d3e20323136323637.roa (raw, json)
Hash identifier: xx7ufo+aCaRfzVH62ayXdl/wMwJ3IBee0MlaBlcgG1k=
Subject key identifier: 29:D3:B2:30:04:8D:DA:E8:C8:FD:23:70:14:89:65:86:6C:52:B6:8A
Certificate issuer: /CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
Certificate serial: 2FD591AF77A5FDB60B36452394DC3DF0F5EDC6BE
Authority key identifier: 72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a623230303a3a2f34302d3438203d3e20323136323637.roa
Signing time: Wed 10 Jul 2024 14:12:39 +0000
ROA not before: Wed 10 Jul 2024 14:07:39 +0000
ROA not after: Wed 09 Jul 2025 14:12:39 +0000
asID: 216267
IP address blocks: 2a06:1283:b200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d5:91:af:77:a5:fd:b6:0b:36:45:23:94:dc:3d:f0:f5:ed:c6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
Validity
Not Before: Jul 10 14:07:39 2024 GMT
Not After : Jul 9 14:12:39 2025 GMT
Subject: CN=29D3B230048DDAE8C8FD2370148965866C52B68A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:42:bf:b5:2f:65:08:1d:9d:7c:5e:f6:f1:
20:54:d0:df:43:e7:14:4d:3c:06:9d:b0:05:5b:3f:
b7:d9:05:c9:02:e4:ba:cf:21:39:76:d0:e7:03:78:
dd:3b:bb:cc:74:6b:31:cd:1d:8b:2b:56:0d:bc:8b:
4f:99:2b:c9:1d:93:23:4a:01:28:bb:95:43:23:7b:
90:f7:8b:dd:8b:b2:42:f5:37:9d:51:f3:75:df:3e:
86:28:c0:c4:07:80:00:aa:f3:16:ed:f9:bc:1b:56:
d2:92:5c:33:aa:68:b7:5b:2a:59:8b:fe:e1:ab:ce:
0b:fb:28:19:cd:d3:2a:9b:d4:ac:d8:f8:93:ec:dd:
50:77:b3:62:e4:28:77:20:08:46:5e:d6:6b:ff:0c:
f2:54:9f:95:03:2a:ee:2c:a9:9e:ca:a7:d2:ab:c2:
65:ae:d5:a4:a3:94:c3:76:cc:f0:f6:31:59:50:c8:
f9:9a:4f:46:2b:87:a4:a7:87:6a:49:6f:db:9e:6a:
6a:1e:15:6a:5d:a8:59:b5:27:43:4f:91:01:28:1f:
51:2b:db:a2:f5:7b:71:6d:7f:7c:f7:44:43:f7:b0:
80:83:22:ea:ac:23:e7:e1:f3:2e:bb:86:60:e5:6a:
21:ae:e1:6f:52:44:c4:a2:ef:45:56:b3:34:79:b0:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D3:B2:30:04:8D:DA:E8:C8:FD:23:70:14:89:65:86:6C:52:B6:8A
X509v3 Authority Key Identifier:
keyid:72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a623230303a3a2f34302d3438203d3e20323136323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:b200::/40
Signature Algorithm: sha256WithRSAEncryption
10:51:6e:88:a1:d2:c0:49:ca:11:54:9f:43:1f:1f:be:af:97:
17:0f:36:54:09:6f:b8:ee:a3:40:78:f9:6f:e4:94:89:f5:2e:
0e:ec:64:b4:76:c6:61:aa:42:2d:b2:be:5f:80:3d:11:fa:d2:
03:42:e4:3c:89:57:f4:43:21:2e:b8:8f:f1:df:1a:24:e6:ff:
61:05:32:0c:ca:a3:0e:cb:62:30:b5:6c:7e:c5:7d:21:29:7b:
f2:11:ad:e4:8f:4f:f1:03:1b:fe:a6:ac:33:70:17:ff:be:50:
06:a1:b3:07:ad:f1:a2:85:c4:45:da:64:81:b5:fe:af:cf:4c:
c0:ff:a7:8d:e8:6c:f1:44:3d:ca:18:d6:75:30:59:7a:01:00:
bc:89:c7:80:cd:4f:37:d8:c0:35:fa:0a:74:60:3d:ff:58:6d:
cf:08:f7:20:ae:fa:a8:08:28:bd:3a:0d:3d:f1:9e:60:c8:68:
3f:3d:0f:71:d7:e9:ca:b8:c4:d1:71:3f:7c:3d:c0:e1:49:d9:
44:03:d2:b5:87:62:b0:12:bc:f9:92:39:6b:cd:11:42:19:2c:
f5:3d:9d:e9:20:70:0f:62:82:ce:35:30:d4:0a:d6:22:2b:ba:
f9:61:df:47:0c:dd:d3:91:a3:e5:71:d2:31:8b:14:a0:00:bb:
d5:8a:90:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 17:22:44 2024 by rpki-client on console-fra.rpki-client.org